Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: eaV/ytyIxEzE/rEBJ4Ys0j+HcbjQ+4zmNqmAs3iw9Vg=
Subject key identifier: E2:1C:04:52:49:36:C8:18:CB:F1:11:D3:56:67:AA:95:57:77:DF:37
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 019748FAB151657E61E1BFCF5377276D1E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 0FB7
Signing time: Sat 07 Jun 2025 06:01:18 +0000
Manifest this update: Sat 07 Jun 2025 06:01:18 +0000
Manifest next update: Sun 08 Jun 2025 06:01:18 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: GOj4IwMXCPOAFsQGEhvUxO3h76Kat0q009HTOaTDEJ0=)
2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:b1:51:65:7e:61:e1:bf:cf:53:77:27:6d:1e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Jun 7 06:01:18 2025 GMT
Not After : Jun 8 06:01:18 2025 GMT
Subject: CN=e21c04524936c818cbf111d35667aa955777df37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:3c:90:3c:0b:32:4b:ab:36:1d:6b:28:f7:
1f:e4:34:c4:5e:72:e1:6e:df:67:6a:26:ec:7c:ef:
ee:01:2c:72:d1:3e:7b:a3:82:53:df:b3:1e:74:99:
d9:d3:50:42:34:e3:85:27:3d:d9:d6:7f:c4:7e:a7:
6a:da:6b:0a:a0:a5:62:a6:b6:41:a9:5c:ca:f3:43:
a9:86:87:71:6f:4b:9c:da:a7:44:af:bc:74:d1:a9:
59:24:41:ae:58:88:78:6e:6d:7a:31:b1:2c:6b:00:
3e:ce:86:1c:f3:0a:a0:81:8f:c8:fc:e4:43:79:b3:
ba:55:59:48:5a:f8:3d:94:90:64:96:e4:35:99:b9:
dd:3b:a5:cb:d4:27:6f:87:89:a2:a1:e7:78:b5:fb:
37:34:b7:04:cb:a5:79:38:8b:c7:65:99:03:83:fa:
d0:b9:76:07:d6:bc:4c:36:dd:9d:d9:27:a9:de:08:
86:f9:c2:23:60:1b:2b:ce:10:a2:17:8d:3f:c8:3a:
8d:5c:11:bb:97:65:a1:6c:e4:8f:87:7e:70:f8:1b:
e6:cd:31:66:92:d9:5c:5a:36:29:fa:91:2e:d0:62:
c4:02:0c:c5:77:02:00:b6:9b:c3:db:c7:5a:cb:1a:
9e:09:74:cf:a4:e1:64:43:16:7f:df:28:00:34:f7:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1C:04:52:49:36:C8:18:CB:F1:11:D3:56:67:AA:95:57:77:DF:37
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8f:26:07:5b:f7:f1:2f:95:a0:0a:27:7b:77:e5:e8:0e:f4:
fd:07:a7:75:b1:e5:17:7a:ff:df:7c:09:a0:9e:36:ac:bd:5a:
67:93:e0:8f:c2:2e:65:1f:34:a9:e5:2e:4d:21:21:f0:67:b5:
75:8d:b4:a0:03:ac:72:af:b3:bb:52:19:1f:99:1e:91:99:9d:
15:68:78:f6:4b:29:c4:6f:a2:26:cd:3a:cd:1b:84:f1:77:64:
d2:e2:eb:ef:08:bc:e5:cc:f0:46:b2:01:aa:f1:79:7c:18:ad:
44:ed:bb:0c:ef:04:8c:33:e6:c7:89:7f:a2:c3:47:ac:b2:f8:
81:eb:50:c6:88:54:a1:4e:3a:07:75:53:14:d4:82:fb:e6:e3:
ac:16:4b:9b:ab:d7:a5:c8:59:3e:71:15:5d:e0:e5:4c:e6:5c:
2d:e7:80:25:db:4d:18:6a:1d:7a:b1:c7:56:9e:5b:e4:60:46:
23:1f:36:ff:be:6f:a8:51:90:42:de:1f:fa:b7:12:5c:ac:18:
52:ad:43:24:11:eb:ab:47:a6:b2:4e:5e:da:ce:95:9a:fd:0c:
08:5d:04:36:88:a6:82:67:dc:53:e4:d9:84:7e:09:a0:a6:1b:
ec:89:5a:75:0b:2e:63:8d:2f:f1:d5:9f:d4:00:19:14:f2:b6:
f9:e5:f1:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+rFRZX5h4b/PU3cnbR4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2
MjdiZWYwHhcNMjUwNjA3MDYwMTE4WhcNMjUwNjA4MDYwMTE4WjAzMTEwLwYDVQQD
EyhlMjFjMDQ1MjQ5MzZjODE4Y2JmMTExZDM1NjY3YWE5NTU3NzdkZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xg8kDwLMkurNh1rKPcf5DTEXnLh
bt9naibsfO/uASxy0T57o4JT37MedJnZ01BCNOOFJz3Z1n/Efqdq2msKoKViprZB
qVzK80Ophodxb0uc2qdEr7x00alZJEGuWIh4bm16MbEsawA+zoYc8wqggY/I/ORD
ebO6VVlIWvg9lJBkluQ1mbndO6XL1Cdvh4mioed4tfs3NLcEy6V5OIvHZZkDg/rQ
uXYH1rxMNt2d2Sep3giG+cIjYBsrzhCiF40/yDqNXBG7l2WhbOSPh35w+BvmzTFm
ktlcWjYp+pEu0GLEAgzFdwIAtpvD28dayxqeCXTPpOFkQxZ/3ygANPdX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIcBFJJNsgYy/ER01ZnqpVXd983MB8GA1UdIwQY
MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt
NGVmMDNjMTA4MWY4LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4
LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC48mB1v3
8S+VoAone3fl6A70/QendbHlF3r/33wJoJ42rL1aZ5Pgj8IuZR80qeUuTSEh8Ge1
dY20oAOscq+zu1IZH5kekZmdFWh49kspxG+iJs06zRuE8Xdk0uLr7wi85czwRrIB
qvF5fBitRO27DO8EjDPmx4l/osNHrLL4getQxohUoU46B3VTFNSC++bjrBZLm6vX
pchZPnEVXeDlTOZcLeeAJdtNGGoderHHVp5b5GBGIx82/75vqFGQQt4f+rcSXKwY
Uq1DJBHrq0emsk5e2s6Vmv0MCF0ENoimgmfcU+TZhH4JoKYb7IladQsuY40v8dWf
1AAZFPK2+eXxLg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:55:48 2025 by rpki-client