Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: GMf3PFv8LNqG+SsYBetVyKQ18q0ha3nEbZfH2sOT2ts=
Subject key identifier: D5:BB:19:6F:73:6F:2A:10:CF:4C:FF:58:24:5B:33:B2:18:6D:DF:C8
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 0197BEC854ECF3901A3243EDE648B2657728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 09BD
Signing time: Mon 30 Jun 2025 03:01:29 +0000
Manifest this update: Mon 30 Jun 2025 03:01:29 +0000
Manifest next update: Tue 01 Jul 2025 03:01:29 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: xfID9O+yr7MoDCetkDbwLbO61OcNwHWnXZ5UKqY34Zc=)
2: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=)
3: nse16AXrwM95FOL9jR_rmw-FBUU.roa (hash: CGc2Mm01WTMfgJYYXJTw2QH6yfxtC7+nYMl9iTzeZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:c8:54:ec:f3:90:1a:32:43:ed:e6:48:b2:65:77:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Jun 30 03:01:29 2025 GMT
Not After : Jul 1 03:01:29 2025 GMT
Subject: CN=d5bb196f736f2a10cf4cff58245b33b2186ddfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:b7:da:38:93:87:9d:7a:f7:d8:a7:7c:e9:
2e:b2:58:32:c6:28:ff:0f:42:27:b8:79:b0:4c:9f:
cf:a9:41:ed:3b:4c:d8:15:fa:04:4d:df:45:1c:a8:
5b:7b:b1:21:b0:c8:36:ae:9e:04:e0:de:01:d5:63:
40:5c:e4:d5:19:90:f3:f4:d6:20:95:60:8a:86:d0:
13:0c:2c:28:8f:ed:06:fa:89:e7:8a:8f:e5:5c:84:
49:93:a2:da:8a:a9:f8:65:74:4f:76:07:be:04:41:
a0:ca:50:98:93:7a:51:0c:75:aa:4b:b5:c6:ff:ee:
5b:a3:8b:c8:50:87:f8:26:c8:0b:6e:da:65:a2:39:
b3:21:04:4d:6e:16:c7:08:3c:98:4e:0f:d6:83:1e:
de:df:03:99:94:6c:cc:3a:a8:b7:46:fe:33:96:98:
b7:1a:7f:e8:b7:e8:8b:61:95:d9:0c:83:3c:f2:de:
5e:a8:35:f0:e0:9f:09:2a:23:58:7f:c5:f0:e1:75:
e4:77:f3:d3:68:15:e2:7c:ba:ed:5f:ca:7d:ba:1c:
9a:b9:49:bb:90:2a:18:dd:6d:83:9e:10:ba:4b:79:
f5:05:6b:bd:ef:79:74:f2:95:26:4b:f9:a7:1a:0c:
0c:2b:3f:bc:d6:63:c9:c5:23:84:ad:86:4f:0d:58:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BB:19:6F:73:6F:2A:10:CF:4C:FF:58:24:5B:33:B2:18:6D:DF:C8
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:66:ed:c3:2f:5c:bd:83:a6:d0:8e:7c:65:de:93:cc:b7:0b:
61:0e:59:a9:f6:a2:68:90:ed:95:07:13:9e:d0:a4:5e:8e:84:
90:31:ba:fd:16:32:fd:b3:dd:ac:9f:b3:62:3e:c9:e7:04:30:
b7:9d:10:cd:59:b5:40:dc:65:91:74:e7:44:c2:9d:b8:4c:e0:
a3:2f:85:7c:59:00:c0:31:e8:d0:c6:14:49:26:a8:48:23:3c:
83:5a:0a:b2:14:7a:05:65:8d:5c:55:61:ac:38:27:b5:d1:bf:
60:e5:cd:a8:66:b9:b2:ef:5d:25:a5:73:e5:53:43:c1:27:9f:
4c:92:1a:d6:62:ba:94:02:6a:89:5d:b3:31:03:4a:fd:8f:36:
9e:cc:3e:7b:3a:09:dc:9a:1e:c3:11:74:3b:e2:34:fc:24:1d:
18:f3:9f:60:dc:d8:60:07:cd:53:56:93:a8:3a:17:3b:d9:1c:
f2:96:c7:04:9a:43:f0:23:81:63:e6:b5:3a:18:b7:68:ac:ee:
c4:b0:f1:7e:80:61:d3:d4:a4:97:6c:5c:c9:d1:ca:ee:8a:50:
9f:e5:6f:ad:97:4b:8b:3b:f6:be:8f:84:f9:40:e2:a9:66:d3:
ec:80:e6:c6:57:eb:f5:5b:17:0b:29:e4:91:dc:54:40:78:b5:
25:3c:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:27:49 2025 by rpki-client