Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: NHJ6sA3P0dKfqH6XIcl5wZCy6DgeKyaINS77lvuYqKc=
Subject key identifier: 28:A3:3E:98:E4:0F:9E:8E:E3:07:A2:B5:DD:2D:97:A0:7C:E4:CF:D3
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 01974A0CA630451611296CDFFEAE90570B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 11:00:32 +0000
Manifest this update: Sat 07 Jun 2025 11:00:32 +0000
Manifest next update: Sun 08 Jun 2025 11:00:32 +0000
Files and hashes: 1: Sk4x_HD1LPLgRyf7btPjY4ncmxU.roa (hash: +rugmwU9Eq5brIUvEJKCQXzHVBLNVvEt2u6gto3U47Q=)
2: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: Gf/al+4x+s18nluYOitI42QyexdXZs3nSRxUVjRl1Ik=)
3: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (hash: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a6:30:45:16:11:29:6c:df:fe:ae:90:57:0b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Jun 7 11:00:32 2025 GMT
Not After : Jun 8 11:00:32 2025 GMT
Subject: CN=28a33e98e40f9e8ee307a2b5dd2d97a07ce4cfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:ce:fa:53:46:79:98:ac:3f:9d:49:7f:53:
10:e2:2b:a0:4f:c2:d8:93:2e:c7:27:3b:f0:1f:bf:
14:90:7a:a7:f1:66:ed:72:83:f8:ff:c9:29:87:18:
2b:76:6b:b0:73:2b:12:a7:bc:36:ab:e4:a6:c1:6f:
25:b6:0b:a2:2c:f6:be:57:57:bc:aa:19:c7:ca:df:
85:9e:a4:ad:d5:5c:98:9a:33:33:89:a7:ce:d3:b7:
12:54:ff:c4:dd:8a:14:0c:f4:91:dc:0e:88:89:37:
ab:a2:80:c2:03:be:79:0e:54:e9:4a:58:c0:e1:71:
67:d8:48:a7:a7:6f:91:3c:53:79:1a:fc:2d:6b:d9:
db:ff:89:b3:76:20:ca:6f:b9:1d:10:0d:08:4a:25:
4d:5a:81:a7:00:11:28:ee:c6:86:7f:05:44:c4:bf:
b3:52:d8:03:43:8e:3c:63:e8:ac:4c:c3:18:3a:18:
d5:33:da:d5:1b:6b:ec:3b:1c:96:ba:56:0f:b6:be:
da:62:72:42:11:ed:61:39:65:4f:f1:57:83:f9:b6:
31:07:48:98:47:94:55:50:59:2b:34:b9:3a:3a:68:
e7:79:e5:20:56:7d:b8:96:28:d0:5e:03:19:f4:05:
0c:eb:63:66:f6:b2:0a:81:56:a0:d4:86:c4:57:4b:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A3:3E:98:E4:0F:9E:8E:E3:07:A2:B5:DD:2D:97:A0:7C:E4:CF:D3
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2c:74:9c:50:79:36:4f:0f:9a:c3:08:a9:21:ef:95:f5:4b:
7a:26:31:7d:85:82:3a:a7:d5:81:a0:91:91:2a:f2:8c:f4:84:
b0:f3:52:4f:37:cb:38:9b:dc:72:8a:72:df:69:43:41:a5:77:
5b:db:6c:fb:e2:92:7a:1f:8a:a3:9a:8d:2b:f3:ba:9d:e7:9f:
06:c4:46:a1:7e:d8:42:73:8a:6a:a9:6e:25:80:f7:0b:5d:66:
3e:21:b5:66:d2:ef:4b:f6:25:b0:4f:4b:b2:6c:26:8f:fe:25:
4c:eb:10:b9:5d:6d:9e:01:9b:8b:8d:32:ee:69:94:39:a7:f0:
52:1a:62:dd:e9:9b:ba:c6:2c:ed:d7:f1:16:e2:44:b2:2f:e3:
3d:ec:76:7d:4f:36:02:73:8c:27:55:dc:1d:a6:88:7f:64:61:
cb:5b:67:1f:ee:56:24:60:32:a9:41:9e:cd:8d:23:62:3e:28:
f8:22:ee:00:86:97:6c:c9:a8:b2:8d:08:42:b7:ed:6d:08:a3:
1e:ee:b8:31:60:a3:1a:87:0f:45:54:2e:11:a2:8f:bc:3b:46:
e3:d2:68:1a:14:57:27:92:18:7f:29:99:7c:76:c6:3f:dd:cf:
62:6a:09:1f:7e:df:cc:f7:c4:ca:62:da:cc:77:42:c6:d1:ed:
ac:50:cb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:31:01 2025 by rpki-client