Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: VIRP9U08sG6Jl/fdbAmDtiSAwPDlwvqVzwWxByerKOQ=
Subject key identifier: 6D:43:55:AF:DB:84:61:B7:A2:D3:5E:EF:AD:B4:9E:A2:D7:CD:51:EF
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01974D7C03B61FF1F5EFE3F948EDA8E490B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 03:01:02 +0000
Manifest this update: Sun 08 Jun 2025 03:01:02 +0000
Manifest next update: Mon 09 Jun 2025 03:01:02 +0000
Files and hashes: 1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: FIyP/dWONGvBvvCay45D6WsjLQ7JtIOB3fBrQrOvXiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:03:b6:1f:f1:f5:ef:e3:f9:48:ed:a8:e4:90:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jun 8 03:01:02 2025 GMT
Not After : Jun 9 03:01:02 2025 GMT
Subject: CN=6d4355afdb8461b7a2d35eefadb49ea2d7cd51ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:4c:9b:b7:55:17:b4:ef:cc:d7:f0:c5:fb:
e5:bf:e1:31:16:3c:23:39:3d:30:8b:99:fb:20:7d:
e8:5d:fb:1c:05:4d:ed:09:dd:56:40:bf:20:ae:f3:
e5:d4:af:83:8c:7c:29:8a:ca:ce:2e:29:e0:4e:1e:
cf:18:8c:98:4e:a7:3d:68:e9:8d:61:8c:bb:5f:1e:
9f:4f:a1:59:1a:6f:7e:03:fe:c8:b7:3c:f1:b9:7d:
98:26:a1:bd:3f:90:e5:4d:f6:78:33:ff:fe:80:30:
a3:43:8d:e0:d6:ff:31:2a:7f:0e:f1:32:7f:6d:55:
96:57:eb:e6:97:23:0f:26:4c:c5:ad:0c:11:aa:e1:
71:57:60:b2:2b:7a:cf:68:05:19:c7:a9:80:e9:5b:
e9:7a:eb:09:f6:50:79:1d:a0:be:99:f2:c6:4b:07:
a2:32:7a:3f:74:ae:e4:02:01:0e:4a:20:44:2d:7c:
7c:ec:fd:6a:19:7c:0f:a2:94:00:66:a4:a6:d6:e4:
1c:08:6f:8b:29:7d:87:e6:1f:c2:9b:17:fa:80:d0:
4b:0a:da:06:6f:66:86:19:3d:b3:ec:60:f1:bc:ea:
11:0f:58:6d:72:79:4c:db:35:36:ad:32:55:78:0a:
d2:95:ec:e5:ab:2c:ba:00:03:3e:48:16:3b:d8:8f:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:43:55:AF:DB:84:61:B7:A2:D3:5E:EF:AD:B4:9E:A2:D7:CD:51:EF
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5a:94:09:56:74:d5:9c:06:d0:a2:9f:3d:b8:93:d3:8c:ed:
ff:b5:81:20:e6:f0:fc:16:e1:14:f0:5a:54:e2:4d:4f:df:7a:
10:e0:82:2e:b0:22:80:72:ec:c9:1a:9c:fe:f3:4b:7c:fd:15:
84:d7:ee:78:88:91:a3:67:62:47:cb:0a:3e:57:ec:27:ae:8c:
7f:b2:86:7c:81:20:a4:b3:fd:e2:4c:4b:b4:51:01:f3:8a:0d:
81:43:00:87:23:b0:80:85:c6:6a:5d:cf:0d:b2:72:43:54:13:
0d:df:cf:ee:c3:2d:cf:35:e6:ab:63:6f:42:b1:98:05:6d:04:
a9:85:fd:24:d1:c6:25:30:22:ea:4f:a9:75:36:f3:f1:83:cc:
e5:f4:81:1f:5e:39:47:f5:f6:76:e6:1c:d2:a1:2a:19:a0:52:
ec:70:1f:51:b3:8c:08:8f:f1:3a:f1:c7:fb:d2:3c:77:21:28:
42:5d:df:a0:ef:51:99:8f:bb:15:2b:10:69:17:f1:46:6f:bd:
29:ec:64:1c:09:b8:80:c3:cf:d3:39:fa:9f:b8:60:29:b2:87:
9c:04:02:16:f2:56:a2:12:f0:09:fd:f5:77:a8:7c:de:05:b2:
b7:0b:b1:05:99:8c:eb:df:3b:a2:1b:7e:09:83:ed:a4:f6:fe:
a7:9b:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:25:40 2025 by rpki-client