Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: AIy8lM9hOUfvr6/Xr8dAeoWgqWcBtQ+806ZxPUBbQOc=
Subject key identifier: D7:E1:A3:CA:A3:22:B6:FD:DB:70:1A:26:1E:DB:07:42:C9:5D:96:62
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 0197488C89B0AB6A1F42452B9AD00A4EBF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 0609
Signing time: Sat 07 Jun 2025 04:00:59 +0000
Manifest this update: Sat 07 Jun 2025 04:00:59 +0000
Manifest next update: Sun 08 Jun 2025 04:00:59 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: 8l0fhnykel1O4c4D28cN7pth40kIfMFmnUJDVIqNGQc=)
2: z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa (hash: UVS5jjAa9OEvk26uuzlwcbiMZWOU5g+RlzuAxXPKfXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:89:b0:ab:6a:1f:42:45:2b:9a:d0:0a:4e:bf:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Jun 7 04:00:59 2025 GMT
Not After : Jun 8 04:00:59 2025 GMT
Subject: CN=d7e1a3caa322b6fddb701a261edb0742c95d9662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:69:a0:ab:9f:f5:ec:be:9c:26:8e:c4:f9:
b4:59:12:af:8e:7f:76:85:5b:2e:77:4e:9c:fa:a3:
a9:b1:b1:94:ab:97:d5:7f:f8:1b:2e:46:5d:73:d2:
ce:12:89:10:9a:d7:76:3a:a4:7c:f1:39:57:ba:07:
11:e6:a4:04:80:10:f1:ce:99:78:9f:4e:9c:97:74:
70:00:d1:77:60:8e:ca:5d:b4:f7:72:69:02:ad:b5:
4e:58:f0:fc:e4:af:3c:bf:5b:a6:82:fc:b6:08:7f:
8e:5a:32:ea:d7:33:ab:e5:4b:3b:83:71:1f:bc:f7:
2a:9a:4d:3b:47:63:54:a4:6a:cf:6f:15:fa:68:e9:
87:d3:f9:98:3a:46:bc:e6:cf:16:48:df:26:22:df:
9d:95:de:44:02:98:0c:79:81:b3:49:4d:de:e7:e8:
24:33:71:56:ee:45:95:a9:10:b9:0f:b6:88:b1:07:
0c:5d:70:e0:ff:e2:45:71:ee:7e:86:3f:cd:dd:d9:
81:a9:06:a5:70:74:87:85:23:d6:71:b8:61:f2:8e:
39:3f:09:ad:30:71:91:69:02:4b:43:b3:89:05:e3:
63:23:25:ab:2c:13:2a:ad:3e:7b:8b:74:3c:bb:f6:
d2:d2:c1:07:4e:8c:f4:28:02:25:34:06:ab:99:de:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E1:A3:CA:A3:22:B6:FD:DB:70:1A:26:1E:DB:07:42:C9:5D:96:62
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4a:16:d2:fc:96:16:61:4d:f0:09:4b:54:3a:f6:b2:a1:91:
bb:72:58:79:37:58:4e:e1:99:dc:29:b2:f2:11:8b:20:40:30:
50:2f:23:b3:14:7f:54:2d:9e:fc:40:e7:3f:c2:cf:91:e7:f6:
e3:85:5d:75:24:c0:d3:6c:58:de:17:f6:3c:d7:4a:ba:2f:a6:
e1:10:99:ef:78:d8:63:a4:b3:a4:6b:48:37:0f:bb:9f:d3:0b:
55:3d:b7:bf:af:b6:7c:b1:f8:8a:13:35:b0:5e:59:a4:3e:28:
c3:6b:d5:88:99:95:67:0d:b1:4d:50:18:00:f2:85:f0:c9:74:
e6:52:67:57:03:16:a8:04:67:75:da:d5:1b:de:99:83:8c:c6:
16:d6:75:cf:21:4d:8f:dc:c3:50:32:24:8a:64:70:1f:aa:b6:
5f:6a:69:d8:e9:9c:33:ff:fe:ae:a2:67:e8:f0:f4:85:05:3b:
dd:79:89:fd:87:1a:0c:2a:7d:49:cc:6c:85:95:4d:97:9d:c8:
28:0a:33:1f:87:1f:91:1c:6d:63:c5:d5:d9:66:ba:79:a1:9b:
45:08:a0:f8:68:a0:35:4f:36:50:2f:f2:cf:24:e2:ca:ab:7e:
49:84:a3:8f:01:20:a0:82:8d:b1:52:28:4d:22:68:75:50:35:
d7:cf:fc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:46:19 2025 by rpki-client