Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
File: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft (raw, json)
Hash identifier: CxgnT72gWD2pXoSX46z2qL5jmB0n4mfkMoT6cVtkfoc=
Subject key identifier: 1B:1D:5C:3B:95:34:42:43:30:C0:D0:80:C7:80:58:8A:FD:36:5C:E0
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 01974CD788728E1651C3D6EAF1F15380FE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
Manifest number: 0A66
Signing time: Sun 08 Jun 2025 00:01:22 +0000
Manifest this update: Sun 08 Jun 2025 00:01:22 +0000
Manifest next update: Mon 09 Jun 2025 00:01:22 +0000
Files and hashes: 1: 0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl (hash: xjg87MiCIs+M6LB5pkerd+5rnkclGVTBsXJge+kiWKM=)
2: 5LrP6fsEeipB-xjaCGTQi9KsiHU.roa (hash: IUrzC+/E4lKM4F7rtTCN//MYlbyHBk9E/FLwLHHLeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:88:72:8e:16:51:c3:d6:ea:f1:f1:53:80:fe:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Jun 8 00:01:22 2025 GMT
Not After : Jun 9 00:01:22 2025 GMT
Subject: CN=1b1d5c3b9534424330c0d080c780588afd365ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:1b:1e:d5:5a:72:8a:b7:19:09:3b:32:ef:
19:aa:91:b0:0f:f0:6c:39:db:f4:6b:26:93:12:ee:
46:d5:6b:9c:6f:3c:2f:83:26:aa:eb:4c:83:e0:b6:
e4:82:a5:63:4f:6a:40:b0:94:09:92:a2:44:f8:f2:
7d:5d:3a:97:01:d9:8e:1d:b0:46:24:6e:ae:7c:5a:
1d:e4:91:b8:9e:e8:f0:4a:cd:0a:5e:9f:05:78:28:
b6:fd:68:12:3f:e0:11:6f:f0:8d:77:0f:24:24:41:
2a:c4:0d:02:ad:06:e6:bb:e4:d0:af:10:16:61:f2:
8d:0e:ac:84:32:bc:08:88:b6:dd:da:c8:81:e4:da:
16:00:b0:7d:58:72:c3:04:37:29:4e:63:db:28:a6:
77:0f:2c:cd:d5:e2:15:65:a2:a5:76:e1:73:67:32:
39:71:80:99:3e:53:51:b2:bc:02:ea:e0:2e:4b:41:
40:f6:68:f0:c2:e7:9c:57:e1:61:f3:ff:fc:25:fd:
97:c1:2e:68:11:99:e5:8e:b3:3e:da:c9:0d:f8:10:
bf:8e:80:a3:3b:06:5c:23:c1:d9:7c:3b:e0:ba:15:
58:fe:36:be:41:e0:a4:5e:d1:1d:04:19:37:b3:55:
49:88:95:9b:16:bb:3e:fe:27:9c:04:89:44:cf:94:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1D:5C:3B:95:34:42:43:30:C0:D0:80:C7:80:58:8A:FD:36:5C:E0
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8b:f3:9d:5f:1e:a4:3d:ca:9d:98:f1:9e:d8:8a:b2:56:4c:
4e:4b:37:0b:1e:5e:e9:4f:b5:37:e7:02:2b:29:e8:1b:94:73:
84:69:0e:89:16:b2:a5:19:47:56:14:c4:31:fc:36:15:ed:67:
de:03:d8:b4:d4:90:fe:98:97:64:fb:19:8b:98:10:3f:c4:53:
8d:2d:d6:76:0d:af:d9:14:f1:3f:07:c4:10:2f:c4:0d:30:b9:
15:1f:b5:01:c7:04:09:8d:c9:28:30:f9:91:57:62:7f:80:61:
14:43:e7:80:98:79:30:16:0a:4f:75:50:e1:db:93:2a:f7:a0:
8a:39:4f:b1:05:df:b5:0e:57:8e:5d:bf:a8:bc:77:a5:43:ba:
81:77:6f:f3:36:65:b8:7a:45:3c:19:bd:6b:a3:c2:2c:11:36:
7b:1f:e4:6f:fe:73:8a:b6:6b:19:27:15:d4:5c:39:46:69:89:
f6:4b:ee:54:50:86:4c:0b:b1:b2:85:07:78:83:e5:a4:b2:b9:
16:1c:d7:a7:43:34:82:cc:49:c2:c3:4a:80:cd:06:f2:b9:bc:
25:12:55:d0:d4:86:3b:9f:b2:57:19:49:37:55:1e:d0:c7:0e:
f9:48:da:50:32:d9:ac:b5:d2:e1:04:f2:32:87:1b:5d:de:5e:
c7:5b:96:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:33 2025 by rpki-client