Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: GGPPExdyNXn2xyd6PUcOP68cEl9KwxVU+mEWJJskBDk=
Subject key identifier: A4:95:20:6A:C7:85:9D:A2:90:5F:98:3B:F3:87:E8:1B:AE:5D:54:D3
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 0197B7EA82610C0A233D4DB698321FB77DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 0270
Signing time: Sat 28 Jun 2025 19:01:28 +0000
Manifest this update: Sat 28 Jun 2025 19:01:28 +0000
Manifest next update: Sun 29 Jun 2025 19:01:28 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: 6c1Ks3HavJhW5/zuCSVf094gwyVz0FE6DAdyui504CU=)
2: GqXg2NC5IUxRI1mWcJNsyZxesng.roa (hash: wIFPJcYLl1DLySOyYumJerZ6TcbUU8g29XL5Yzwhz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:82:61:0c:0a:23:3d:4d:b6:98:32:1f:b7:7d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Jun 28 19:01:28 2025 GMT
Not After : Jun 29 19:01:28 2025 GMT
Subject: CN=a495206ac7859da2905f983bf387e81bae5d54d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:dd:c7:f1:de:8f:cb:57:5c:0e:fa:e4:6b:
f6:24:2a:04:ad:e8:43:02:ed:b1:c9:55:5a:f6:83:
b1:fb:b4:d4:3b:2a:e2:a4:d2:2b:02:bb:95:ef:0b:
52:57:53:7d:8c:52:5d:fc:82:bd:b2:69:c5:73:8a:
1d:e7:2b:3c:30:89:8d:33:69:28:68:58:c9:9e:ca:
02:c4:7a:39:7d:75:42:e8:14:71:30:1d:2c:f6:d8:
da:ed:c8:e4:bd:fa:8a:da:44:01:7e:4b:9d:64:fa:
47:d0:9b:ed:a0:da:fd:2a:98:9d:6e:83:fc:5e:0a:
5b:9d:21:18:90:bb:77:38:7d:e1:02:63:a8:b5:af:
0b:be:9c:17:95:cb:09:db:74:1a:3f:19:ce:05:e3:
6a:c9:1e:ef:23:78:62:5e:7e:59:aa:4d:9e:f0:34:
91:34:bb:66:29:17:85:c1:b8:3a:d1:74:e4:83:3f:
a8:b2:de:4d:7b:d9:d5:55:a0:3d:2b:d2:be:d7:68:
f5:5e:e5:a8:be:61:bc:da:af:7e:f9:4c:2d:49:3d:
c7:13:41:35:db:df:28:05:2f:c7:4b:fa:55:1a:07:
2e:72:0a:2d:8a:1e:49:95:21:1c:f0:69:29:f8:b9:
80:e3:86:0a:d9:59:37:88:d3:5e:26:d0:3a:05:a8:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:20:6A:C7:85:9D:A2:90:5F:98:3B:F3:87:E8:1B:AE:5D:54:D3
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9f:4c:d9:61:64:c2:e1:55:0b:97:65:92:17:8f:50:57:bb:
63:8d:2e:84:08:25:66:7d:0e:7c:12:6f:82:84:a6:8c:51:bd:
d3:18:02:be:d3:3e:4c:5a:26:ac:65:fa:f6:06:da:76:aa:81:
03:a4:f4:c7:22:d0:71:bb:74:b2:14:d5:77:44:f2:a3:2c:60:
47:61:69:f1:ca:44:c0:a4:b9:0e:c7:72:59:1d:1b:30:d1:a2:
61:4b:20:66:c2:12:cc:21:4a:c6:e4:27:67:8d:75:91:b9:14:
3b:4d:db:a2:39:2c:32:a2:43:36:40:fe:d7:4d:26:d5:53:cf:
6f:89:94:f2:43:80:fa:0b:e1:47:c4:c3:9a:5f:bc:70:79:e7:
7d:f8:71:a4:7b:90:b8:21:ca:9e:91:ac:f6:cf:56:42:86:14:
b4:05:01:f1:4c:90:51:8a:fb:4b:b1:91:56:91:ce:b3:c3:49:
66:85:f2:78:e6:54:3a:58:ac:f5:ee:a4:e1:5b:46:91:ba:19:
31:b9:d1:87:a3:cd:ad:47:0c:60:20:e4:4b:13:83:b9:6c:0f:
4e:9c:d4:05:12:ab:3d:5d:93:48:de:3c:2f:26:bf:68:b5:bc:
da:23:02:c8:93:c3:4f:7e:8b:52:f9:0a:cc:08:17:a3:85:a7:
da:ce:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:39 2025 by rpki-client