Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: mp99yv9bQBzwJYb5xy38+WK4hk/QXGHIg40FiaqGlpY=
Subject key identifier: 5C:6F:87:0A:34:71:EE:AE:06:A6:8B:1F:A7:89:01:DD:30:EB:E8:17
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 0197B8C60EFA0F9B9985CB1043FD1D862282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 02E5
Signing time: Sat 28 Jun 2025 23:01:17 +0000
Manifest this update: Sat 28 Jun 2025 23:01:17 +0000
Manifest next update: Sun 29 Jun 2025 23:01:17 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: omZAKqeKBLs1o4yzafyW/ad6U9wkppINZ5/cFOwxVNE=)
2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:0e:fa:0f:9b:99:85:cb:10:43:fd:1d:86:22:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Jun 28 23:01:17 2025 GMT
Not After : Jun 29 23:01:17 2025 GMT
Subject: CN=5c6f870a3471eeae06a68b1fa78901dd30ebe817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:f7:d4:82:90:15:7a:b0:a7:63:2a:4f:94:
02:cd:84:b7:b1:34:91:35:35:06:23:68:a8:41:cd:
86:e2:d9:a0:16:56:7d:e2:2e:bd:87:66:92:0e:28:
f9:4a:24:d9:90:09:a6:a1:44:21:e2:73:be:f5:48:
23:cb:35:f8:d0:3b:e4:68:4e:a9:b9:04:5c:58:4d:
26:d5:52:04:f1:31:f5:1c:b1:63:38:62:02:f6:b8:
5f:5c:50:a4:76:68:41:e8:b5:9d:6d:6d:1a:9f:63:
26:b0:d5:3d:5a:3c:8d:ea:8b:4c:2b:d5:2f:7e:7d:
a3:54:97:f2:be:ef:ae:43:33:71:ba:46:c4:2f:03:
91:ba:43:9e:96:32:67:50:26:69:d9:f9:58:bd:ac:
7e:15:c7:dd:9e:d8:dc:c6:68:15:ac:7f:f8:5e:62:
96:8d:cc:c4:31:46:f9:ba:2f:e3:8a:7f:c5:3e:48:
a1:bb:04:d0:76:cf:6d:a8:ac:cc:ac:4f:51:f3:56:
10:f1:40:e3:f7:da:00:e0:7f:2d:15:bc:8a:92:4c:
4a:d9:d9:18:0c:f9:fe:1f:e3:93:4d:b7:52:8d:09:
4e:50:e6:02:d7:3b:90:8b:af:ef:b0:a9:65:e2:37:
65:f9:bf:09:90:c7:45:ee:fc:bc:ad:04:e1:83:3c:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6F:87:0A:34:71:EE:AE:06:A6:8B:1F:A7:89:01:DD:30:EB:E8:17
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:49:e2:cd:b1:1e:ce:58:d1:6f:ad:27:ac:b2:ac:bc:f7:
42:42:a6:7c:7d:0c:3e:c2:c2:a2:f3:a2:e4:45:d7:c1:be:4f:
ed:7d:70:9f:86:77:de:0a:8c:a8:6a:eb:db:f9:fd:5e:12:18:
82:84:b2:a5:14:ee:83:28:6b:86:6a:4b:34:6b:64:24:a1:07:
08:bd:f4:44:f1:14:2c:17:e5:ed:10:85:c7:40:6b:51:8e:c5:
02:dc:4d:57:10:3c:2b:56:78:04:ee:5e:c2:e5:e2:19:b9:ad:
16:4c:56:7f:93:ec:99:a9:92:64:df:62:1f:c4:b8:ab:3a:da:
43:45:72:c5:95:65:3d:f0:73:f1:67:55:ae:b0:50:5a:55:bf:
18:cd:e1:fb:79:52:67:0e:ff:0d:7d:33:18:79:7a:a0:4b:2f:
8a:76:06:5f:4d:c3:6f:6a:f2:80:79:c0:80:de:1b:33:06:8f:
52:a9:1f:e6:17:09:b4:e4:dd:6b:ae:7a:05:7e:2f:63:79:9a:
17:06:03:a5:c3:11:58:10:14:ec:fa:39:73:20:0f:8a:62:67:
73:0c:38:af:38:d1:51:50:4b:fe:b8:19:01:b2:35:9b:8a:b8:
5b:bf:2f:90:a1:71:0a:31:40:bb:2f:3b:5f:5b:64:12:b8:13:
51:93:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:26:47 2025 by rpki-client