Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: WNwajmAjFa08+2ulTmjq7ZrP0/QVh6bfUVrMNMmNHTw=
Subject key identifier: 2B:EE:C5:24:32:00:7F:DC:DD:7D:B9:BB:24:66:59:7E:02:6A:A8:21
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 01975CEEA30D9952ABAD6941C30A4B523B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 128E
Signing time: Wed 11 Jun 2025 03:00:32 +0000
Manifest this update: Wed 11 Jun 2025 03:00:32 +0000
Manifest next update: Thu 12 Jun 2025 03:00:32 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: Ql4pP8eFXDUt56FpA5rIpjM81nHMfUDj0HRn+CganVo=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
4: WOXWvBeCokpSOHl_JrntVW9NKAM.roa (hash: eB6i8745ycqxVgNK38j0RIcjXGqo0GZI7gH9QRyDDJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ee:a3:0d:99:52:ab:ad:69:41:c3:0a:4b:52:3b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Jun 11 03:00:32 2025 GMT
Not After : Jun 12 03:00:32 2025 GMT
Subject: CN=2beec52432007fdcdd7db9bb2466597e026aa821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a9:3e:2b:b2:ca:6e:16:16:3d:3e:7c:4f:2d:
85:84:90:c7:a1:56:d7:de:d0:24:25:97:32:5b:54:
de:19:da:fb:ab:dc:73:1f:11:06:56:6d:ae:8a:20:
4a:e8:47:9d:58:2a:81:55:83:ce:14:f3:05:4f:bf:
b3:60:bf:03:51:6d:7b:d1:94:a6:0d:09:53:0e:97:
ef:60:42:c5:e1:6e:20:d2:f3:5d:a0:21:a4:b9:fa:
f5:bd:42:0e:4b:3a:7b:1c:8a:6b:e2:4f:38:53:e9:
76:8c:62:9b:3a:70:40:61:b2:84:91:8e:d3:82:67:
e7:70:21:0f:1c:e5:19:8a:cb:bf:5e:fd:c3:3a:90:
25:3b:d3:8c:c1:8e:7f:c0:3d:30:8f:97:8f:10:2d:
bc:c1:7c:a8:64:3b:84:27:ae:98:0f:e2:01:e9:88:
f9:12:c4:31:7e:b6:c8:69:c8:16:97:e3:69:fb:87:
d6:30:a0:d5:2c:75:7a:2d:07:16:d2:e1:15:06:2e:
4a:93:8b:2e:95:32:15:b8:6d:52:a5:0e:33:50:9d:
91:cc:4f:6e:67:5e:80:71:9d:7c:c7:01:66:04:09:
f0:10:a4:17:1f:21:4d:d3:1c:d9:bb:a4:8f:68:ef:
1c:29:9a:f3:15:1b:d4:6f:21:7e:85:eb:51:39:b3:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EE:C5:24:32:00:7F:DC:DD:7D:B9:BB:24:66:59:7E:02:6A:A8:21
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:71:4a:c4:d1:1c:ca:5d:b5:36:6d:d8:fc:8f:3e:3f:1f:07:
09:78:07:10:c2:d2:44:62:b4:ac:53:29:d3:01:cd:ea:10:1b:
11:12:24:9b:fc:dd:2d:d1:4d:9a:10:0f:e0:31:51:8a:47:5f:
3b:a7:8c:04:c1:70:cb:25:f4:ba:77:49:38:fb:38:54:ba:ef:
93:3b:85:1d:1d:33:be:35:fe:cf:69:d3:92:34:54:33:a6:8f:
17:a8:af:63:08:b6:58:b0:d5:6c:47:a4:98:19:d1:cd:89:4a:
50:fc:7e:96:65:ca:d0:c3:a0:30:d6:44:eb:06:9d:59:a1:41:
0e:00:9e:11:7b:fa:17:54:6f:8c:cf:8f:25:e6:90:f1:de:33:
4f:a9:db:ea:5a:43:99:3f:d1:bd:f0:5b:59:48:02:a8:bf:96:
bc:4b:a5:24:fd:8e:ae:7a:3c:c9:d6:d0:1f:10:5c:d8:f3:2b:
93:c9:07:49:8d:16:e0:69:38:dd:b0:38:fb:8b:ff:f9:d9:3c:
f2:b2:59:ee:5f:7d:5e:e6:98:b9:51:6d:19:4f:28:36:40:c7:
3b:62:32:d2:6b:5c:71:53:ba:26:8d:ad:24:78:01:bf:fc:48:
e9:e2:95:0c:f7:c9:ea:21:fa:14:8f:d5:22:e8:0b:c9:9f:92:
1d:e5:db:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:29:28 2025 by rpki-client