Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: dNDLvcOHw7RoBOJU5qwny4zZzxLe6sNaAbb7mYT6M3k=
Subject key identifier: 26:6E:7F:F2:B3:52:AA:B1:95:06:21:95:30:F3:B4:65:3C:A9:C5:B9
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 0197395078C2EF423A6DE6F25A057D902FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 129A
Signing time: Wed 04 Jun 2025 05:01:04 +0000
Manifest this update: Wed 04 Jun 2025 05:01:04 +0000
Manifest next update: Thu 05 Jun 2025 05:01:04 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: bxBEiRKH1hyQrKPVF69DVehSWLeLEJm4nOVI+co3j3k=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:50:78:c2:ef:42:3a:6d:e6:f2:5a:05:7d:90:2f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Jun 4 05:01:04 2025 GMT
Not After : Jun 5 05:01:04 2025 GMT
Subject: CN=266e7ff2b352aab19506219530f3b4653ca9c5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:80:bc:bc:43:27:29:1f:56:0a:03:0f:7e:
74:3e:b9:85:86:2e:d8:e5:02:27:52:09:c2:18:5c:
9b:05:97:38:4f:95:2a:de:95:6f:d4:3c:79:55:92:
3e:6e:55:0f:22:ff:72:0c:c6:2f:50:33:ba:b0:05:
a3:76:a6:c0:ba:e2:d4:24:81:fc:e6:80:4d:dc:7c:
63:82:a4:f7:f0:1f:23:18:e8:77:a4:6a:5e:03:29:
ba:4d:c9:7c:df:d4:62:71:98:33:0f:bf:f9:c4:90:
e6:af:0d:05:be:0c:97:05:f2:76:e0:b0:26:5a:43:
2b:84:45:3b:45:fd:8f:ee:d7:7b:aa:08:0d:1a:64:
70:c3:32:8f:ce:57:5b:37:d8:bd:f2:97:c3:da:33:
0d:3e:30:e9:b6:46:d4:57:57:db:6a:73:bb:9b:ba:
32:88:4a:8f:ae:d4:42:51:97:47:ee:ee:94:e2:f1:
e8:df:bc:ec:e2:a1:0d:f9:a8:06:79:2e:d2:17:de:
9d:7f:12:37:98:2f:26:26:c6:78:06:e7:06:a6:49:
f9:1f:a6:c9:07:f9:c5:98:c4:bb:3c:68:7e:7a:7e:
3e:0f:d3:31:5c:26:9a:66:52:91:5f:e2:0b:eb:b7:
1c:50:b1:f0:31:63:65:78:2e:c1:0e:fd:c0:07:ff:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6E:7F:F2:B3:52:AA:B1:95:06:21:95:30:F3:B4:65:3C:A9:C5:B9
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c7:d0:71:81:51:a5:58:9b:56:5f:8d:62:b5:39:e5:16:4f:
39:87:6a:82:af:16:c8:ce:b7:31:de:ce:c7:53:c2:5c:5f:da:
ba:9e:47:65:07:38:04:d4:38:6c:a9:66:d2:d2:92:e2:bf:e5:
ff:01:a2:62:61:b0:e0:24:e1:82:d3:c1:24:78:11:89:a1:65:
97:da:ef:37:15:0f:ae:6f:b9:f8:73:ef:8a:5b:8a:4d:68:7a:
6d:c1:24:fc:a2:7a:a0:65:5a:5d:8e:d9:ec:d5:55:b3:9f:60:
99:22:97:b6:b1:2c:0b:5c:92:2b:a4:25:27:67:3c:e7:df:e4:
2b:1f:b8:5d:56:d1:62:15:5f:a5:ab:00:8f:e1:b7:d6:66:2c:
a8:e5:84:83:d5:78:31:f7:86:18:b1:e9:45:c8:1d:6a:23:30:
36:7c:76:da:66:cf:90:6d:04:ee:87:82:d9:23:ac:15:e2:f4:
4a:ba:98:38:c1:e8:99:fc:df:6f:13:f4:7e:08:be:fd:10:94:
9a:48:36:09:f9:8a:b6:e6:80:64:96:3c:a6:cd:c4:df:a0:00:
88:d5:66:23:17:b5:0a:cf:5f:e2:fa:d4:b7:63:22:b1:50:c9:
60:1f:bf:ee:54:88:69:77:8c:18:40:72:52:55:ea:b2:92:6b:
27:85:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:40:41 2025 by rpki-client