Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: XpMU5gQxgBpFANGkQx5Ze3lxw9Ab3WL6J6aU2rQ8Jp0=
Subject key identifier: 36:BE:B5:3A:BF:49:FA:DE:22:CF:A2:F0:B2:D5:3F:C8:F3:4A:82:24
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 01975C810A80E9F25D99005B6B2A9B4D91A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 027B
Signing time: Wed 11 Jun 2025 01:00:50 +0000
Manifest this update: Wed 11 Jun 2025 01:00:50 +0000
Manifest next update: Thu 12 Jun 2025 01:00:50 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: WbRPi8BPwhvGjfxIngJZFRRrcZpD4iNJp9/3DWixo3Y=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:81:0a:80:e9:f2:5d:99:00:5b:6b:2a:9b:4d:91:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Jun 11 01:00:50 2025 GMT
Not After : Jun 12 01:00:50 2025 GMT
Subject: CN=36beb53abf49fade22cfa2f0b2d53fc8f34a8224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:00:67:05:be:6d:10:af:17:8a:a2:67:76:
3b:6b:4b:5f:91:40:c4:12:27:c8:0c:84:7f:80:cf:
a8:d4:9f:8f:dc:3a:93:be:16:c6:cc:13:7b:03:b7:
98:4d:4c:0f:df:c3:96:a1:7e:02:b8:70:a4:91:cf:
6b:f0:32:ac:6f:80:95:fc:55:57:1c:3e:5d:cd:82:
01:0a:66:ab:71:3d:0c:5a:a4:e5:ab:5d:3f:cc:f5:
49:ae:ef:fe:61:39:51:19:07:27:c3:26:13:ea:a5:
4f:2d:7e:a9:9f:32:22:15:87:31:38:ec:b6:ca:71:
80:13:aa:ae:29:c3:47:f2:3d:43:33:88:73:dd:6a:
98:35:fa:9c:d6:69:47:1a:cc:d6:cd:8e:a9:a2:2c:
fc:41:a7:5f:b6:6f:dd:54:87:b6:29:b9:c3:e1:f7:
71:c1:66:12:93:96:cf:89:4a:61:78:ff:1c:89:ee:
37:3b:25:c6:a7:15:05:a9:47:5a:42:45:96:7a:e7:
f2:fe:07:6a:98:0a:e4:e9:db:f1:16:4f:71:34:70:
2f:62:7e:49:75:c5:dd:68:3b:a7:14:d1:1b:93:1e:
31:55:29:cc:3c:e2:a0:c4:ff:94:95:75:11:9e:01:
53:3a:28:f3:7b:64:ad:ad:c9:fc:6b:32:16:58:71:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BE:B5:3A:BF:49:FA:DE:22:CF:A2:F0:B2:D5:3F:C8:F3:4A:82:24
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ff:57:06:0f:7e:b3:22:93:75:5a:f6:b5:7f:65:c8:53:d3:
15:95:1b:e8:9d:47:2d:dd:aa:6f:7d:08:ab:fd:34:f7:a1:59:
0a:38:cc:da:50:ed:c6:12:25:02:cf:ff:14:e4:88:c5:64:5f:
ce:b2:41:50:c6:d3:9f:de:8d:2a:76:5f:13:81:cf:82:25:65:
10:23:ca:5f:26:c6:e3:34:8e:88:1e:1a:ed:24:2c:28:cc:d5:
72:59:59:09:e3:aa:79:81:0a:dd:d5:8b:15:3c:b0:28:d5:d6:
33:35:c1:69:34:3f:9f:c0:a0:86:dc:19:1b:48:b8:2b:d7:ea:
25:04:0f:64:25:85:1b:9d:df:a2:bb:9f:85:85:a7:b9:0a:61:
ef:ca:1d:a3:bd:16:8d:5c:56:f9:f7:9e:cc:37:88:57:6b:ff:
d2:48:c3:c4:56:4e:63:c5:07:b9:c1:eb:12:c4:3c:c2:f6:0f:
2e:9c:3d:8c:e6:eb:3d:7d:41:a9:0e:5d:f9:f0:9f:46:13:df:
ba:d0:69:42:f8:b2:0b:d9:e6:bb:a7:ba:a2:99:53:3c:2d:93:
41:5d:9e:59:27:79:4c:ba:48:05:a0:b0:a2:ed:73:ff:1b:45:
c2:eb:33:2c:83:c0:4b:c1:4a:53:4c:89:69:71:f8:ca:a1:51:
06:72:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:59:53 2025 by rpki-client