Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: MRoGk6G8xOZZbCf+L5/v3gOW6fDuoja0sPr02KJ6kC8=
Subject key identifier: 18:8A:52:49:EB:60:1E:0F:D6:08:1D:AF:9F:95:F4:7E:F9:47:B5:AB
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 01974CD78A1B75C52317ECDB43DC0359C07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 00:01:23 +0000
Manifest this update: Sun 08 Jun 2025 00:01:23 +0000
Manifest next update: Mon 09 Jun 2025 00:01:23 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: B47sv2xBPLGIGHyERPtiQ4u8db+d8WsMrLo8TqAjX+8=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:8a:1b:75:c5:23:17:ec:db:43:dc:03:59:c0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jun 8 00:01:23 2025 GMT
Not After : Jun 9 00:01:23 2025 GMT
Subject: CN=188a5249eb601e0fd6081daf9f95f47ef947b5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:27:30:e9:6e:66:37:63:40:01:81:b0:46:
b9:06:be:c4:ce:b8:a3:a4:ad:f9:5f:b0:69:1c:49:
73:68:e3:8c:0d:ac:d1:0f:55:b3:0e:fd:83:26:b0:
5c:ec:b5:7b:f6:f9:f5:0f:35:95:41:14:00:b7:78:
7c:bd:70:4c:58:a3:8b:1c:2f:94:75:3a:5b:1b:8a:
cd:ae:05:66:56:f4:9f:8f:14:7d:54:d5:5d:91:33:
fb:5d:13:77:02:0c:77:74:00:6c:a7:0a:a1:b2:1a:
62:ce:23:dd:15:b7:57:ad:b9:35:93:d2:92:c1:e8:
50:dc:a5:79:53:07:8c:a1:b3:3d:7a:cb:f3:e7:3d:
e1:94:01:85:bf:45:17:bb:a5:3e:47:1c:19:8e:53:
a1:08:15:95:cc:2a:4e:ec:c6:0f:dd:59:41:22:fe:
0b:c2:5c:3e:15:73:c9:c6:44:4b:f5:fd:d7:fc:13:
ce:33:35:c8:4e:5d:50:67:f7:6f:d0:1b:b8:19:de:
92:d3:7b:4a:c8:43:4c:24:a2:c1:55:13:1b:d4:a5:
b5:93:a3:65:1d:6e:b4:41:d3:00:37:f1:90:bf:43:
0b:5f:c2:44:3d:a6:52:6b:a0:c1:9a:e8:ea:b5:86:
dd:c9:d2:6c:82:99:7f:1b:9e:43:e3:79:88:1a:08:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8A:52:49:EB:60:1E:0F:D6:08:1D:AF:9F:95:F4:7E:F9:47:B5:AB
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e4:1a:65:33:67:f6:7e:ea:1d:07:53:82:ed:c4:1a:1b:88:
4e:1f:e7:ef:ae:8b:60:35:69:c2:68:e4:22:80:42:f8:37:60:
9c:f5:e4:a1:b0:a7:26:38:1e:b1:c1:14:7b:d7:ce:d7:3c:22:
15:dd:24:8f:5e:14:16:37:25:ef:f2:a1:c6:ff:5e:a4:6c:9a:
11:65:51:59:2f:c1:56:4a:c5:a4:aa:0a:ec:00:78:09:c4:cb:
7f:a1:9c:4b:88:9c:bf:cc:e7:7c:79:3f:39:c1:0f:be:f8:8b:
1b:65:53:17:90:fb:1a:7d:f1:49:58:0c:fc:70:3f:d9:4b:06:
f3:fd:46:d6:af:d8:dc:7d:67:01:a5:b2:52:7b:e0:6a:95:61:
73:05:dc:11:df:31:ec:0d:73:5e:18:c9:d7:f5:ed:ac:dc:b0:
48:fe:7c:19:5d:46:3d:c2:4f:a5:8d:2e:a0:e6:47:8e:4d:67:
3d:e4:bc:3d:48:ca:1e:47:cc:4a:9e:e6:09:9a:5e:ed:00:1a:
cd:36:8e:a8:53:20:b7:d6:c9:98:0f:ae:e7:14:6e:fb:08:24:
f1:80:d2:83:85:af:7e:ef:85:00:c4:89:f5:d2:05:1f:bb:08:
bd:3e:7c:a8:99:89:ad:95:4b:ab:f7:21:f1:b4:d3:57:34:60:
a6:e4:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:34:46 2025 by rpki-client