
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: jxz6mHZxHGGmOhWAz/yFvYhD3QEMYPv+mSApRLWWZaw=
Subject key identifier: 3D:53:4B:FD:67:5A:53:E5:7F:AC:CA:D1:E1:18:08:C0:55:CF:BA:8F
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 0197B7EA75D507FABF023F136933D78AF84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:25 +0000
Manifest this update: Sat 28 Jun 2025 19:01:25 +0000
Manifest next update: Sun 29 Jun 2025 19:01:25 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: 96/0+dE4c7uVXfKkqv7L/nzvumgHM+ZrQYvnv0cBcvU=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:75:d5:07:fa:bf:02:3f:13:69:33:d7:8a:f8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Jun 28 19:01:25 2025 GMT
Not After : Jun 29 19:01:25 2025 GMT
Subject: CN=3d534bfd675a53e57faccad1e11808c055cfba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:1f:78:a9:2c:fe:f7:40:9c:76:5a:e4:8f:
b1:a0:09:3b:2b:d4:dc:91:23:fe:87:18:ed:56:94:
2a:bb:2f:40:3e:ad:1f:6e:17:67:99:09:d4:ba:a4:
24:e4:99:59:fc:6b:1a:f4:30:8c:60:c8:b7:aa:8e:
16:97:82:53:56:d9:85:41:7c:aa:62:4e:58:5b:ed:
bf:e8:e4:c7:e6:bc:8a:1c:dd:6c:04:b6:5b:c0:40:
ae:65:3f:32:b3:89:7a:80:0c:71:51:85:81:7a:7b:
78:6a:59:51:84:58:87:5f:ed:e0:e4:89:2b:58:8b:
cf:c6:00:83:4d:14:71:0b:5c:8c:59:5a:b4:cc:a4:
12:1f:49:ec:d9:39:55:e2:9f:68:35:db:42:e7:54:
a3:83:ca:0d:fa:1e:50:45:f0:49:f8:e4:03:d0:be:
5d:f5:d7:b3:a7:88:32:09:b4:67:4c:c5:2d:c3:dc:
8c:0d:75:21:86:55:0b:08:27:25:84:8b:88:1e:ae:
16:6f:49:44:0a:ce:25:7c:7d:15:a5:ab:57:ee:ac:
1a:cf:d4:d9:33:bc:a3:f2:9b:48:1a:ae:2d:45:c2:
b9:e5:91:86:01:41:1f:80:dc:37:bc:e2:ab:05:1f:
a5:52:ef:68:85:e5:ce:87:f1:52:69:e1:9e:b9:31:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:53:4B:FD:67:5A:53:E5:7F:AC:CA:D1:E1:18:08:C0:55:CF:BA:8F
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f5:5a:2a:26:aa:77:c3:ac:72:09:ea:63:c5:a8:21:38:79:
e0:f9:8d:e0:17:f8:28:32:a6:56:e9:23:71:56:85:f8:eb:99:
03:72:fb:8e:00:78:3f:e8:d3:b2:d9:66:4c:79:ab:ce:2f:e8:
da:45:25:9f:eb:39:32:83:e9:c8:a8:d3:81:f9:7a:a1:40:95:
ea:7d:54:0e:68:b1:b2:98:6c:6a:85:bd:0b:2e:2a:43:a9:a0:
73:70:91:f6:43:8a:47:06:06:c2:83:a2:02:37:4d:d8:61:72:
1f:38:56:45:4c:b7:84:4d:aa:1f:87:2a:81:50:ea:32:ab:37:
9d:2d:f3:de:60:e4:96:45:ce:64:31:41:83:c6:a9:39:16:03:
36:04:7b:d0:89:7e:95:36:c9:1c:5c:c9:d5:95:1c:98:8e:45:
00:b9:ed:63:6a:83:99:03:41:5c:f2:63:2c:ec:2c:e4:b5:6a:
98:8c:24:00:2e:08:3a:1c:66:ab:ac:de:b6:e0:ed:9b:6a:17:
69:a9:1e:df:e2:7e:7b:27:0f:76:f9:a9:36:75:29:d7:fa:8d:
6a:9b:65:9b:cd:e4:13:fb:e0:65:9c:d9:49:f5:76:a2:52:cc:
c1:ab:96:b2:e4:38:e3:cf:7a:b7:46:18:df:3b:a2:27:ce:8b:
f6:4d:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:10 2025 by rpki-client