Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: EpIc4Ybte0xha0hOGXHIhgdWdkjeb3mwLTkuFaULk7Y=
Subject key identifier: 4A:EE:2F:7E:42:87:DE:96:BB:E5:F2:CD:D7:0B:40:39:D5:C5:10:C7
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 019748F9E6584FE70924AD8F8E9320FF76C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 05AF
Signing time: Sat 07 Jun 2025 06:00:26 +0000
Manifest this update: Sat 07 Jun 2025 06:00:26 +0000
Manifest next update: Sun 08 Jun 2025 06:00:26 +0000
Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: KVLrGTF3rsGa+v0wR4apjzsiSXaueoHx68PKvlwEaw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e6:58:4f:e7:09:24:ad:8f:8e:93:20:ff:76:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Jun 7 06:00:26 2025 GMT
Not After : Jun 8 06:00:26 2025 GMT
Subject: CN=4aee2f7e4287de96bbe5f2cdd70b4039d5c510c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:37:26:3c:eb:e1:66:db:a4:3a:73:9c:53:
11:f9:00:ae:53:4d:35:67:bd:ab:60:99:cd:76:5c:
d3:85:72:de:35:4f:9d:00:31:48:f7:5f:e7:75:cf:
5c:dc:72:9d:67:80:99:00:8e:2d:f9:ba:3f:ec:6e:
7d:39:9b:78:21:70:9e:74:7a:f6:e0:fb:ff:f3:e8:
9c:ed:aa:e0:03:ac:2d:81:26:fa:71:f3:60:53:03:
78:32:fd:04:d0:77:cf:b4:e6:5d:79:00:e6:5a:7f:
b9:45:a6:f4:31:9d:91:70:f0:e6:14:3c:85:41:4c:
09:fd:36:37:54:93:62:ef:18:21:11:d1:28:ce:63:
41:64:d4:89:b9:43:fd:22:87:6a:af:f3:6c:d2:15:
21:5b:11:86:e4:44:39:cb:54:f9:32:bb:41:e6:5b:
f8:bf:cc:75:15:86:f7:6b:c2:7c:6c:59:03:6d:a4:
a6:cd:09:d6:27:86:97:74:e2:34:31:dc:bf:f6:14:
9f:80:a0:6f:af:4d:45:43:5b:cb:77:54:2c:f2:57:
bf:65:a2:0d:5c:cd:11:ed:27:5e:3b:b3:dc:7a:f7:
f5:ef:c3:be:fe:14:44:af:6b:3d:45:21:55:6e:37:
6e:b4:30:b3:c9:76:56:eb:e4:12:3c:00:37:92:e5:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EE:2F:7E:42:87:DE:96:BB:E5:F2:CD:D7:0B:40:39:D5:C5:10:C7
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:78:e7:f0:f4:3c:d3:50:6c:48:4b:ae:4f:8e:1c:15:53:
1f:7c:b3:ad:69:81:1b:76:7e:13:9a:da:dd:83:1b:81:82:c4:
c5:8d:60:05:99:c9:50:83:f6:2a:d5:c9:0b:74:c5:ad:45:e0:
1a:ca:8f:fc:bf:33:49:83:bb:16:72:b4:22:10:c4:7a:15:c0:
e7:5c:7d:9d:2a:b9:54:29:9f:47:a4:7a:05:ec:68:0f:89:f9:
3b:79:c3:59:1b:a4:5c:51:5c:5d:e4:ca:03:31:bb:79:9d:fb:
94:37:e6:15:b8:9c:3e:c5:f8:dd:7c:b5:ff:54:6c:00:e7:86:
17:38:03:6e:ea:15:c8:f4:89:4c:3d:2b:dc:23:2e:31:bc:fd:
ad:35:a2:99:ef:93:6f:6e:4f:d9:a0:d9:70:6c:a0:49:25:79:
f1:5e:c0:49:82:2c:17:e9:89:29:16:a2:53:34:d1:bc:22:27:
46:7f:05:ef:ee:5a:e1:6b:17:30:a4:6d:b9:79:ca:88:0b:4c:
28:11:fb:e4:4b:1d:cc:c4:d3:16:f3:16:74:1f:4f:9b:f7:fd:
cc:18:cc:38:e2:34:e5:02:90:92:92:54:41:0b:2d:75:9c:6a:
6c:12:3b:c4:25:c9:91:0f:a6:26:16:26:a3:e9:59:1a:19:e5:
4a:d4:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:32:49 2025 by rpki-client