Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: UBGGZuBMlCUfpSA3qf5mgtXyO5awSo0WIqButD/w9R0=
Subject key identifier: 70:9E:E4:43:5A:EC:3C:B6:59:20:78:CE:A9:4D:19:50:E7:5E:4F:74
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 01976E50243EEAEF957202356C52D57204D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 1297
Signing time: Sat 14 Jun 2025 12:00:35 +0000
Manifest this update: Sat 14 Jun 2025 12:00:35 +0000
Manifest next update: Sun 15 Jun 2025 12:00:35 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: aohq1Qjy+QhN6nIIzMMTSeCL59R7990duMTsOSJO9UU=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
4: WOXWvBeCokpSOHl_JrntVW9NKAM.roa (hash: eB6i8745ycqxVgNK38j0RIcjXGqo0GZI7gH9QRyDDJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:24:3e:ea:ef:95:72:02:35:6c:52:d5:72:04:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Jun 14 12:00:35 2025 GMT
Not After : Jun 15 12:00:35 2025 GMT
Subject: CN=709ee4435aec3cb6592078cea94d1950e75e4f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:9a:e2:66:71:63:93:e8:f7:8f:4a:d9:33:
d7:46:31:d8:e2:8b:09:e0:64:2f:8c:63:44:5b:e1:
28:ee:78:6a:26:cc:0a:90:ff:be:ce:af:0b:2f:ea:
32:6e:d9:05:19:cc:15:00:67:4d:0a:73:a5:ad:e6:
3f:25:70:8d:0d:bc:7a:0b:b3:6a:26:d3:8d:fc:96:
8a:fe:f8:ae:50:0a:57:c6:d0:85:be:ea:8c:54:2f:
c8:ae:ba:b5:43:1d:cb:dd:50:b4:55:01:6c:19:5f:
d1:c7:ac:09:a7:6f:aa:db:da:e8:3e:69:46:3c:f4:
b3:ac:79:dd:f0:e3:bc:58:dc:24:89:c6:14:71:a5:
ac:cd:7b:83:6f:e7:50:86:18:88:ab:74:2a:1b:21:
10:7b:9f:e5:31:40:07:bb:6f:fc:c9:b2:8d:84:9e:
f2:a2:8d:e0:03:8d:d8:39:59:31:d3:55:8c:d1:75:
a4:c9:33:3f:9e:3d:11:c8:b5:fd:ab:a1:3e:05:b9:
ab:9b:ae:40:69:3a:8d:19:2c:4b:48:9e:cb:24:6f:
80:07:95:65:eb:ab:41:a2:cd:e0:7a:65:ef:6d:26:
2a:8f:14:e6:ee:63:c8:f7:d9:b9:aa:0e:6e:f6:1d:
0a:ea:5f:62:b5:97:66:cb:a6:ee:48:9f:a0:99:54:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:E4:43:5A:EC:3C:B6:59:20:78:CE:A9:4D:19:50:E7:5E:4F:74
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fa:a5:a3:e4:c6:ea:53:43:f3:ba:ba:e9:12:55:23:9f:e6:
f8:d2:cf:26:34:87:56:cc:08:7f:46:cd:42:a6:2f:c1:80:b2:
ce:aa:55:4b:8a:5d:c3:db:33:ae:08:a2:34:b2:d5:a3:81:dc:
b9:8c:4b:c3:48:94:25:df:db:ea:ca:af:48:c8:7a:69:49:ba:
7f:19:42:f6:52:23:31:58:3d:47:a0:90:7d:5d:64:47:58:29:
71:51:68:26:64:23:0c:f6:bf:a8:47:70:cd:c2:01:f1:0d:80:
b9:bf:b5:b9:23:5b:8d:7b:95:f6:4c:4d:f6:49:48:51:9a:4f:
20:6d:01:c5:26:12:64:3f:2e:8b:83:2e:8d:cd:72:2a:07:5c:
5d:3f:09:05:97:d1:74:c8:05:2f:f5:cb:ef:c4:93:5a:5b:bc:
29:6f:fa:84:56:23:c7:68:8c:2b:8b:50:a5:7b:45:93:45:4d:
cc:4f:85:5e:48:fd:83:03:de:a8:42:99:df:1a:9e:c8:15:2a:
4a:da:bd:be:92:04:8c:5e:51:c7:4c:c7:2e:29:2a:c0:ca:d8:
fe:f1:b2:0c:3b:a2:a2:22:24:9a:ff:95:10:3c:a6:94:5d:06:
fb:be:2a:dc:05:a1:ff:5a:19:12:a5:b7:f7:32:3c:2a:b6:80:
bc:0f:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:04:14 2025 by rpki-client