Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: HQocAwC5x6BH1vIzAEzLJx2iPC9dqv5ccZPm/LUx5JA=
Subject key identifier: 4A:F7:11:AA:86:F0:F5:23:BC:A3:33:24:6C:73:EE:BA:92:97:88:D5
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 0197469E4D26EC5C37076D06A8DEB2CF3CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 19:01:08 +0000
Manifest this update: Fri 06 Jun 2025 19:01:08 +0000
Manifest next update: Sat 07 Jun 2025 19:01:08 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: Eof0mrnE6pYvJ/rW5yikkhP6yNlBUQEhSWS5HclJqpg=)
2: KzJRm4blhpQ22QWdKYNtwSo9hec.roa (hash: VvdDpNHANgnzHXSd6NFNAPGvygHgdOqLpMuWRNVTc78=)
3: baZe32PKXIeppnY8Yaja4T-a3tY.roa (hash: tWsZkF/TWyoJvpRhiK8XSrqOZGwxm+EMQruE+7kHGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:4d:26:ec:5c:37:07:6d:06:a8:de:b2:cf:3c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: Jun 6 19:01:08 2025 GMT
Not After : Jun 7 19:01:08 2025 GMT
Subject: CN=4af711aa86f0f523bca333246c73eeba929788d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:ea:3e:80:f6:bf:cc:53:76:de:44:06:04:
7e:54:6c:e3:85:02:9f:ec:03:fe:4b:cf:dd:90:fb:
83:d7:f5:26:89:8f:e3:4d:46:68:63:9b:87:fd:10:
5e:15:f2:5a:62:40:c9:8a:a4:28:30:3f:a1:2f:ac:
84:87:97:df:28:b0:14:b8:80:6c:e2:a8:43:d4:98:
2e:86:03:64:6a:e9:77:03:1b:44:b2:b8:86:73:c5:
11:e0:7f:56:cd:4e:e6:23:ef:d6:7e:47:74:2b:08:
2c:82:b5:ab:21:b8:06:1d:0b:29:91:0e:8b:b4:18:
82:8d:29:8a:e9:22:79:7e:1e:d5:f7:8b:35:07:b8:
96:9a:c6:84:34:d6:a2:11:38:9b:e2:62:44:a6:e4:
e8:f9:bb:04:2b:2a:c8:b7:09:70:e4:c5:a5:79:d3:
43:81:3e:ae:6c:a9:7f:6d:d8:29:5e:ba:65:d8:43:
b4:64:30:09:d1:77:0b:d9:4f:ba:8b:4a:08:d3:5c:
d7:83:3b:a3:a5:ec:1d:09:f7:55:38:30:79:bb:92:
ee:87:9f:2f:ad:42:f3:5e:ed:21:03:bb:7e:73:9f:
4e:d2:e0:3d:c3:ed:3d:25:20:b3:9c:b1:58:4d:43:
74:71:39:bb:81:93:46:c1:1e:07:b6:43:9c:a7:97:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F7:11:AA:86:F0:F5:23:BC:A3:33:24:6C:73:EE:BA:92:97:88:D5
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:85:06:c1:89:50:02:0c:69:be:52:e6:05:1d:66:29:1c:2c:
c6:d5:20:4b:64:fd:85:36:f2:e9:5e:bc:c2:a1:d1:4e:c7:76:
c4:fb:83:2b:f9:04:e5:a6:ad:9f:78:8c:56:b6:57:c7:c1:fb:
a3:14:a1:e5:f7:42:e1:2f:48:11:60:0b:19:6a:54:3a:ad:e6:
6e:a2:03:ab:57:60:ea:e7:9a:b8:ab:49:83:94:d3:8c:94:be:
8f:76:e8:95:b6:9f:a5:43:ad:51:b5:68:fa:08:d4:f1:54:c9:
cd:0b:da:6a:fb:7b:94:58:dd:6c:a3:c4:a7:90:f4:b1:19:f9:
c0:56:28:f1:cc:b8:32:f6:67:ed:8a:99:75:29:7d:88:bd:ad:
16:32:87:51:74:44:af:e4:9d:1e:c4:81:e3:ab:3e:a6:43:5f:
f3:87:a5:0c:6e:9e:67:35:1d:73:5e:e7:eb:f8:13:f1:83:82:
65:6f:b6:f5:eb:2e:b7:6d:7a:82:6e:f2:f3:b9:b9:73:73:5a:
e9:23:fd:83:ad:dc:87:19:f2:86:52:c3:f9:d0:f4:6c:8a:66:
d2:25:75:c9:dd:8e:1e:95:44:ab:d8:64:1e:16:f8:7f:43:89:
e1:c0:5c:f3:05:e1:8e:a3:f2:36:d3:0f:15:23:b2:1b:62:64:
74:97:a2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:53:57 2025 by rpki-client