Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: cVwywSnvvPcC7EUROTwbGEeSqSFQgjstk5RTWVcrA54=
Subject key identifier: 0D:FA:D5:06:49:D9:55:AE:F1:61:D4:50:FA:11:90:56:50:32:0A:16
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 01974D0E11FC271AFE493C634DDB40D1F555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 0752
Signing time: Sun 08 Jun 2025 01:00:57 +0000
Manifest this update: Sun 08 Jun 2025 01:00:57 +0000
Manifest next update: Mon 09 Jun 2025 01:00:57 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: VBGzBp77aKiaouFhppSnWjW+lCSKrSplBvcKOg9Y/Ao=)
2: eEAcVM4h3e_6uLTwXzH2smck964.roa (hash: 2dyqSC4Nr999y8UdL9+8BtI2W3QPoxUvEaAKvO9sMtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:11:fc:27:1a:fe:49:3c:63:4d:db:40:d1:f5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Jun 8 01:00:57 2025 GMT
Not After : Jun 9 01:00:57 2025 GMT
Subject: CN=0dfad50649d955aef161d450fa11905650320a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:f6:8b:29:d9:89:8c:58:33:d5:e2:2f:fa:
63:03:f3:d5:bf:a6:16:7f:98:8d:6a:48:d9:da:89:
b7:86:ea:45:58:52:19:e1:98:c2:67:fa:59:06:b4:
42:58:ea:c7:b8:70:4e:8b:af:8c:52:ec:b4:44:0d:
03:44:dd:87:a9:37:59:ab:b0:c4:c0:39:bd:99:7e:
80:c3:87:5e:c5:6c:cb:6d:68:b3:9f:65:83:40:00:
55:07:ab:79:34:98:c4:e7:e9:b1:25:9a:35:0e:c8:
6f:55:7c:2d:5f:5a:73:c8:80:b8:76:e1:44:3a:f3:
ba:54:27:33:09:2c:59:e3:51:31:fd:47:a1:49:02:
d3:b1:9b:91:87:63:81:43:14:c7:23:d5:8e:8b:d2:
3f:b1:d0:8e:ca:92:4b:86:45:e2:1a:c5:3c:df:eb:
a6:60:ca:49:a9:4b:9c:da:71:7b:0b:07:eb:99:b8:
37:56:cf:43:d7:d4:d3:37:57:f8:72:7b:86:9b:e3:
35:5e:81:03:89:8c:88:e6:2d:4c:f4:56:47:f8:70:
67:e5:cd:41:9c:f1:02:b1:94:5f:1b:a9:89:11:13:
b3:71:91:dd:d0:61:8d:74:6c:47:a2:13:b8:62:72:
05:be:41:61:fa:79:22:41:c1:b8:d8:80:e2:ef:b4:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FA:D5:06:49:D9:55:AE:F1:61:D4:50:FA:11:90:56:50:32:0A:16
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:18:92:20:e9:e7:f7:6f:b8:13:ba:cb:40:16:9e:a9:37:5b:
8d:b3:09:fe:00:f5:d0:70:d6:44:4d:a5:99:cd:ca:18:0e:74:
6b:ea:2a:74:52:37:7e:5d:44:65:88:38:e1:56:12:02:d5:a7:
96:af:51:26:b3:9c:11:bf:5d:1d:54:2e:28:0b:65:e3:5c:c4:
c4:eb:fe:76:38:c0:4c:cd:b2:48:8f:6e:03:48:73:a6:82:6b:
06:e3:43:1d:c1:c8:9e:48:f1:1e:55:57:02:80:81:7f:37:dc:
c7:3c:5f:6d:4c:09:ff:14:5f:33:10:40:00:84:af:a4:8f:b2:
44:50:f8:18:57:6e:9e:14:f6:f7:23:3a:46:36:ef:b7:6c:22:
0e:20:4a:92:86:a3:ab:b4:25:d1:10:c8:4f:cf:b4:ce:8a:db:
36:e1:d1:6f:eb:bf:e1:62:7b:e8:09:61:64:72:6a:6e:eb:a5:
18:53:ea:05:94:52:65:2f:11:ca:5d:da:6d:27:2f:5b:29:d1:
e1:1e:a8:f4:0e:a6:5f:58:1a:14:2f:44:76:67:09:3f:24:03:
d5:fc:d7:42:a5:3f:99:f0:32:18:53:f6:2c:22:be:e9:04:c8:
3c:7f:e1:b0:8a:82:0a:52:69:0b:2e:11:4f:3f:bc:f7:81:7a:
50:f2:e6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:27 2025 by rpki-client