Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: Rt231S16TZrw3H7wdMtPJpeB8q0P7C4FPMHBt/nfk68=
Subject key identifier: 88:D6:82:C6:58:39:68:83:3D:19:14:CE:6B:E7:EB:3A:8C:22:4E:1C
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019747B0DC0E4789668D1E95BD460119C273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 00:01:02 +0000
Manifest this update: Sat 07 Jun 2025 00:01:02 +0000
Manifest next update: Sun 08 Jun 2025 00:01:02 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: JTYf/z9agQD6Nc9Mz67pIVWrhUAjAD0WmlccyvEiJ+A=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:dc:0e:47:89:66:8d:1e:95:bd:46:01:19:c2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Jun 7 00:01:02 2025 GMT
Not After : Jun 8 00:01:02 2025 GMT
Subject: CN=88d682c6583968833d1914ce6be7eb3a8c224e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:6d:a8:31:86:1d:35:d0:e1:e5:cb:cd:c6:
86:93:a5:4b:6a:26:5a:21:0f:61:78:9c:2e:5f:ee:
8e:43:46:08:a6:ca:e4:5c:98:5d:a5:7d:47:e5:12:
27:73:37:9d:15:1b:c1:ce:d0:7d:0b:ab:2b:e9:cf:
dd:6c:11:02:8e:7c:37:13:1b:c3:18:2f:3c:d0:5a:
dd:7b:cb:6d:8c:81:75:a9:b4:13:26:b4:a5:c5:05:
51:02:12:ed:9d:a1:33:b8:0b:67:a6:81:58:0e:b7:
90:0c:1f:c9:93:8e:25:ed:aa:be:6d:db:e8:20:68:
a9:e6:b1:8c:8f:18:6a:28:cf:80:61:8e:17:67:b7:
c3:59:21:0a:ad:ba:e1:3f:d3:92:61:99:07:3f:ab:
75:62:d9:42:4d:ec:25:06:d1:13:34:14:45:a6:4b:
89:66:d3:a0:3e:6c:38:84:a5:19:6a:b5:1a:11:1f:
89:12:72:e5:52:1f:fc:58:d0:aa:44:c8:6b:ca:c4:
d6:f0:ee:cf:65:74:19:f1:04:a6:d4:d5:06:9b:f5:
bb:18:14:d0:f1:70:5b:2a:e2:41:74:f3:2f:2d:1b:
b9:d0:64:f2:47:44:cf:ed:4b:29:b0:2f:54:25:3d:
7b:f6:80:48:c8:45:a4:e7:7c:03:83:dc:b1:05:63:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D6:82:C6:58:39:68:83:3D:19:14:CE:6B:E7:EB:3A:8C:22:4E:1C
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ae:87:89:89:fb:0c:af:78:12:8d:67:a5:0c:71:14:2c:f2:
e5:e0:bb:b0:dc:11:ba:21:3b:b6:04:4e:b0:8d:9d:57:5b:2b:
f2:49:73:b1:a2:72:26:54:7c:af:fc:8f:60:e4:18:14:f1:aa:
19:7d:cd:78:91:ed:65:f2:3b:64:c0:b6:0e:81:c9:a2:07:8d:
61:af:81:5e:44:19:c7:8b:bb:43:5e:dd:9c:a9:b7:b1:f8:d7:
30:4b:da:0c:ca:cf:44:0e:b0:d5:52:b2:9a:4f:35:df:f2:13:
d5:2a:09:96:be:c9:f3:93:3d:a4:0a:4b:49:9a:f7:af:ec:56:
32:fa:90:42:ce:d9:2b:03:09:ba:85:dc:72:aa:d7:ca:7a:ce:
f7:50:d1:d5:66:5a:4b:c3:50:1b:6a:fb:e4:8a:ba:fa:87:f5:
a5:ab:39:e3:7d:30:2e:47:e7:67:18:1d:9f:66:5f:1c:89:a9:
1d:fa:e1:4a:38:9f:99:17:ac:51:15:44:f4:32:ce:a8:5d:17:
33:7e:d2:8d:7e:51:47:1a:98:e1:ce:4f:87:fb:82:73:04:db:
a7:1b:2b:bf:b1:d0:63:62:6c:60:71:3d:af:0d:fe:86:25:c6:
3f:e0:87:09:b5:07:ae:c9:81:26:3d:1a:6f:e4:37:cb:76:c1:
cf:77:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:08 2025 by rpki-client