Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: Mic47LH4Vdr1CN+13RtsDVtMsNL6nD6r47OFXEI8Wvs=
Subject key identifier: FB:B6:E2:34:D4:9F:87:A9:81:6F:8A:C4:C3:1B:68:01:9F:7D:48:16
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 01975A5C66E33F8D37000874A685F3937417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 15:01:34 +0000
Manifest this update: Tue 10 Jun 2025 15:01:34 +0000
Manifest next update: Wed 11 Jun 2025 15:01:34 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: MSpHVWZQ1Y0Uj+acDA0aGt33X861jisuY3Y+3AFel/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5c:66:e3:3f:8d:37:00:08:74:a6:85:f3:93:74:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Jun 10 15:01:34 2025 GMT
Not After : Jun 11 15:01:34 2025 GMT
Subject: CN=fbb6e234d49f87a9816f8ac4c31b68019f7d4816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:f3:9c:73:4c:af:8d:e1:66:db:18:90:69:
96:1e:c2:c7:c4:a4:1f:66:ce:e9:c3:3f:14:b8:8f:
31:f6:21:98:f4:07:88:50:e9:73:fb:86:a9:9d:d7:
4e:c3:58:32:7c:ef:ed:3c:bc:de:9d:90:02:6e:bd:
02:24:b4:39:bd:ff:32:13:a1:ed:d5:c6:e7:fe:60:
b5:dc:58:b6:e7:02:b2:ab:be:d9:cb:d2:93:d5:ae:
48:c6:1f:5e:d5:f3:00:af:0d:3b:4a:db:c5:6e:6d:
d6:ec:4d:09:37:74:28:bc:f8:c1:d0:18:8a:f7:5d:
7e:50:9e:c0:be:94:f3:7f:bd:64:a1:7e:6d:0f:11:
45:a8:7b:75:30:72:46:6b:88:81:15:55:f5:d7:f2:
87:21:a6:0c:83:6e:8b:10:9e:84:da:ac:c3:be:14:
88:e2:a5:02:fb:fd:4c:8f:2c:76:ac:18:6d:b1:c2:
6c:f3:dc:89:cf:74:c2:17:23:32:2e:0c:44:2c:65:
d5:ca:52:2b:f4:25:f3:d9:fc:ad:4f:60:b9:70:1f:
c2:51:0e:6e:e3:08:a8:a0:2a:be:07:56:d7:ec:a0:
d9:89:db:0c:13:7e:0b:94:12:db:a8:b5:8d:73:3e:
b4:4e:4f:aa:c7:e8:11:94:d0:82:f8:3e:c2:d3:84:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B6:E2:34:D4:9F:87:A9:81:6F:8A:C4:C3:1B:68:01:9F:7D:48:16
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9c:e3:63:2e:01:46:71:2d:aa:00:e0:75:d4:d6:f7:19:36:
08:36:01:89:cd:b5:9a:85:03:ba:f5:e6:6c:b6:fe:50:a9:a4:
c4:dc:0e:0a:d0:bf:4a:8b:6a:ef:ad:a4:bc:79:91:f0:71:c5:
22:7d:63:ed:55:00:69:c3:05:a1:97:fc:ae:52:c6:ac:92:6c:
d6:cb:ce:87:60:75:c7:99:9a:6a:4b:5f:d6:c2:61:63:cf:90:
2f:48:ac:54:e8:ed:81:4e:35:a4:76:7a:0d:5e:05:d7:a5:b1:
80:a2:8e:0d:4b:ef:8e:75:75:35:aa:8f:7a:1a:c0:7b:bf:19:
03:c3:5f:d6:15:35:6e:f3:aa:ca:b9:5e:83:ba:48:92:ad:db:
a7:52:ce:ec:90:2e:e0:ba:5f:a6:b2:dd:25:2c:13:12:57:36:
95:7d:8a:c5:54:43:a1:f4:79:04:4f:55:a6:34:53:9e:3c:55:
f0:95:89:5c:18:ae:45:07:ea:f5:3d:69:8f:a2:5a:25:b5:eb:
87:4d:03:d0:39:18:00:7a:ef:e9:75:31:e9:ce:83:13:48:8e:
8b:c8:32:81:48:21:a6:35:cd:c5:16:93:94:e2:6e:ae:57:03:
ee:ef:96:a6:bb:22:e5:32:6a:e2:c1:ca:a8:93:3b:7a:86:2b:
f4:34:6d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:14:40 2025 by rpki-client