Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier: 7UBENGf2K4sgafc6/n6BH5tJay07ecVVmmijew+Jlis=
Subject key identifier: A0:A4:AA:3E:D8:7F:2C:FB:4D:38:51:70:57:C2:49:6B:5E:AD:11:C7
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 01974BFB13E0AFB316A62A33C5F845536319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number: 048E
Signing time: Sat 07 Jun 2025 20:00:35 +0000
Manifest this update: Sat 07 Jun 2025 20:00:35 +0000
Manifest next update: Sun 08 Jun 2025 20:00:35 +0000
Files and hashes: 1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: JLpL5gCJyt8b2dwigOK6Kyc0acaYXT7X2EEX8nvWqsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:13:e0:af:b3:16:a6:2a:33:c5:f8:45:53:63:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Jun 7 20:00:35 2025 GMT
Not After : Jun 8 20:00:35 2025 GMT
Subject: CN=a0a4aa3ed87f2cfb4d38517057c2496b5ead11c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:27:2e:fb:11:ce:b8:a4:f1:a6:27:26:10:
3c:61:0c:ae:2f:c1:1a:f1:29:f7:fe:94:a3:f5:9e:
e5:6a:90:9f:04:6d:71:3a:8b:24:f1:92:51:5a:0f:
ba:2f:ca:87:fc:1e:92:28:a4:73:c0:70:61:dc:b3:
29:6d:d3:39:bd:38:9d:fe:d6:06:f1:42:dc:61:e4:
ad:90:e2:42:b1:80:db:99:72:08:b7:52:29:b0:7f:
ba:d2:82:8a:fe:ef:94:92:67:1d:b3:2a:09:ee:ef:
de:ac:9a:cc:6d:9e:09:dd:05:14:87:a8:38:cf:91:
ac:a7:0f:27:9d:4a:e3:8e:68:12:b2:e4:a6:4d:fc:
78:8b:26:db:64:4f:fa:cc:31:b0:63:15:f2:97:d1:
be:cf:97:ee:49:79:d3:74:88:4e:df:4a:34:07:a8:
6d:92:5e:2b:6b:ce:39:f4:05:2f:1a:5a:53:bf:27:
17:76:57:f4:d6:56:2a:b6:20:4b:f2:eb:fe:7a:bd:
03:89:e9:f3:e4:4e:1c:b3:98:3c:2a:b9:75:c6:97:
d7:a1:ae:36:43:59:4f:79:4a:e6:c3:8e:5b:20:f0:
b2:58:69:7a:3c:c1:06:9c:8e:f3:a7:a6:f1:14:e0:
54:b1:1f:b5:fc:7c:2b:70:49:01:a5:ed:08:7b:ec:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A4:AA:3E:D8:7F:2C:FB:4D:38:51:70:57:C2:49:6B:5E:AD:11:C7
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c2:a5:e3:59:b7:ea:5f:ed:20:3e:62:20:3b:13:b1:47:c7:
05:a0:70:26:af:65:9e:ae:06:f8:bd:85:7c:2d:44:98:a1:fd:
50:7c:68:9c:6c:06:a6:c4:c3:b6:e7:50:92:25:0b:86:af:9f:
a0:f7:44:32:c4:4e:87:44:f7:3f:21:27:9e:a1:ea:be:7f:90:
84:1e:db:4c:3b:1e:d0:7a:ff:8b:38:26:9a:8d:09:ec:d3:b9:
b6:c7:d3:6f:c4:31:77:fe:f1:7f:91:d6:58:41:fb:38:de:22:
a3:6e:94:58:7b:c5:e6:e0:1c:a7:5a:92:8b:a3:4f:1d:17:b0:
6a:4b:57:82:d7:b0:53:5b:e0:3e:fc:fe:33:e1:6b:2f:62:d7:
1e:fd:39:dc:59:90:7b:bd:30:39:c7:35:14:97:65:d8:81:be:
d4:5a:4c:52:5e:32:0b:8f:56:68:21:2f:26:1e:07:a7:c6:3c:
8d:9a:fd:24:77:02:31:b7:a6:8b:dc:cb:a7:dd:91:9a:ea:f3:
12:21:e6:5a:ac:66:0a:02:9f:0e:6a:e1:ce:5c:47:57:b9:1c:
72:e0:d4:00:58:23:58:6c:de:37:8c:83:bf:50:6d:18:3e:4d:
5d:b3:0f:f0:e2:94:03:f5:3e:cb:1e:6b:cb:57:ba:76:9a:6b:
56:f7:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:04:37 2025 by rpki-client