Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: f4EI0rc6uOCXoVvogpSejf9Rii04EptVQ7tjNHG8lMg=
Subject key identifier: 5D:12:FD:04:7E:2B:23:E4:9D:7E:DF:7E:E8:78:1A:88:B6:13:83:E8
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 01974E8E17863B7F1DEE595AFFA18540F467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0F18
Signing time: Sun 08 Jun 2025 08:00:24 +0000
Manifest this update: Sun 08 Jun 2025 08:00:24 +0000
Manifest next update: Mon 09 Jun 2025 08:00:24 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: Dpwv804FClC41yay9Sh6cJMeQ/vn1y7DOTJFfNTMikU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:17:86:3b:7f:1d:ee:59:5a:ff:a1:85:40:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Jun 8 08:00:24 2025 GMT
Not After : Jun 9 08:00:24 2025 GMT
Subject: CN=5d12fd047e2b23e49d7edf7ee8781a88b61383e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:81:08:97:1e:cb:93:b0:23:92:bc:c5:6f:
2e:aa:20:e5:1f:1b:7b:91:92:0a:50:22:f8:f0:21:
c8:c0:21:f5:d1:70:66:7b:06:3b:0c:a0:2d:30:44:
5c:0c:95:02:d5:ff:e5:a1:fb:e8:fd:93:7d:e5:b7:
e0:b0:e0:9a:a4:67:34:c8:2e:8b:34:af:5a:ca:87:
35:d6:80:1a:4f:e3:a6:27:2f:13:e1:9c:05:95:f8:
2a:21:a2:28:75:f0:6b:0b:6f:7c:69:42:ff:87:ad:
94:b8:e9:bf:83:57:00:4d:3f:ff:19:57:dd:74:76:
92:32:29:93:df:10:11:54:d5:ea:77:87:3b:31:22:
05:76:a9:55:6f:1c:d0:c3:88:3b:a1:33:43:5d:f5:
8d:26:c3:7b:e3:bf:de:d2:33:13:76:0f:a3:ab:4c:
bd:6f:1d:d0:f7:c2:df:0c:f2:f0:a5:56:cb:15:40:
56:c2:81:d2:98:1c:6c:13:35:fc:19:35:6c:92:e8:
e2:05:bf:ac:9c:6c:40:52:d3:7a:a5:57:ce:72:2f:
99:f4:ce:ea:ed:a3:49:f4:4d:87:d7:45:9d:6a:a5:
41:bc:5d:40:71:8e:5c:1d:7a:b2:69:37:f6:0b:be:
42:cd:05:07:80:26:69:f9:64:8b:db:5b:65:1a:3c:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:FD:04:7E:2B:23:E4:9D:7E:DF:7E:E8:78:1A:88:B6:13:83:E8
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ef:f8:6d:b2:9b:e0:10:c2:91:9c:d1:1d:3a:71:a5:53:fe:
17:0d:01:99:28:13:10:cd:3c:28:14:19:93:27:36:74:83:1c:
e6:a7:bb:c2:24:3c:99:a7:3f:8a:ef:00:a9:09:b9:ac:f6:cc:
f9:21:1f:74:01:cb:73:fa:0e:e2:89:aa:cd:13:8b:3b:fc:44:
9a:29:f4:b8:a4:7a:22:cf:ca:28:36:6c:09:29:0f:f4:11:cb:
3e:19:36:9c:f1:b0:f2:00:ff:df:ea:52:7b:4f:10:e7:bf:4b:
52:c4:79:4c:4b:7b:c3:c4:04:a3:87:d5:5c:a5:53:aa:4d:03:
15:c4:a9:d6:f0:16:67:ba:51:d1:53:7f:26:64:4a:cc:97:81:
a3:ac:75:2b:88:ad:34:9f:d6:7f:45:c7:40:75:58:1c:0e:96:
a5:8e:59:89:c4:e1:46:e0:e8:22:ea:2e:cc:8b:46:71:30:94:
c6:b0:45:c7:72:4c:dc:3f:ac:06:c9:ee:9d:45:cc:ed:1c:7f:
8f:c0:9f:41:e0:d3:6e:bc:db:5b:f2:34:2e:bc:d3:2d:72:f6:
e8:ae:5e:e2:c6:74:65:ef:3f:6c:7a:31:c8:6d:23:86:e4:d3:
6f:20:57:fc:09:0b:30:cc:d1:79:e9:55:73:02:ea:b1:31:2f:
12:ce:d4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:41:53 2025 by rpki-client