Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: fFrwtGw+GwEK5YgMUC1mRt25XP2rqU8vlL/ZsiRfSwk=
Subject key identifier: 1C:D8:2F:89:7B:57:D2:FD:E4:9D:E2:92:31:BD:B3:C1:3F:BE:58:42
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 019745C2AAF6DD35257A62DF8A7780A21601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 0363
Signing time: Fri 06 Jun 2025 15:01:14 +0000
Manifest this update: Fri 06 Jun 2025 15:01:14 +0000
Manifest next update: Sat 07 Jun 2025 15:01:14 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: YUs/PihVZs/1KQWV/RzwnAiyJnviwaHtaqL5Hf82ukY=)
2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:aa:f6:dd:35:25:7a:62:df:8a:77:80:a2:16:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Jun 6 15:01:14 2025 GMT
Not After : Jun 7 15:01:14 2025 GMT
Subject: CN=1cd82f897b57d2fde49de29231bdb3c13fbe5842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:1c:ec:98:b4:b2:0d:ba:21:6d:4a:96:10:
75:a5:8a:39:bd:22:db:1f:b9:e5:bc:9e:2b:af:fc:
a5:08:71:5c:cf:30:c0:fd:af:ae:5d:58:a5:82:a7:
3f:25:95:a1:e5:9d:88:d7:59:ba:e4:71:a9:b4:73:
36:21:b0:51:ed:ba:cb:db:3d:36:fe:12:d9:2b:c1:
c1:e3:e7:f6:21:9e:94:f8:fe:46:b6:4e:e1:3f:81:
ef:1a:64:be:c5:16:c5:74:11:00:e0:c8:ae:15:16:
35:3a:cd:94:5f:9c:cb:f7:7b:34:59:0a:ef:35:1a:
0f:0a:75:13:06:13:34:2c:06:c5:62:a4:25:d4:cd:
a6:62:0b:da:8b:d8:0d:13:49:58:7d:ff:79:df:ea:
1a:2d:56:d0:3f:83:50:ef:90:8d:ea:78:85:07:34:
68:7b:65:98:0e:72:15:8f:9c:0a:ec:f5:ff:2d:e8:
29:cf:51:33:4f:57:b5:30:f8:a2:2c:fb:fc:4f:1f:
b3:9d:a4:2d:25:16:92:13:55:96:80:03:01:20:19:
96:d4:0e:45:4b:1f:0f:eb:ac:b6:ae:9f:ee:52:59:
a3:f6:f5:27:c9:5e:c1:95:bc:94:a7:31:24:af:9f:
d2:4d:c5:40:89:97:21:88:7a:fd:5d:bb:d4:ad:75:
60:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:2F:89:7B:57:D2:FD:E4:9D:E2:92:31:BD:B3:C1:3F:BE:58:42
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a0:f9:f6:52:d6:79:e7:c7:61:8d:19:11:70:26:2f:b0:67:
56:5b:e5:01:31:2b:b2:3b:8d:ab:09:71:2c:fc:f0:c1:2c:32:
15:68:ef:99:e3:46:a3:42:cd:2a:1f:d8:df:a6:5b:08:7c:18:
ca:36:e6:12:de:72:83:c9:68:8c:5a:c8:fa:d1:0f:76:d9:7d:
d9:56:a2:d0:bb:24:e0:b4:02:74:f0:81:1a:ac:a7:01:bc:f6:
73:ce:df:4e:ea:7a:03:bb:41:44:21:d2:54:71:80:0c:4a:cb:
d3:03:24:05:c9:4e:27:24:7e:59:f2:63:c8:1f:03:58:cb:66:
25:dc:fc:be:da:73:34:22:cf:6b:91:e3:87:c5:a8:c7:dc:3c:
29:55:d5:0d:38:96:a1:ab:f7:d7:12:00:a3:6d:15:c2:0e:bb:
20:68:4f:fa:2b:16:69:c0:8f:f9:2c:a4:ac:ae:4c:13:a9:a5:
a4:d7:a7:ef:aa:0b:d2:05:ba:74:db:eb:c9:2c:ba:4b:5b:44:
09:c7:eb:22:f6:17:b3:89:92:7e:96:1a:bf:1a:09:cc:79:2c:
07:28:d4:e9:6f:5e:76:d0:38:2e:dc:37:06:43:71:4c:25:ee:
89:df:1d:e3:8f:77:bf:54:a1:bf:25:f4:8c:6f:b2:1b:89:cc:
d6:24:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:44 2025 by rpki-client