Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: gRIcdGUCpceKM4+ej/+LNJINEeLiHD5Xdbud0Ie50ZE=
Subject key identifier: F0:99:66:CF:B7:E5:31:CB:BD:35:E4:01:0F:FC:32:94:40:3A:1C:8E
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 01975FEFC7E3685A1F941F43D9CC43EBE633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 0303
Signing time: Wed 11 Jun 2025 17:00:39 +0000
Manifest this update: Wed 11 Jun 2025 17:00:39 +0000
Manifest next update: Thu 12 Jun 2025 17:00:39 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: KgmAK2eA0k/+2397VqY8PC+0wrxJuxQL863TKVXtnF8=)
2: eBrn60Df7uG_ub_L-IV105lzs58.roa (hash: O8+G2XvuPwR1yEXnK+zmEZeJLzoyxFForxI59j5WNAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:c7:e3:68:5a:1f:94:1f:43:d9:cc:43:eb:e6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Jun 11 17:00:39 2025 GMT
Not After : Jun 12 17:00:39 2025 GMT
Subject: CN=f09966cfb7e531cbbd35e4010ffc3294403a1c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:28:39:bf:b9:ad:c0:a5:d3:fd:b1:1c:66:
66:83:3a:ec:48:d1:6f:dc:3b:d7:93:f7:96:56:c7:
6a:64:47:3a:c3:05:11:36:2c:6b:60:d7:77:27:82:
97:e3:51:62:3e:bb:f5:18:e4:98:a5:8a:3d:22:b4:
84:ec:4a:1a:02:cf:bd:55:4c:19:a4:99:9c:bf:83:
05:3c:f7:b8:be:79:59:12:24:62:6f:5c:78:78:39:
b7:b4:9e:4b:a7:b8:9a:87:a6:06:75:78:c0:5e:c6:
77:53:d3:a3:eb:5e:44:52:d6:cf:ca:7e:94:85:a2:
9c:cf:af:00:b7:99:ed:5f:43:44:f1:67:c9:23:45:
9a:ba:4d:02:32:46:7b:42:7d:72:91:84:b2:30:a4:
4a:35:8b:f9:6b:e6:75:75:c0:00:9f:bf:5d:8b:f0:
ab:93:eb:bd:f7:b2:44:41:4a:9f:12:d8:85:2b:04:
39:8e:08:68:95:11:b2:6c:a4:d7:28:9d:12:81:a5:
8b:cb:4d:c3:5f:ce:3e:74:50:8d:0d:47:70:9e:14:
86:6d:8f:f4:7f:56:fc:5c:10:09:0e:42:bb:9b:cc:
f9:04:33:2f:31:c0:71:19:a9:83:51:eb:d5:08:8c:
94:47:ff:f3:ff:d9:d5:6d:90:63:ca:f9:29:f4:ce:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:99:66:CF:B7:E5:31:CB:BD:35:E4:01:0F:FC:32:94:40:3A:1C:8E
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:43:67:8b:ec:ae:07:6a:f1:49:f8:77:74:3b:e4:6f:2c:
ad:78:80:30:84:b6:32:c1:63:97:34:d4:83:5f:93:92:28:68:
e4:83:43:50:5a:30:f2:b6:cf:89:bd:84:c1:d8:7d:12:e8:ed:
b9:36:e1:d5:59:f1:27:72:f6:75:a9:76:65:3d:be:0c:2f:39:
c2:25:54:d1:e6:12:6c:0e:4b:89:eb:7f:7b:19:00:8e:e8:57:
fa:8f:3c:6c:6e:a0:7a:63:f7:5a:e9:25:5e:ff:a4:cc:ee:68:
b0:50:2a:c8:08:aa:cc:b0:02:48:92:06:f5:ae:2a:49:0e:6a:
1d:8b:2e:ed:e5:04:d6:f7:64:bd:21:25:9a:60:89:4b:5d:08:
7d:6b:2e:b2:13:3c:8d:22:c4:06:4b:71:79:3b:be:42:d0:69:
37:00:77:0e:42:c1:05:43:79:e7:93:5c:82:8f:38:2c:e7:c9:
71:d0:4a:35:94:d1:ab:c9:de:0a:c8:cd:a5:a9:b5:5c:69:e7:
95:ae:91:7b:ee:e1:02:4d:f7:9c:6d:eb:e9:97:0a:8c:32:fe:
39:67:1a:75:7d:95:3f:d1:63:b6:8b:01:30:94:63:fe:bd:36:
48:1e:56:94:76:79:2e:6d:7d:1a:ae:44:f7:78:60:68:7a:01:
6c:e8:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:42:27 2025 by rpki-client