Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: F548x02g1+nNqihDaBUPlgfCpskz2c8ZYP1IpBFt5xU=
Subject key identifier: 56:19:67:0C:2A:F1:24:F1:EF:93:EB:72:1F:82:FF:A1:0C:C3:0C:67
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 019748550006291DC80C82DC749080DA51FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0B69
Signing time: Sat 07 Jun 2025 03:00:19 +0000
Manifest this update: Sat 07 Jun 2025 03:00:19 +0000
Manifest next update: Sun 08 Jun 2025 03:00:19 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: QJkj7QqOdtK3lPwj1gpQ7EEhoRKgcVnAkznuNnJvesw=)
2: IakaUVIwolxABf_iFG6RX8yq8dc.roa (hash: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:00:06:29:1d:c8:0c:82:dc:74:90:80:da:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Jun 7 03:00:19 2025 GMT
Not After : Jun 8 03:00:19 2025 GMT
Subject: CN=5619670c2af124f1ef93eb721f82ffa10cc30c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:5f:f4:25:46:13:da:53:6d:98:b1:62:2b:
cf:a6:2f:7d:03:30:46:bf:f9:76:9b:41:85:82:d2:
52:8e:88:c4:f9:c0:b4:03:d4:af:10:3c:6c:ee:19:
0f:36:e9:a4:62:1e:59:7c:4d:ea:f7:8a:84:5f:fb:
dc:54:dd:c4:47:1a:b9:2b:0f:9d:83:18:35:f4:2d:
5f:04:0f:b1:67:31:8b:18:55:25:f5:59:3e:f9:6f:
19:2d:3d:a5:91:76:98:16:05:bb:de:b6:d9:33:00:
5d:bb:88:aa:df:8a:fb:c9:f3:de:84:94:67:21:22:
2e:6e:18:e1:c3:cc:7c:23:c1:ca:95:23:d8:f3:ce:
f5:06:99:4f:84:82:5c:f5:39:3b:8a:38:92:ed:a9:
80:ef:7e:0f:d7:53:8e:f5:63:9c:58:af:81:f4:c9:
c3:2a:03:f5:28:ef:c5:d2:c7:04:72:ef:4f:6d:4f:
89:08:d5:7c:ca:0a:05:5a:0d:42:37:be:f3:7e:5e:
b5:ee:c6:1d:81:a0:5b:a8:f9:7d:9b:e5:a5:30:fa:
4c:78:47:19:d4:2b:62:dc:28:49:d6:67:95:22:29:
bf:d6:2c:63:03:44:1c:08:9a:85:31:09:79:61:35:
15:0c:4c:5d:bb:61:f7:e0:d1:b2:87:1e:c0:27:a7:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:19:67:0C:2A:F1:24:F1:EF:93:EB:72:1F:82:FF:A1:0C:C3:0C:67
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a8:17:15:85:6e:89:34:c1:32:37:fa:5d:04:62:8e:54:fb:
74:a1:18:59:16:ac:91:c1:ca:cf:cd:97:2b:ef:a5:e4:8c:0c:
b4:20:aa:7b:2f:bc:9c:37:b2:b5:46:3b:f2:68:24:4e:ff:34:
f5:68:49:aa:0f:ff:35:08:d7:e6:88:b4:c7:5a:22:13:4d:b4:
2b:92:21:d1:c8:80:2d:a1:db:35:69:37:11:d3:0b:9f:c7:7a:
fe:27:e8:75:e1:ef:c2:14:9d:9e:26:44:18:40:02:c2:65:a6:
a9:ee:97:62:51:3d:38:85:19:b0:21:2f:24:9f:d4:c9:30:bf:
49:ec:20:c7:23:5d:19:be:cf:b3:33:fd:e1:0e:fa:62:65:46:
e1:c9:3b:ad:9e:87:74:f2:02:ac:ac:8c:5a:ac:cd:7b:2e:a0:
05:06:b2:81:01:d8:84:55:86:95:ce:b4:1b:df:d7:f1:01:b2:
53:8d:63:d0:c8:73:3d:94:d1:08:c5:e2:eb:05:05:bd:f4:46:
72:cd:96:aa:98:7a:a8:ab:ac:eb:56:cd:11:00:e4:71:1e:c0:
4b:12:bd:0a:70:2d:e7:a4:d4:7f:14:64:15:62:88:64:e5:88:
c8:75:3a:4c:36:6c:e3:3e:61:39:9b:88:fd:16:85:a5:ac:46:
59:d0:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:11 2025 by rpki-client