Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier: Fv7tMX0PdQ7xbJNmaQH+TWRyDiJ3HNnw6IvsvE6vNJo=
Subject key identifier: 3B:4A:8E:5D:B0:10:E2:FA:53:4E:FF:21:89:4A:53:2F:3C:7A:AC:DC
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial: 0197499EE5C568C549F826987B08A4D764B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number: 8D
Signing time: Sat 07 Jun 2025 09:00:39 +0000
Manifest this update: Sat 07 Jun 2025 09:00:39 +0000
Manifest next update: Sun 08 Jun 2025 09:00:39 +0000
Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: bNZYpTTm0Vq1VsA3e52mxNFReiMWtzpxIVPUdp572Co=)
2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:e5:c5:68:c5:49:f8:26:98:7b:08:a4:d7:64:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
Validity
Not Before: Jun 7 09:00:39 2025 GMT
Not After : Jun 8 09:00:39 2025 GMT
Subject: CN=3b4a8e5db010e2fa534eff21894a532f3c7aacdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:db:d8:5c:2a:da:83:cd:6a:26:4b:4d:4d:
d4:c8:e4:de:92:8e:56:cd:97:d2:80:a8:b1:93:ef:
b4:a7:6b:3e:91:fd:a7:25:75:a9:e3:aa:3a:7a:63:
b5:35:3f:08:9a:b3:85:6a:ad:83:86:ea:94:dd:c4:
d4:99:51:a1:06:e5:e0:da:24:ab:a8:c2:6d:f6:ba:
34:31:55:29:1d:e8:1d:8a:87:25:0e:16:72:4c:1c:
5b:d4:e6:4c:58:99:92:eb:10:e8:1d:a5:19:3c:07:
91:49:3a:c3:fc:a7:11:72:ab:ba:a2:0c:0f:cf:48:
06:70:8c:ce:27:4b:6a:ad:5d:d8:75:b7:57:14:23:
f9:2b:68:fa:b2:79:65:c6:ee:04:d0:49:87:7b:52:
fc:25:29:4e:77:ae:d4:2f:90:59:ae:b1:f4:b6:d7:
25:18:b6:ed:68:02:58:8c:e5:73:ba:36:eb:37:71:
14:58:09:29:3b:0e:5f:be:02:aa:d9:42:6f:85:c4:
2d:8c:3e:ec:48:ec:65:68:c3:1f:4e:7c:5e:ba:31:
30:4e:cc:cc:46:bb:17:12:5c:e6:80:9a:29:0f:8a:
87:b9:75:5b:9f:8d:75:5a:16:b3:4b:f8:38:74:65:
7a:ce:ee:4a:f0:53:85:89:ec:f0:29:c4:f4:51:32:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4A:8E:5D:B0:10:E2:FA:53:4E:FF:21:89:4A:53:2F:3C:7A:AC:DC
X509v3 Authority Key Identifier:
keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:c3:e5:19:4e:6e:ae:d3:f9:58:fe:a8:61:01:f0:0f:c0:
02:07:09:aa:b2:c2:1a:24:c9:74:09:39:f2:e1:da:60:f4:43:
7a:7a:6a:32:8d:0a:46:49:2f:e8:28:a5:08:5a:b0:70:94:41:
70:4f:d4:7f:3b:5b:ae:8b:f9:f6:c5:23:6a:db:4e:d8:ba:f4:
e1:5d:f4:4d:dd:bb:36:23:97:1a:f4:b5:02:b7:06:32:70:84:
70:3f:5c:19:3d:64:07:d2:82:eb:54:02:64:cd:a8:f0:03:f4:
20:cf:66:c2:1a:82:09:d6:a2:ef:d0:1b:0f:d8:84:73:61:7e:
f4:6b:d5:eb:26:cf:51:19:33:b7:9d:8b:19:d2:a6:eb:eb:d0:
eb:57:d4:4d:8d:2d:24:19:0f:da:50:49:f6:f1:dc:29:80:47:
53:d0:c5:4e:26:10:19:26:37:81:a4:2e:c4:28:f3:63:0f:b8:
c4:5b:eb:a0:b0:e1:7d:ae:c9:dc:b2:a9:a8:44:ba:73:3b:53:
90:1b:75:20:dd:37:12:f0:58:6f:66:09:37:db:54:89:d1:4e:
e0:b3:e5:79:f8:93:46:c8:df:9a:ae:3d:9b:a7:ef:2f:85:2f:
e3:e5:69:7d:80:8d:87:89:ee:8f:7f:c9:a7:4b:bd:81:2d:cd:
18:99:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:02:41 2025 by rpki-client