Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: Bd7+bu/NF75+BETBzkHZk3TxDRvwBcBfzdXgPsj0wB4=
Subject key identifier: 35:7F:48:01:E1:69:50:7B:08:D3:32:91:FE:7E:13:B8:EF:43:7A:7B
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 01974C9FEA45CBD365873FEDE0E4CD3ECD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 0FCF
Signing time: Sat 07 Jun 2025 23:00:37 +0000
Manifest this update: Sat 07 Jun 2025 23:00:37 +0000
Manifest next update: Sun 08 Jun 2025 23:00:37 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: TliixJ0GtvBP+PFDaIVzXXifR6D4uCgPmu2+5JVC6Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:ea:45:cb:d3:65:87:3f:ed:e0:e4:cd:3e:cd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Jun 7 23:00:37 2025 GMT
Not After : Jun 8 23:00:37 2025 GMT
Subject: CN=357f4801e169507b08d33291fe7e13b8ef437a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f9:88:f9:fe:57:f9:85:f6:bb:9f:1f:1c:9c:
64:ee:dd:10:93:d1:50:96:00:95:42:58:59:d3:72:
47:57:3b:9c:38:fc:74:55:7d:cb:19:b1:ed:c3:ec:
29:b0:32:0e:ba:12:94:71:18:7d:57:3f:fd:2c:a6:
7e:72:13:0e:5e:54:9c:d4:91:ab:e5:17:77:53:40:
0c:0f:0a:be:54:3e:72:ed:2b:83:f4:86:6c:3e:91:
0f:1e:8d:e2:dc:2b:34:32:b2:84:6d:51:9e:0e:09:
78:23:f0:d3:44:d2:a0:5f:ac:35:e6:f1:3f:7a:56:
43:14:72:18:88:1c:13:da:ef:fd:42:c3:25:14:99:
38:8a:ab:f0:89:cd:a1:a2:49:73:55:c6:9b:dc:04:
d3:1f:7c:e2:d2:1a:a1:7d:a7:e4:ed:a9:1e:ba:96:
f6:62:b1:60:77:ff:a3:44:99:61:67:82:0f:30:5f:
55:e8:38:c4:23:bd:56:c0:df:66:74:eb:43:4c:a5:
52:eb:f5:f4:c4:e4:e6:8c:09:39:78:c6:8e:4d:7d:
1c:91:c0:b9:67:f2:9a:82:66:02:3a:4c:cf:6a:69:
62:56:43:ab:5a:96:a9:44:27:49:1e:bb:de:ed:07:
7f:73:19:49:4b:96:a1:a1:51:83:99:4c:93:ef:12:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7F:48:01:E1:69:50:7B:08:D3:32:91:FE:7E:13:B8:EF:43:7A:7B
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:98:31:aa:62:93:ad:eb:fc:2b:62:4f:e1:94:dd:39:18:b1:
68:3f:21:86:6a:7f:6e:0a:c4:7e:bc:8c:3d:b2:cf:1f:99:e9:
27:9a:f0:07:db:c7:22:c2:d4:c3:56:c3:dd:c1:57:3c:6d:26:
ee:b5:ef:90:a3:26:c4:eb:ff:8a:4e:29:75:25:e2:1e:64:88:
46:c1:ae:ed:07:df:05:b0:e7:b9:92:23:ab:e7:c6:81:4d:67:
d6:d3:69:ef:26:81:0c:af:4b:f5:dd:ac:e9:c5:72:27:87:c3:
f8:1b:97:54:01:ae:0a:fb:d6:a5:21:61:00:86:ce:dd:eb:f8:
ea:f3:13:0c:8f:83:00:0e:cb:57:0b:87:68:dd:c2:e9:aa:6c:
4c:20:bf:d3:de:bc:d3:cc:a9:44:96:e2:c9:83:55:5a:f7:8f:
8d:4d:45:b3:b7:0f:1c:67:43:c8:0b:30:e0:c4:67:73:b9:74:
ff:17:43:91:58:85:bb:0a:f2:37:30:50:75:40:af:75:5d:0f:
e7:09:33:1d:23:96:e6:e0:ef:b1:32:3b:e6:ef:ef:b5:ca:2e:
f3:7f:54:5e:8f:3e:3a:6c:7d:cd:b3:af:75:f1:71:50:23:98:
cf:33:46:31:e7:35:64:b2:bf:78:d4:10:48:7b:66:fe:4c:0b:
1e:e2:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:14:25 2025 by rpki-client