Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: EuAf93gkPAEoADvPh7KPuMZ6QQnWERox2KXz6PcjUk8=
Subject key identifier: B5:29:27:FF:6E:AA:33:38:BB:1F:A0:AF:0F:5D:78:33:8F:19:6E:0C
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019752A2677E58536CAC15F0A2CA2BF122C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0C30
Signing time: Mon 09 Jun 2025 03:01:04 +0000
Manifest this update: Mon 09 Jun 2025 03:01:04 +0000
Manifest next update: Tue 10 Jun 2025 03:01:04 +0000
Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: kH5OydPEI2BeA66qyqWhidW+ySdKhRQ5VkTCEND6LJw=)
3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:67:7e:58:53:6c:ac:15:f0:a2:ca:2b:f1:22:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Jun 9 03:01:04 2025 GMT
Not After : Jun 10 03:01:04 2025 GMT
Subject: CN=b52927ff6eaa3338bb1fa0af0f5d78338f196e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:a3:d1:a2:eb:a4:1d:3a:48:1d:e9:b5:20:
45:e5:ef:02:9d:c9:00:5e:36:c3:e3:58:1f:0b:83:
9e:fc:e4:fb:fa:fe:86:9c:56:18:b7:38:09:08:5c:
b1:bd:e7:41:54:b0:58:b4:54:b5:09:6b:2b:03:37:
20:93:5d:d1:34:c3:c8:1c:12:16:91:ee:3f:16:b7:
71:f4:bc:a4:2c:c4:3b:aa:17:bf:9b:38:6b:86:04:
c1:fb:bb:86:9e:e7:14:48:b3:76:66:5c:b1:cd:e3:
76:17:20:b5:db:53:2d:00:66:74:5a:80:92:68:b5:
e2:92:23:37:db:bd:d2:05:f7:7d:bc:a1:cf:9b:d1:
8e:c1:f7:89:f5:e1:54:63:3c:27:ee:b4:c4:97:14:
a6:71:bf:e8:c1:69:f8:7e:3e:60:39:1a:70:ad:0b:
77:a7:d4:eb:30:d8:d5:1b:25:0c:df:d2:e8:73:d2:
f2:dc:6e:87:6a:88:9f:1c:8e:82:e8:e8:ea:f9:0f:
cd:5e:c7:e9:e0:e6:31:b7:0e:17:dd:79:c8:1e:39:
1d:63:79:ef:b1:3b:4b:8e:2d:0c:37:fa:ae:2e:79:
7a:90:05:63:e5:e5:d9:15:d2:da:5c:40:43:ef:c0:
ea:2f:10:ad:4a:0c:fe:aa:b2:8c:74:d4:2a:26:38:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:29:27:FF:6E:AA:33:38:BB:1F:A0:AF:0F:5D:78:33:8F:19:6E:0C
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0d:5d:0d:50:a4:fb:79:e9:66:36:01:56:f7:1e:e7:64:a9:
60:a3:96:de:5a:d6:16:a8:15:16:9d:43:fc:5a:93:c7:c5:2c:
81:37:d8:e6:b1:6b:2d:01:b1:4f:d8:c8:b8:41:49:ab:b1:08:
56:27:13:28:c7:d0:07:25:22:37:02:44:31:ed:98:0d:ae:8b:
61:db:54:e9:2b:38:2e:49:4c:c1:5c:0f:e8:a2:ce:44:87:57:
78:4c:a3:ec:71:0e:40:fc:3b:80:7b:90:4e:79:0d:cf:6b:98:
af:65:7b:04:39:c2:10:6d:62:e7:2d:2c:a3:fd:01:74:59:6a:
10:4c:4f:5b:0e:d0:1f:32:68:2c:8a:0d:75:41:ac:e9:99:69:
e4:c7:28:29:54:db:05:ee:93:1e:f5:e8:69:ca:87:72:3f:57:
e6:f4:d7:4a:5a:42:70:a9:7b:21:b0:a3:cb:d6:ab:31:43:ea:
bb:c9:d6:91:87:e0:62:b8:81:7a:d7:f1:8f:ac:c7:81:83:77:
24:51:35:d5:e8:be:f6:1c:c8:3d:4f:bb:f2:ce:c0:e6:50:b6:
36:77:c4:8b:05:14:66:b9:59:1e:b5:4c:a7:0a:99:c2:cf:d1:
42:0b:65:09:65:97:48:0e:07:6a:d2:4a:e6:dd:f0:e8:97:f5:
73:19:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:04 2025 by rpki-client