Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: zHwZBqmyLPku8qmCj0KCWaRPeZRrmD/MpogCi5wqkWc=
Subject key identifier: 60:67:7A:C7:23:6D:20:B6:7C:BA:4F:DD:F4:EB:22:5E:58:F7:D7:1E
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01974CD726C8DAEA23F19139DA610E0C3275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1589
Signing time: Sun 08 Jun 2025 00:00:57 +0000
Manifest this update: Sun 08 Jun 2025 00:00:57 +0000
Manifest next update: Mon 09 Jun 2025 00:00:57 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: MLH2dqV5Z0fFqoSq4hSDqxyZ0h1xSPuezx54kbGe7us=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:26:c8:da:ea:23:f1:91:39:da:61:0e:0c:32:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jun 8 00:00:57 2025 GMT
Not After : Jun 9 00:00:57 2025 GMT
Subject: CN=60677ac7236d20b67cba4fddf4eb225e58f7d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:07:45:b2:17:fd:75:ce:73:9e:8d:44:98:
89:14:6e:aa:26:6a:3d:ce:18:ec:3a:51:30:08:da:
f4:26:ec:05:9b:4e:30:1d:8e:a4:1f:4a:9b:79:90:
2e:9f:1e:8d:17:97:6b:88:4f:7b:5a:e3:91:5f:96:
70:da:bf:64:83:48:ba:2e:79:e2:fc:3e:e4:4d:d0:
29:00:0e:86:7f:15:58:61:f5:e7:fe:c8:4f:8f:50:
65:af:65:3b:c1:fc:19:36:c3:08:b5:44:0d:0b:de:
71:ce:a2:a0:27:67:a5:08:e8:78:e1:9b:10:78:c9:
22:07:22:80:d4:e8:d6:d7:0c:a5:7d:c6:87:7a:04:
9d:4f:b3:95:a1:d5:ba:4b:4b:c1:f4:99:d2:2c:d3:
e3:20:72:a8:3a:ca:0e:6e:5f:f0:a6:d0:cb:70:6f:
67:a2:42:7d:42:21:7d:3f:ae:d7:5e:1d:5b:97:a4:
23:02:54:d9:ab:e5:e8:f0:f0:11:aa:ba:b6:e6:c8:
e9:67:f6:a7:be:0f:eb:10:b8:55:5d:43:7e:9f:db:
ca:a6:ac:1b:d2:8b:fc:1f:2e:53:d8:e8:38:53:0c:
e4:e6:dc:75:4d:8d:6d:36:c3:23:60:a2:03:1a:5d:
90:1e:cc:fb:c0:9f:a1:f0:d2:39:cf:f8:b5:6b:2d:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:67:7A:C7:23:6D:20:B6:7C:BA:4F:DD:F4:EB:22:5E:58:F7:D7:1E
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2d:d0:ce:52:a3:7a:a4:5a:36:9d:c9:50:86:54:b5:d5:b7:
c1:10:e1:0a:c9:57:94:ae:ad:51:8c:fc:a5:18:46:40:da:93:
c5:90:29:ee:2b:ba:8d:70:cb:0d:0d:5f:38:98:e3:6b:55:06:
60:bf:ab:1f:c8:55:d0:0b:5e:db:a4:83:69:ca:55:56:dc:68:
b1:70:d2:d3:78:8c:96:65:46:46:60:89:3f:ba:1b:14:c2:85:
a5:49:84:d5:11:32:cd:2c:61:2a:70:70:8f:b3:d3:f2:31:0a:
f5:69:dc:2d:02:d3:3b:1f:0d:a6:3a:b8:45:64:2d:29:7a:77:
7b:da:d9:b8:18:b5:d2:94:6c:4f:20:d5:3f:68:37:0e:d4:e5:
d3:29:1c:7d:41:45:f4:d3:30:4c:2b:67:4d:2d:1f:e2:b7:14:
81:8d:d8:ea:73:35:9d:b3:e4:00:16:f2:23:b4:93:08:90:0a:
d1:06:c8:35:53:14:4a:17:74:39:cf:92:c7:eb:43:ae:27:9b:
68:07:19:30:af:52:9d:de:1f:51:46:9c:35:41:50:a2:a9:e3:
f6:84:57:3a:9b:bc:4e:e2:e4:a0:5b:96:43:0e:aa:db:ec:9a:
67:e9:a1:fc:8f:9f:e7:1e:4f:47:bc:6a:1f:70:51:ab:70:cc:
ce:ea:83:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:29:04 2025 by rpki-client