Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: a2ICaeOePJYAE2G6DieQ5rs0IU81SdBSVZrjKrdpF5c=
Subject key identifier: 0A:EB:1B:DC:08:11:D0:C2:58:AE:D4:7D:50:61:17:8B:C7:27:9D:08
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 019758A448EABDB9A0053F6D6427CEB8F23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 0279
Signing time: Tue 10 Jun 2025 07:00:50 +0000
Manifest this update: Tue 10 Jun 2025 07:00:50 +0000
Manifest next update: Wed 11 Jun 2025 07:00:50 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: Xeu9Rm8tEjHAGuekdiZJB2e9heOfJ86AsENd/DYMBQc=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:48:ea:bd:b9:a0:05:3f:6d:64:27:ce:b8:f2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Jun 10 07:00:50 2025 GMT
Not After : Jun 11 07:00:50 2025 GMT
Subject: CN=0aeb1bdc0811d0c258aed47d5061178bc7279d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:82:92:54:a2:df:c9:b7:77:da:2f:09:d6:
23:22:c5:bc:83:f9:a3:21:9d:9d:cc:a8:a9:6c:5d:
68:4d:de:5e:eb:88:3f:a5:7c:3a:a7:20:96:90:44:
82:28:2a:f5:02:20:65:9b:aa:61:95:dc:5a:ca:9f:
41:43:71:94:17:28:12:02:72:3f:10:4e:98:57:b7:
41:7c:8b:fc:04:94:63:4e:51:9b:ba:f0:b0:28:68:
35:c9:81:4a:74:ed:7f:3a:6a:03:8d:fd:8d:15:b4:
9c:03:c7:b5:a7:af:f0:5b:d0:41:31:f4:03:2c:47:
5e:d5:95:68:3f:20:26:fd:e2:78:c0:4c:21:cc:a3:
ce:78:70:0e:1d:74:e9:e0:09:dd:5a:6e:b4:30:0b:
2c:74:d6:00:bb:92:a0:14:87:a6:f9:42:a5:ca:a9:
d0:38:af:11:74:ac:96:52:3b:8c:db:c9:4b:90:9b:
2b:03:6a:e0:f1:ac:17:a3:88:ac:54:fb:4f:f9:6e:
51:0b:82:66:fd:dd:e5:98:c3:7e:96:6e:a6:93:8b:
f0:c2:7a:1e:27:ca:8f:96:de:30:71:2a:12:7b:b5:
4b:39:01:5d:c1:e7:97:0e:33:e5:e1:b8:e2:73:5f:
9c:9d:87:ee:1e:96:14:7d:19:1a:af:3e:b8:6b:7f:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EB:1B:DC:08:11:D0:C2:58:AE:D4:7D:50:61:17:8B:C7:27:9D:08
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a1:b7:c6:84:ac:e3:14:25:ab:79:1b:4c:50:01:11:bf:51:
b3:7f:a8:17:10:32:6c:49:9a:e4:90:2e:b2:95:65:e5:3c:9d:
40:1a:0f:09:9c:77:fe:40:67:d8:ca:36:a5:bc:fb:00:fc:07:
60:6b:6a:dd:f2:19:be:f5:69:6c:fa:de:9b:63:cf:c2:5a:29:
8e:60:59:90:c4:4d:15:39:58:dd:1b:cb:b8:46:64:7e:0f:76:
7b:87:fe:4d:da:b2:fc:01:a3:69:15:08:41:0c:65:ea:b9:e8:
5c:10:c1:17:c4:32:36:11:77:24:7e:86:12:00:67:44:de:78:
e1:5a:e2:48:fb:6c:de:09:4e:a8:8f:6c:aa:89:9b:03:d2:75:
9d:c4:cc:ed:28:02:d5:8c:d9:a2:e0:3c:90:91:95:4b:4f:78:
7d:94:9a:bd:e9:67:76:06:b8:56:d3:85:ef:5b:52:bd:84:f7:
c3:55:f5:34:77:21:95:eb:5c:8c:96:1c:a7:41:b2:a5:3e:dd:
dc:bd:24:86:05:b2:47:0e:b0:a8:7f:18:86:fe:a2:e7:55:c3:
3c:41:8a:4a:d0:cd:ee:10:33:0c:40:5e:a0:35:4e:b6:94:2e:
3a:df:f3:80:ee:25:a1:36:68:c0:f7:37:67:79:4d:6c:29:7d:
e9:c9:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:00:37 2025 by rpki-client