Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: PeXYRKOK6YRYZUdmf11sOlxnEqwaHZ8h8ZlFb1AA/0Q=
Subject key identifier: 53:DB:1A:05:5B:24:FD:38:0D:77:F5:D8:51:82:4F:CA:9F:E2:52:C1
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 019768173DFD24BB89D89468973E69810E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 0281
Signing time: Fri 13 Jun 2025 07:00:43 +0000
Manifest this update: Fri 13 Jun 2025 07:00:43 +0000
Manifest next update: Sat 14 Jun 2025 07:00:43 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: gcdI+E3uBxgWh0atYxcoVOfjACeDoHWWvkjGJzIGOTw=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:3d:fd:24:bb:89:d8:94:68:97:3e:69:81:0e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Jun 13 07:00:43 2025 GMT
Not After : Jun 14 07:00:43 2025 GMT
Subject: CN=53db1a055b24fd380d77f5d851824fca9fe252c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:0e:b3:6a:98:97:0c:26:6a:9c:96:5c:3a:
91:4c:07:a6:4a:d2:54:b3:9c:0b:23:19:3d:92:47:
39:9b:6d:c8:eb:de:12:1d:bb:f4:13:e7:e5:17:58:
66:f0:56:7b:3c:aa:6e:2c:f7:df:97:c0:f3:b5:b5:
1c:d0:63:72:37:0b:9d:30:ee:06:7c:96:55:23:3c:
43:2b:5d:6b:9e:62:ba:be:a2:81:a0:e9:79:62:d1:
22:93:58:01:91:cd:c3:9e:72:36:2d:06:08:7a:84:
62:f5:2b:28:57:e7:fa:09:4c:f0:0c:24:a0:ad:c7:
30:21:dc:e5:d4:ec:c3:60:80:ea:fe:9c:4b:ae:45:
39:83:53:b3:02:cd:d4:6f:38:b5:6d:5f:34:65:37:
57:8d:fc:35:84:0d:a3:0e:54:dd:34:e8:32:3b:29:
0d:76:cd:3b:71:a9:5c:48:53:fb:e2:26:e3:f1:41:
ac:7a:b4:97:16:d2:85:11:1b:b0:17:75:8f:f8:d9:
a1:dc:88:2f:b0:2c:74:ec:5e:1f:8f:f5:02:20:a6:
96:9f:56:57:e4:96:fd:44:b5:e9:54:06:e6:32:e9:
0b:3f:62:e4:2e:4a:c6:a8:c9:8e:f9:26:02:fe:d0:
77:e6:3f:3d:58:55:cb:18:93:7f:27:f1:3e:8b:13:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DB:1A:05:5B:24:FD:38:0D:77:F5:D8:51:82:4F:CA:9F:E2:52:C1
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:11:8f:75:49:66:97:55:86:e2:8d:86:d5:06:4c:54:f8:7a:
c0:8f:8c:63:1b:fc:54:52:fa:66:c2:0b:fe:cd:a8:91:47:dc:
31:49:83:ca:44:19:f9:4d:88:36:10:97:ac:f8:3c:84:c9:10:
d7:f5:fd:60:ec:c2:9b:af:f1:44:27:2f:3e:0a:ee:9b:84:ba:
3c:ec:4c:d6:60:ff:58:50:e7:38:3a:73:27:44:0a:c6:74:89:
2f:56:43:ff:bb:a8:df:aa:54:d6:68:f4:19:b7:17:db:03:15:
a8:ec:0b:82:61:57:0f:fd:78:f3:e4:17:4c:a3:bc:42:a6:86:
e4:e8:91:a7:22:16:2f:ae:74:53:22:56:41:33:43:48:98:e4:
74:5c:15:51:4d:01:42:42:39:d7:1b:ea:17:82:f3:da:12:bf:
0b:b6:3e:2d:af:2b:ba:ba:92:1a:96:56:c2:d5:17:d1:9d:ac:
4c:ea:b8:f3:47:31:7b:7e:a3:ba:61:b3:4c:13:84:41:5a:d7:
6a:d6:7e:e5:f0:28:2b:61:72:01:08:e4:46:c4:22:2d:94:13:
84:59:d3:50:f4:59:80:1d:61:97:89:95:0a:8f:2e:70:81:17:
c6:f6:0a:f0:b9:2d:f8:07:b4:eb:7c:65:a9:6d:8a:10:3e:59:
b1:8d:b8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:03:17 2025 by rpki-client