Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: JRbko11n9gaxJnirFxVHOJbeO6rCZmx+rhfMFt4cb7A=
Subject key identifier: F2:4C:0C:B4:E0:E7:0F:56:F4:50:D3:CF:0E:8C:33:98:F3:15:A3:26
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 0197499F473693EA6811F61E37D35E4D98E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0CF8
Signing time: Sat 07 Jun 2025 09:01:04 +0000
Manifest this update: Sat 07 Jun 2025 09:01:04 +0000
Manifest next update: Sun 08 Jun 2025 09:01:04 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: yQwGkC1SgVaOYyPDTSTzp4BZi9hP211B7I4tMgy8u1A=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:47:36:93:ea:68:11:f6:1e:37:d3:5e:4d:98:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Jun 7 09:01:04 2025 GMT
Not After : Jun 8 09:01:04 2025 GMT
Subject: CN=f24c0cb4e0e70f56f450d3cf0e8c3398f315a326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:10:67:76:16:c9:96:3d:1c:a0:f1:85:27:
fb:93:ca:a7:a2:49:4c:2a:b8:ff:9c:83:ba:11:0d:
9a:f4:cd:0c:89:4b:4d:0e:4f:84:e2:d9:41:dc:28:
db:a0:39:a2:f5:58:f0:25:4c:3d:f4:90:00:1f:51:
e3:fc:d8:5b:1b:75:bc:02:4b:0c:30:d0:3f:a1:85:
1d:e3:0a:c1:83:7c:4e:79:a2:4a:79:12:69:48:36:
25:04:e0:bb:93:f5:c9:e7:5b:b5:54:78:80:0e:4f:
f8:a8:c3:b3:b6:fb:90:94:ef:70:3c:49:9a:f0:85:
b9:e6:ea:9f:41:ef:7a:64:5b:68:81:d0:c4:2f:30:
4e:44:7a:b7:b8:a4:47:14:89:e0:92:30:fc:cd:e9:
9f:5c:9d:e6:04:2d:6c:bb:b4:8b:4f:2b:7c:d1:eb:
d8:d3:41:ad:f5:4c:9c:5a:b7:28:06:08:13:17:2e:
0a:f9:db:6f:28:95:fe:54:80:cd:53:7b:11:30:d5:
dc:c0:77:3a:9c:2d:2d:7d:ed:16:04:dd:bb:d5:2c:
6a:2e:cf:f7:8a:82:4d:12:d3:e3:fb:34:3b:19:cf:
bf:e1:04:96:e7:d1:c2:df:6d:e2:9b:28:e0:ce:0e:
6d:71:52:5c:4f:21:d0:bf:50:e6:a3:01:2e:ef:ee:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4C:0C:B4:E0:E7:0F:56:F4:50:D3:CF:0E:8C:33:98:F3:15:A3:26
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:03:c1:07:8a:1b:37:c1:b0:34:c5:a0:74:ba:e3:96:b2:8d:
b3:00:f8:60:4b:d8:ea:a0:d8:b5:28:65:5d:d0:5d:61:92:3a:
14:bf:60:ca:92:5b:40:79:61:db:f5:70:2c:7b:35:37:76:25:
6d:42:08:18:13:70:41:f8:68:25:62:8f:aa:a0:a3:3e:76:bd:
8f:ec:c3:0a:1d:68:00:3e:ae:01:ee:2c:35:63:e6:93:31:87:
ac:42:02:20:79:f5:09:3e:d2:2c:ce:4e:d5:ec:85:a0:00:1c:
01:07:67:f9:3d:0b:63:c0:7b:55:41:0d:0a:6e:00:5e:f8:35:
55:82:79:31:7a:04:70:5d:52:85:fe:d7:9d:bf:cc:db:86:a0:
05:57:96:8e:40:02:f6:df:99:8e:7b:7b:97:f0:38:96:67:65:
cd:aa:96:85:48:8c:fc:62:fc:e8:87:d1:da:02:15:ea:45:81:
a1:33:0c:e8:15:18:97:13:f7:b4:f0:9c:5a:50:43:f5:15:40:
04:53:1c:c1:54:81:8d:ce:54:91:05:87:2b:01:af:66:58:f5:
3a:ae:73:a9:c6:4a:b7:17:31:b4:f2:06:55:c7:e6:d0:20:45:
50:1c:35:90:05:0d:e1:f5:6c:60:68:cc:74:8f:4c:f1:a9:fa:
ae:d0:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:19:46 2025 by rpki-client