Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier: D94m9R//6OOtbeggyLlQXRo6mo4sH3BHj1zdQycPf6o=
Subject key identifier: AF:FC:33:7F:67:A2:6D:7A:94:4F:3A:03:EF:40:05:90:38:EF:31:76
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial: 01975158FA68C4BD6E922FBB5DDF20D34FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number: 036D
Signing time: Sun 08 Jun 2025 21:01:15 +0000
Manifest this update: Sun 08 Jun 2025 21:01:15 +0000
Manifest next update: Mon 09 Jun 2025 21:01:15 +0000
Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: LKyVdc3xBJFiySy/mrA37EZ+d2cetrcIUOqMy4XtHBs=)
2: yAFTVipgzUq2JehlyXdlgvk4lGA.roa (hash: 4JLBxrRXaq9Ej5PAfStMaFMw5Cw8Ln+aMWKMUmNE/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:fa:68:c4:bd:6e:92:2f:bb:5d:df:20:d3:4f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
Validity
Not Before: Jun 8 21:01:15 2025 GMT
Not After : Jun 9 21:01:15 2025 GMT
Subject: CN=affc337f67a26d7a944f3a03ef40059038ef3176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:ec:3a:69:ce:27:c3:ec:b2:12:cd:4a:80:
59:cf:42:29:b6:e9:ec:87:48:95:98:36:63:a6:66:
b3:29:62:71:64:bc:bb:d5:29:ee:39:70:cc:b3:00:
be:9b:3e:03:e8:87:74:3e:48:95:1b:25:d5:19:53:
6a:cc:f5:1e:77:61:e3:85:63:a5:cd:8f:d6:d7:e4:
f1:e1:98:ba:d7:43:e1:d2:c5:d5:41:72:65:f0:58:
01:5e:e0:b8:0e:ed:1c:e5:eb:40:49:54:76:7b:cc:
23:ab:a0:49:e4:c1:0e:dd:11:53:af:88:5d:1b:81:
94:8c:79:ef:f5:6b:20:e2:98:d0:84:6b:7b:4e:ff:
25:00:6b:b5:58:54:4c:7d:26:7f:14:87:ca:19:c6:
71:21:20:e6:14:7b:27:eb:24:74:2f:65:89:5a:31:
d3:e6:29:a6:f4:40:03:d0:e3:05:66:7e:19:71:a7:
ae:3b:a9:aa:ed:5a:30:11:d7:85:42:25:e6:ed:ac:
fc:29:0d:2d:1f:08:71:30:d7:d9:f9:b0:ce:d2:5b:
fd:f1:dd:51:8a:53:53:e8:12:e3:a0:01:91:6d:f8:
79:12:4d:4a:93:f2:d1:dc:94:88:07:30:36:28:00:
0e:ef:3b:a5:99:1f:53:68:01:2f:c9:54:7a:ce:d1:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FC:33:7F:67:A2:6D:7A:94:4F:3A:03:EF:40:05:90:38:EF:31:76
X509v3 Authority Key Identifier:
keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:90:7d:91:10:ec:98:b6:a3:d2:4d:79:f0:82:93:d1:33:9f:
32:6a:c1:ed:f5:29:f6:0d:b6:60:2d:1d:46:85:1a:d8:0e:bf:
b0:87:f6:d8:71:a0:18:98:06:e1:af:1f:92:31:02:2c:8e:76:
4f:39:66:17:92:91:99:78:05:6a:75:da:ef:59:1e:4a:1d:1e:
6d:e9:e8:45:57:02:ad:91:5a:44:f3:11:0b:cf:ea:3c:d7:4a:
39:df:fd:d4:6e:38:cd:6a:28:ac:55:8d:e9:7d:c3:b1:c2:85:
4b:18:aa:80:9b:ca:06:2a:89:2c:a1:ed:c2:11:06:6a:7c:0d:
ba:dd:2f:c0:77:d6:4c:5c:56:2e:91:96:03:f4:f2:dc:f8:a3:
98:8a:87:ee:e9:b7:e9:47:7a:bc:61:8d:b9:91:89:00:e0:6d:
72:e2:13:ee:2e:be:18:4a:27:a0:f2:0b:6c:7f:d2:8b:bf:d7:
15:85:7f:c6:50:d0:fd:71:0c:d5:fe:d5:c3:28:cf:4e:8f:15:
d7:34:88:4f:a3:12:b4:7e:15:17:bc:06:f9:cd:8d:f3:76:c7:
43:09:d6:f5:04:1f:7a:36:c6:58:c4:17:fd:2b:b2:9e:5c:af:
35:0a:5f:40:f6:84:0f:31:98:a3:5b:a7:50:38:d3:5d:c4:17:
bd:d2:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:41 2025 by rpki-client