Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: YTdajTNsRqgjRNP33bspOuoZnuXa9YLOQyeGFnd3UGA=
Subject key identifier: 2F:B4:09:0D:A8:67:F2:3C:C3:FA:5C:7D:A2:AD:5C:92:C7:77:57:A0
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 01974C31DA078576876E4477D73375EA562D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 01D9
Signing time: Sat 07 Jun 2025 21:00:24 +0000
Manifest this update: Sat 07 Jun 2025 21:00:24 +0000
Manifest next update: Sun 08 Jun 2025 21:00:24 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: kIgDZb1mJNxoy-31G2UkNHRwWx0.roa (hash: zPGGaXstMh703tXkFi/JyzFhGqACNCTHmmN1tjIc6M0=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: WTh6Fr3h1zR1cBJc5JMWgufpYry+DPm0Qg8djkp3KEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:da:07:85:76:87:6e:44:77:d7:33:75:ea:56:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Jun 7 21:00:24 2025 GMT
Not After : Jun 8 21:00:24 2025 GMT
Subject: CN=2fb4090da867f23cc3fa5c7da2ad5c92c77757a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:dc:d7:2c:e1:29:3c:ac:87:dd:39:58:b8:
65:5a:15:1c:64:c6:67:fe:f7:7d:59:f3:32:cb:2e:
13:0c:62:22:79:7f:48:70:2b:7f:1b:ea:83:d3:37:
1a:d1:39:d9:ad:2f:22:04:ad:97:26:b1:80:a3:44:
aa:67:9b:0f:8b:4c:14:e7:c0:6b:4f:1f:a3:2c:fb:
41:30:40:98:ff:e8:5c:c6:3f:61:f7:1f:3c:f4:e3:
d0:81:a3:e4:43:3c:0b:2d:f8:2b:ad:46:13:90:2a:
a9:84:fd:3d:46:85:22:71:5d:5d:9c:c4:eb:dd:ec:
43:e9:05:84:62:9c:f6:21:00:2f:69:8d:81:b2:1d:
c1:b3:d7:eb:c9:86:29:f9:31:2a:00:e5:f3:41:d1:
d6:49:e4:54:fb:57:0c:03:b9:42:6e:82:55:df:bc:
e0:f2:ee:d4:92:dc:c6:24:05:97:df:44:83:fc:5f:
4f:cc:c2:65:74:11:2a:06:2f:a7:de:76:d6:38:d1:
ac:da:d7:17:e6:32:78:6e:39:ca:b3:94:51:23:39:
51:9a:a4:7c:cd:bd:3e:ea:c6:71:18:c4:c4:de:ce:
be:1a:a9:95:56:af:17:bd:20:fd:3d:93:4f:22:c8:
66:46:ca:ed:44:53:01:96:4c:8d:e5:60:17:42:fd:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B4:09:0D:A8:67:F2:3C:C3:FA:5C:7D:A2:AD:5C:92:C7:77:57:A0
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7f:37:70:88:48:d5:3e:9c:6f:e7:39:a1:b3:22:6e:57:45:
12:15:11:a8:76:fe:a2:ef:73:a9:e9:0d:6b:0c:57:12:67:de:
a8:91:5e:f2:a9:41:0e:55:6c:0a:e7:68:93:3f:94:c8:30:bc:
ba:33:ac:09:4f:5f:e7:d3:5a:40:75:3c:c8:56:01:70:0e:7b:
6f:30:63:42:72:83:b0:36:37:6b:ce:f4:61:1b:78:54:f8:8e:
c9:c5:c0:52:fe:cc:ee:ee:4b:00:69:b1:53:00:59:15:df:41:
70:4d:d9:2d:7e:83:e0:94:9f:96:95:de:b8:03:6c:15:a2:4c:
90:9c:31:07:78:17:b9:1e:2f:3f:0e:9f:ae:9b:17:8b:98:d6:
4c:8e:6e:d9:76:8d:f8:b7:eb:e3:cb:7a:22:c1:92:16:62:5e:
10:5b:af:39:35:af:2d:5a:dd:83:92:a6:1c:b5:68:81:0b:7e:
84:44:26:5a:1e:1f:e7:66:91:9a:87:26:5f:f5:91:b6:bf:03:
d9:d7:b8:32:1f:be:90:2d:23:1a:da:b0:11:e7:d3:09:87:80:
52:8c:0b:0a:8b:bd:63:0b:08:d7:43:ee:bb:00:eb:bb:78:85:
be:d0:b3:05:fe:52:8e:28:96:bd:9c:83:f0:2d:8f:5b:32:56:
f5:aa:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:35:09 2025 by rpki-client