Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: bG3E7229PleK3jXPyiSDCBNCzLaz4LmWM/lOVAFj+Ko=
Subject key identifier: 17:5F:76:A3:FF:91:68:DE:F7:94:8C:F1:F0:2B:96:B8:C1:AF:C0:D7
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019759121CFB1B06AF30DE36B00CB01D556B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1070
Signing time: Tue 10 Jun 2025 09:00:48 +0000
Manifest this update: Tue 10 Jun 2025 09:00:48 +0000
Manifest next update: Wed 11 Jun 2025 09:00:48 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: JDbFWpiy2tY7zimM9PPVudfkVy8LS1PZ/xmVjb7jemA=)
2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:1c:fb:1b:06:af:30:de:36:b0:0c:b0:1d:55:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Jun 10 09:00:48 2025 GMT
Not After : Jun 11 09:00:48 2025 GMT
Subject: CN=175f76a3ff9168def7948cf1f02b96b8c1afc0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:0b:f7:d7:77:6f:f4:03:cc:48:5f:49:b8:
8f:ea:b4:9c:2a:47:e0:ea:89:8c:52:99:0b:34:ae:
d6:15:09:2a:de:18:12:a5:23:57:a5:44:22:77:de:
f9:5e:7a:1f:c0:68:69:68:f8:b4:6c:f4:df:b7:ec:
ae:85:09:a7:68:27:6b:70:16:9d:47:60:c0:cc:04:
15:6e:51:31:b1:70:19:ad:10:ca:34:9d:aa:19:48:
85:2b:df:6b:1d:24:d7:21:17:1c:35:75:36:fe:df:
69:bd:28:43:34:e3:65:3c:42:73:7a:f6:04:b1:1f:
d8:26:b6:3a:cf:5f:7b:80:c5:42:46:ca:66:40:ef:
99:25:a3:fb:88:ce:6e:05:65:2b:61:86:3a:e5:8c:
76:8a:58:0b:38:38:43:42:2b:cd:77:84:13:eb:61:
49:83:c7:3e:1d:e9:37:d1:ec:99:ce:a0:71:e2:e6:
a8:ea:d9:20:4f:01:62:3c:d7:9d:09:9e:f3:ea:26:
c6:06:c7:2c:29:30:70:8f:a1:16:54:a9:69:9e:7b:
5a:a8:3e:61:09:38:b3:6c:cf:9f:69:95:20:d3:95:
85:39:33:2e:ec:35:99:d0:ed:c1:8f:21:52:6f:f5:
07:9b:17:ed:b4:84:46:35:53:3d:21:12:56:8e:dc:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:76:A3:FF:91:68:DE:F7:94:8C:F1:F0:2B:96:B8:C1:AF:C0:D7
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d4:36:56:81:77:ad:ca:b9:4d:ed:ce:aa:84:82:d1:76:53:
e0:8c:53:63:f4:d3:d9:43:27:42:d5:71:6d:ab:3a:05:87:48:
c5:6c:44:04:af:2b:61:53:79:d4:59:1d:16:ef:e2:04:c3:49:
ce:54:87:dd:26:8d:52:4d:80:52:a3:c2:ac:a0:4e:19:69:cd:
dc:5e:44:68:c5:4a:84:1e:7f:27:2c:33:87:72:e7:6d:10:80:
06:f2:31:6a:cf:f0:75:6e:87:41:49:8a:d4:c2:14:18:0c:c7:
4b:d0:50:39:4f:7d:d2:ff:33:ef:eb:78:97:c7:18:ea:ee:e0:
b6:48:e2:74:70:07:fa:42:13:5b:6f:91:cc:55:93:1d:2e:5a:
44:66:21:f0:1d:8d:de:90:d8:af:e5:98:a4:f4:2e:b3:1d:a9:
36:1f:21:9e:dd:fd:51:c2:60:3f:59:77:9e:c4:13:4c:5e:47:
3a:2a:ca:8a:cd:a1:b7:5d:11:7d:bc:0e:4c:72:ea:21:a5:1c:
83:d6:15:71:c9:40:6a:c1:c6:cf:5b:ea:3b:cb:a5:74:7b:ee:
3a:67:c9:78:a7:5d:4b:62:a7:eb:5b:00:59:03:92:92:36:b6:
b8:73:ca:0e:81:33:c6:41:c0:a0:11:b9:49:66:b1:72:83:6d:
67:21:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:26:18 2025 by rpki-client