Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: RFreZNFTMWsjORFZIgxLteelYFf8FEORuXqGMva5IJQ=
Subject key identifier: 28:DD:46:89:18:6F:98:01:73:14:03:F4:FA:0B:EC:92:2E:12:62:8C
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019747795071ED9BD29C52EC42CB9E6F2858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1586
Signing time: Fri 06 Jun 2025 23:00:22 +0000
Manifest this update: Fri 06 Jun 2025 23:00:22 +0000
Manifest next update: Sat 07 Jun 2025 23:00:22 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: HYg58hLPIcNDseq+gFkN/0TTzmWoUhNttcyyID2/AsM=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:50:71:ed:9b:d2:9c:52:ec:42:cb:9e:6f:28:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jun 6 23:00:22 2025 GMT
Not After : Jun 7 23:00:22 2025 GMT
Subject: CN=28dd4689186f9801731403f4fa0bec922e12628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:73:13:86:31:2e:c7:65:09:67:e3:7e:64:
17:6a:9d:5d:ac:a1:35:d5:9e:e7:a2:bf:08:64:3a:
1c:d9:56:35:6b:7c:de:2c:45:9b:cf:70:45:8a:eb:
d8:2d:6d:61:f4:97:64:04:46:89:e3:59:2a:de:22:
ba:7e:b6:3a:6b:59:72:46:04:d1:65:ff:e1:35:26:
67:cf:40:c3:d6:4f:bc:19:b3:af:32:b3:33:bf:c9:
21:b8:8d:60:55:11:a7:e1:e9:4b:58:7a:ac:b9:7d:
d0:2d:3f:ad:db:fe:5b:0e:18:c5:9b:48:69:52:a0:
d6:c3:76:e1:85:60:4f:bd:8c:73:5d:6f:33:28:d1:
04:14:38:2d:e1:42:ca:f9:1d:2b:88:ac:38:4d:e4:
c0:08:e6:30:f3:39:b2:b9:f8:b7:56:52:33:40:83:
26:15:2c:37:0d:0e:2e:d1:ad:d8:7c:a9:38:5e:49:
f6:4c:b1:ee:6a:d5:7a:ff:e5:c8:6b:1b:9d:aa:b9:
1a:7c:66:4b:fc:bd:0b:ea:58:94:26:be:b9:03:3d:
89:bd:ee:41:bb:a1:ec:e9:76:1c:32:c7:2b:a7:be:
b4:df:7f:66:2c:25:2b:16:67:55:8c:ab:ab:e5:c1:
3e:63:b4:d1:e7:c2:09:7c:2d:fe:cb:65:a3:56:05:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DD:46:89:18:6F:98:01:73:14:03:F4:FA:0B:EC:92:2E:12:62:8C
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ee:3d:ad:5f:d7:1c:0c:cf:a5:94:02:07:62:98:af:f6:c7:
1d:75:17:61:a2:b1:08:c2:ba:b4:69:73:0a:db:cc:c6:e3:13:
cf:74:62:ad:a6:4e:9f:c1:b4:09:c5:52:ef:c1:05:9d:b2:0f:
f5:82:c1:97:ec:a1:c6:bd:36:b2:84:62:bc:ea:8e:c2:3e:b1:
5e:f2:25:ac:15:24:0a:65:5e:a5:f4:55:3f:e2:a1:ab:e5:2d:
33:35:48:1b:ef:80:af:26:ba:e5:10:eb:a7:b0:06:01:e2:63:
f3:3b:69:41:b3:30:2f:40:38:6d:ef:d7:a6:71:ae:0a:88:27:
e7:39:5e:83:bf:a4:8e:cf:28:53:1a:43:75:cd:15:f6:3d:38:
47:46:fe:c1:1d:28:6f:e5:3b:dd:a1:28:c8:94:63:dc:94:c4:
c8:47:10:ba:b1:49:48:a4:0c:7e:96:73:3a:06:44:21:e7:42:
05:d2:51:38:2e:c9:64:90:40:58:49:ce:79:00:e2:71:a2:07:
f3:bb:f2:52:31:28:f8:d2:64:57:cd:35:36:2f:a1:8c:b8:ff:
6c:4b:b9:e1:f2:40:9d:c4:67:23:a0:cf:c1:b4:fa:0f:c1:fb:
af:56:05:74:2c:51:1f:46:60:f8:44:83:4d:0a:f2:bd:5f:a7:
da:b2:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:35 2025 by rpki-client