Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: r2u1FMyeBwM8emZqtDtPbEUYHPS0oAYLNk9JbW0wS+o=
Subject key identifier: C5:4D:94:24:BE:80:B1:28:FB:A1:4E:63:12:3A:57:7B:47:E2:CA:32
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 019745F9452A4A5AE3553B4951B5EEE052E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 16:00:53 +0000
Manifest this update: Fri 06 Jun 2025 16:00:53 +0000
Manifest next update: Sat 07 Jun 2025 16:00:53 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: MmCxEkpUp6FhpCSZdSsE08GviDtbi596BoCBwIlI12I=)
2: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (hash: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:45:2a:4a:5a:e3:55:3b:49:51:b5:ee:e0:52:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Jun 6 16:00:53 2025 GMT
Not After : Jun 7 16:00:53 2025 GMT
Subject: CN=c54d9424be80b128fba14e63123a577b47e2ca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:47:2f:e1:3b:d1:b2:f8:ea:50:ab:74:69:
f2:de:ff:ba:40:5f:63:2f:ba:dd:e9:19:63:82:a7:
52:dc:7c:b9:f1:6c:a3:3b:09:50:b6:f4:f3:b1:aa:
29:7a:ae:65:4e:fe:24:92:34:96:ce:b9:8e:12:19:
9b:a4:05:50:e4:f1:be:c6:65:f3:d8:3f:96:21:67:
24:e3:e2:d2:2a:b2:02:b5:13:c3:3a:9e:a6:a3:ac:
c5:a1:0e:d4:72:63:d8:0f:85:3e:e8:5e:97:75:c1:
8d:73:59:f5:19:e2:9c:ae:46:31:8f:a5:5a:7a:46:
11:e9:7b:d3:b9:38:5b:14:20:7b:30:ce:9f:d7:fb:
a4:6b:54:34:7b:e0:58:83:f8:5b:b6:2a:30:6a:d8:
37:b6:09:22:fe:ec:26:71:65:da:46:88:5a:6b:f0:
31:26:cb:48:f1:b8:7d:3c:26:e7:fc:24:f8:fb:dc:
49:48:5a:73:b1:9d:ae:65:d4:5c:db:46:ad:76:43:
cd:91:fd:f7:b6:4d:77:ee:61:ae:a7:0b:47:ca:50:
94:79:39:c3:68:53:de:56:0f:b6:c0:90:1d:29:4a:
6c:a6:5b:c7:04:b9:02:e6:97:af:eb:94:b7:cf:97:
9a:b9:25:e6:14:59:41:0c:62:5c:a1:ca:c5:28:84:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4D:94:24:BE:80:B1:28:FB:A1:4E:63:12:3A:57:7B:47:E2:CA:32
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:31:65:f5:e6:50:92:b4:fe:4c:18:4d:12:bc:f1:b0:88:0f:
94:04:2f:74:89:c5:13:1f:60:42:b7:92:55:59:cf:03:fe:48:
86:b6:f4:b8:6c:71:09:af:0e:42:88:66:23:19:2e:80:d6:de:
bd:91:cb:06:80:02:74:5e:77:cc:35:f9:f1:92:2b:41:67:0c:
11:b9:00:b2:7f:a3:1c:76:c6:54:e8:0c:39:66:8a:ed:f8:1e:
a4:9d:81:27:f8:13:96:3c:1a:2f:01:bc:3d:da:cf:13:f2:fd:
8d:bf:bd:c7:c6:bc:81:15:5f:86:28:3e:da:6f:09:8d:46:1b:
11:ae:33:27:df:4f:9f:83:1b:fa:68:9a:0d:f8:10:ee:7a:c2:
55:f0:7d:aa:4b:48:5e:00:ef:87:da:dc:d9:e5:34:91:d2:23:
5f:63:a7:42:22:44:03:a8:8c:9e:b6:32:c4:c4:2c:45:f2:90:
77:ff:04:85:b0:be:0d:2a:90:e8:00:7f:67:ff:a9:50:44:5d:
20:44:c1:8a:28:46:00:1a:46:f3:3c:96:5a:95:7b:9f:c5:44:
b3:3a:c6:59:74:78:2f:07:8c:59:ef:d4:7b:a0:d5:14:8c:84:
8d:f5:2a:fd:b2:b4:30:3f:c9:f6:06:a9:58:6a:8a:18:d3:f4:
c8:20:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:28 2025 by rpki-client