Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: gRMh6ykp59J6ek6M8Sl8MkbOp4rEOyDRTovLQ3dBLsY=
Subject key identifier: 56:D2:F9:3B:28:B4:BF:F3:DA:DA:E8:24:5B:49:4B:FF:F1:78:EA:A6
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 0197488C2667B2DA17600C90DFBE634D02CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 0EED
Signing time: Sat 07 Jun 2025 04:00:33 +0000
Manifest this update: Sat 07 Jun 2025 04:00:33 +0000
Manifest next update: Sun 08 Jun 2025 04:00:33 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: iBZ0CNpI7LIkPx/Duu/XqprvkA6GlSF5IGSLbpkz7Rk=)
2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:26:67:b2:da:17:60:0c:90:df:be:63:4d:02:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Jun 7 04:00:33 2025 GMT
Not After : Jun 8 04:00:33 2025 GMT
Subject: CN=56d2f93b28b4bff3dadae8245b494bfff178eaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:66:07:f2:86:2e:df:0e:e5:69:8a:8f:ba:
6c:96:91:e6:0b:9d:08:15:19:48:44:3b:ed:21:28:
b0:f8:04:88:6c:12:d1:a7:d5:6e:fe:df:c9:e7:5f:
35:6e:3c:ea:80:e2:d5:de:90:81:6f:74:f5:63:be:
0c:4e:9d:9f:85:60:5d:70:0e:72:50:2e:76:55:ea:
26:0a:bc:0b:dc:af:f4:c7:50:9f:7f:c6:e5:77:dd:
25:5f:8a:80:d6:fb:f5:e9:0f:f6:f3:04:e5:b4:0e:
3d:48:cc:e6:6b:1f:9f:43:8e:9b:e6:57:2f:c5:1a:
82:36:a0:e0:cf:94:a6:57:00:ed:33:0c:c7:20:94:
17:06:b5:69:3e:61:b2:75:2d:93:60:0f:1a:30:4d:
a6:c4:38:4f:bf:c8:f0:9d:b9:0b:82:30:c2:55:65:
32:b6:a9:93:52:77:79:73:59:c8:9e:18:3f:fc:89:
12:bf:72:68:b8:95:46:64:67:08:45:a9:2e:57:24:
04:1d:6b:e5:37:11:e5:01:a4:28:72:03:17:fc:a7:
3b:9c:04:49:f3:b5:61:d5:e7:10:53:cb:01:42:de:
bf:0f:9b:0d:e2:fb:80:73:0a:ec:e1:f9:2f:5b:c8:
4e:7d:03:90:95:ca:bc:3b:eb:14:63:e7:ef:5b:b8:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D2:F9:3B:28:B4:BF:F3:DA:DA:E8:24:5B:49:4B:FF:F1:78:EA:A6
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:fb:9d:69:7e:5c:30:73:fc:62:b8:58:1a:3d:7f:e4:64:
81:93:9e:d1:96:29:b2:6e:be:d8:83:29:84:10:d8:ac:dc:29:
2d:ab:14:be:67:d5:77:4f:3f:02:93:9b:92:2d:68:ac:13:2e:
ca:0b:4b:dc:ce:bf:69:36:03:d3:3c:6e:8f:e0:2c:cb:be:9c:
ee:fd:ff:25:8d:61:f5:57:57:9d:1f:b3:ba:a3:05:f3:77:70:
d8:a8:a7:1a:bf:14:5a:98:35:fe:dd:5f:30:c9:5f:cd:83:67:
12:ab:6f:72:09:51:a0:08:4b:21:c0:13:46:ef:0f:2a:a0:c4:
c4:bf:d5:ed:1d:ab:fa:0a:d9:b3:37:b4:8b:28:e0:24:92:53:
e2:4d:b1:23:bd:9f:3e:1d:e6:0c:9f:b5:55:2e:30:f4:d8:fe:
eb:9d:c7:53:02:65:2c:6a:35:e6:29:43:4e:6d:1f:75:b8:1a:
fc:d9:cc:56:ab:2f:b9:28:ce:ba:8a:cc:7f:1b:b7:3a:a1:9e:
d6:8f:f8:1f:5b:f1:b6:ff:05:a0:00:df:42:e6:05:f6:4f:b2:
e6:73:55:00:b4:1c:47:e0:57:f1:a1:dd:d9:4b:f2:42:20:ae:
57:7d:a6:a4:42:48:75:33:22:c9:4f:eb:67:f3:9a:bf:ce:49:
50:3d:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:41:34 2025 by rpki-client