Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: RwShBNHWQg/uQs8b3735VDe3FuPwlJaptO7JpAbrY2M=
Subject key identifier: 50:7D:72:A9:17:ED:A5:82:46:A6:A0:30:D3:75:AB:BE:E3:15:B2:6F
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 0197481E57FEAFBE441765DA34C244DE4BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 02CA
Signing time: Sat 07 Jun 2025 02:00:37 +0000
Manifest this update: Sat 07 Jun 2025 02:00:37 +0000
Manifest next update: Sun 08 Jun 2025 02:00:37 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: FS+o0XpkNZO3wca/EQD38XbPrssdTTQOl5pBRFhT2n0=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:57:fe:af:be:44:17:65:da:34:c2:44:de:4b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Jun 7 02:00:37 2025 GMT
Not After : Jun 8 02:00:37 2025 GMT
Subject: CN=507d72a917eda58246a6a030d375abbee315b26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:ef:42:bd:9e:11:ed:a1:5f:6f:cd:8d:9a:
2c:54:fa:97:b9:8e:da:e1:29:67:89:5e:1e:27:2c:
35:91:35:75:19:d0:9e:0e:b3:38:42:92:59:06:b2:
f0:7a:ce:b0:ec:89:9d:3b:27:ff:8f:5b:82:f1:b1:
98:d1:23:06:6c:ac:bd:09:af:b8:ac:6b:bb:02:c7:
9f:1b:89:95:a9:1a:52:79:02:0c:0c:8c:fc:15:62:
c2:d3:b2:8b:13:11:71:7b:b8:76:4a:71:c1:ba:af:
e6:b8:0f:d0:74:e6:03:74:7c:32:88:99:3d:dd:01:
62:cc:00:09:5a:71:ce:86:7f:ea:c0:9e:0d:36:ba:
88:18:71:eb:b1:33:be:04:47:4a:4f:02:55:83:0b:
9e:8c:c0:3c:8a:83:d9:4e:2d:d0:d2:03:a3:40:ea:
ca:fb:31:5c:53:40:4a:8a:e2:fa:9a:5e:b5:84:3b:
06:94:7b:c9:36:b8:79:88:fd:5b:9a:34:e4:13:7a:
d6:6f:be:29:4b:12:ef:22:08:22:c9:44:2f:63:72:
02:cf:fb:cf:d2:fa:a7:3a:5c:b6:af:9f:bc:6c:1f:
0b:d8:0e:ce:13:43:4e:b9:23:ea:3c:5a:02:10:4e:
87:e0:df:04:24:cb:c1:11:f6:1b:c3:3d:5c:7e:fe:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:72:A9:17:ED:A5:82:46:A6:A0:30:D3:75:AB:BE:E3:15:B2:6F
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:32:64:4e:d6:ab:4d:a2:b6:09:64:f8:55:49:3b:8c:35:5d:
eb:85:5d:91:6b:ac:18:4c:e9:ee:07:50:69:b8:2a:26:21:cc:
f1:05:ba:e7:33:53:ae:71:ce:3e:5e:ef:e3:c0:f9:4d:73:de:
51:ee:4f:bd:f1:54:3f:67:d2:35:c3:65:8a:b7:0e:99:6b:8b:
9e:8f:c3:cb:b9:ea:7e:35:0c:46:ce:90:ea:59:b2:dd:a8:3e:
af:5c:87:2a:d3:d5:96:76:21:a8:26:d3:15:3e:4f:d9:d7:43:
26:a7:03:29:39:6a:dd:8d:6b:db:d8:f4:48:f1:1c:66:f4:f7:
60:2a:74:73:99:0a:d6:94:e4:b7:f8:d5:c1:d3:d1:6d:45:96:
29:f0:7f:46:77:56:c0:b0:a7:c5:eb:e8:01:8d:75:a2:19:32:
6a:d6:5d:ab:45:73:8a:c3:9a:a0:2b:1a:fc:e6:07:48:af:e4:
88:b9:ea:e2:1b:65:50:04:43:00:9f:ca:b8:27:a0:31:12:87:
f7:2b:62:27:89:30:66:f7:8b:3d:a4:d3:b4:e8:65:9a:31:ea:
e8:4f:5c:e1:70:1a:91:7e:8d:1d:56:8a:65:2b:e8:9e:d3:06:
f7:d1:99:cc:7f:c7:00:4b:97:ea:e8:2e:7d:1e:76:73:b3:b2:
23:c7:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:07 2025 by rpki-client