Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: U0B/gXlsaUfu0tjelWu8ZHR1tYojsptEXPl82+CzMkk=
Subject key identifier: BD:44:A2:A3:4D:8A:B9:8D:E5:5B:95:3F:A9:A6:17:3D:B2:49:32:48
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 01974BC47326897961EC111A111BFFAA6C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 19:00:55 +0000
Manifest this update: Sat 07 Jun 2025 19:00:55 +0000
Manifest next update: Sun 08 Jun 2025 19:00:55 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: NAug6bmowLulamMUhjMHMTUjgt30pCSpJi8uI/B6+/E=)
2: 2dNcgj6MvN9n_fYFlGVJH7IP5P0.roa (hash: NdXmI8eBdfB68znJPh1CIG8Aqd8Jvbrd0RbmQ639jeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:73:26:89:79:61:ec:11:1a:11:1b:ff:aa:6c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: Jun 7 19:00:55 2025 GMT
Not After : Jun 8 19:00:55 2025 GMT
Subject: CN=bd44a2a34d8ab98de55b953fa9a6173db2493248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:8c:bd:8f:6a:58:20:61:10:ea:a5:e1:4f:
51:54:15:5e:86:8f:9f:d5:bc:32:b7:0f:47:68:ab:
4e:52:51:67:41:0b:8c:85:f0:68:4f:4a:80:bd:bc:
33:78:14:2d:02:a8:90:6a:fc:26:ef:90:c6:17:d9:
5a:c9:1b:7c:99:34:a2:1e:a5:ee:05:01:64:c7:1d:
a2:c3:48:12:8d:03:89:a7:ee:91:cf:d2:1b:05:15:
0d:db:b5:14:e9:9c:e2:c7:1a:87:e6:fd:a1:55:ca:
ab:50:64:ce:e4:05:74:8e:1b:52:be:bc:c2:bc:d6:
63:f7:f0:61:09:b5:80:75:d4:88:48:59:f3:02:cf:
0f:7e:11:66:be:af:5f:33:48:03:6e:84:45:68:90:
f5:8a:2a:7a:89:71:17:fe:9a:7d:dd:e9:55:8b:ee:
7d:0b:f9:17:14:3e:33:69:5d:a9:0e:f9:00:c5:3c:
00:7a:5b:6a:bd:9c:58:35:1d:87:54:7e:c2:8e:37:
1d:31:7e:f6:8e:19:59:4d:fa:5b:fd:f8:08:50:85:
7b:05:64:83:ea:a7:5b:42:d5:39:6c:dc:32:c3:94:
7c:da:87:74:fd:b1:dc:53:01:1f:53:47:a2:88:80:
74:13:3b:fa:50:5f:a0:50:d1:1d:cc:1e:bc:69:c2:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:44:A2:A3:4D:8A:B9:8D:E5:5B:95:3F:A9:A6:17:3D:B2:49:32:48
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:96:9f:31:81:6f:fc:d9:4e:26:a1:05:d0:ba:11:30:67:3f:
28:e4:46:b0:51:6d:c1:18:80:ec:9e:a3:fe:43:61:67:78:a7:
73:e2:12:af:1a:61:56:5c:3c:10:57:69:cd:f2:ab:41:81:02:
0c:58:6e:77:ae:3c:64:61:94:d6:21:bc:b2:b7:cb:04:08:34:
82:56:a9:c6:68:9d:64:34:b6:e3:72:ca:5f:a6:40:47:0b:d3:
8e:79:12:dc:fe:ca:cb:72:2d:41:3e:88:d4:82:85:fd:68:83:
9c:b5:c5:fd:94:50:4e:a3:57:ff:e3:6b:29:41:bb:0f:03:9b:
18:ab:77:77:10:2f:6e:cc:29:50:df:e8:22:2b:d3:16:a0:f1:
36:3b:16:53:07:0c:0b:61:4a:96:3d:22:a1:97:d4:f6:21:6f:
d9:83:76:ad:67:17:d8:73:81:79:46:6c:28:1b:20:db:86:88:
86:e2:ec:d6:51:61:9d:8c:db:a0:32:a1:13:7c:8b:5e:89:4f:
a3:6a:4c:a4:da:6f:7c:b2:97:3f:1f:26:83:63:aa:0a:9c:c1:
27:6c:f5:c5:f5:f2:ac:42:52:0e:57:6e:0f:39:27:d5:ca:06:
d6:3d:3a:4f:e8:eb:a5:94:5a:98:a5:c7:d4:12:2b:db:df:84:
ea:39:f3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:19 2025 by rpki-client