
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: pCSBHE8ZL3lqHLxlxZ6RKMMsRGxe9Kt7465dbZb0KC8=
Subject key identifier: D4:9D:50:A0:A5:2C:C6:1A:2F:1F:C8:2E:EC:2B:91:B6:FF:51:0C:EB
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 0197B70EA05CC2865327814973021144A702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 05E8
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: gltL0MA5+wvhxWsS5gNmYlI2YDzl715Ij3PsNwKS5X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a0:5c:c2:86:53:27:81:49:73:02:11:44:a7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=d49d50a0a52cc61a2f1fc82eec2b91b6ff510ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:0a:36:fc:0a:c0:3e:fb:21:f8:f3:d8:4c:
39:21:ad:40:4f:c0:0f:4d:cf:47:3b:19:4e:c2:34:
5a:a0:4a:71:ca:cd:cc:1b:80:fc:c1:4a:3a:60:e4:
63:85:60:fe:6b:64:53:bd:83:e5:c9:77:94:97:05:
b0:0e:e4:90:ab:e7:9d:3a:48:56:93:f1:a4:c7:d4:
29:03:3f:cb:b1:87:12:bc:30:f0:b8:06:37:51:1c:
c1:94:a4:93:47:68:f0:4b:fd:1d:a0:60:bd:e8:4d:
13:00:9f:5b:a3:b5:8a:39:7b:79:85:e0:4d:6e:34:
bd:7e:60:33:e6:85:70:c2:b9:ad:a7:4f:16:62:68:
c7:d1:be:e7:a1:7e:4b:05:5b:39:a1:da:52:74:ab:
7d:98:3b:b4:2b:93:c3:5e:be:04:e0:7b:9e:b1:63:
94:ac:b9:0e:b5:76:e4:48:8c:09:b6:1a:17:96:ea:
f4:27:81:c6:54:c9:00:61:75:de:2f:48:db:f8:fb:
92:d5:4c:58:86:e5:6e:01:08:7a:0c:5c:2a:c0:88:
86:bb:ee:5d:0a:1f:94:6e:59:15:b8:cc:e1:ca:6b:
c6:8a:24:36:c9:2c:60:c4:66:06:6f:50:16:cd:79:
0e:41:2e:2c:51:56:31:09:c9:d5:3d:74:26:29:19:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9D:50:A0:A5:2C:C6:1A:2F:1F:C8:2E:EC:2B:91:B6:FF:51:0C:EB
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0b:05:15:20:05:80:5c:13:3d:d7:94:cb:6f:8a:91:40:3c:
f4:3b:b8:88:4c:0e:27:a5:74:ba:21:0a:b7:3e:98:95:8e:3e:
ea:ef:38:f6:ab:03:e4:83:cd:09:79:ab:78:b8:d6:c5:8d:28:
59:61:5f:45:58:02:b6:ed:45:dc:40:4f:cc:c3:d3:27:a3:1b:
18:e3:6b:d6:8b:35:1e:90:f6:85:3b:43:35:9e:56:6d:16:e6:
cb:36:df:57:92:93:a3:49:51:04:c1:3a:83:5e:9d:ee:2b:fb:
19:81:9f:f3:88:8a:48:5f:0f:92:91:5f:88:16:89:86:71:de:
48:96:d1:15:6d:03:13:dc:a9:b7:39:8e:62:09:58:d0:a8:87:
2b:f8:9a:2b:fb:84:3c:fe:c0:c1:20:2a:fc:84:14:0f:d3:70:
a2:11:d1:43:2d:7d:e7:e2:04:62:6f:cc:ed:28:1f:c7:f3:47:
15:be:47:bd:96:bc:5b:33:eb:26:79:11:35:c4:27:0d:2e:96:
14:a6:21:b8:32:11:c8:fb:ab:d1:e9:d7:40:4e:e8:43:01:1a:
a2:ce:c0:2d:f7:c2:e8:f5:99:a1:12:f0:36:a6:6c:bb:71:be:
7e:e9:d8:da:fc:b7:b5:5b:ee:c4:9b:3f:0b:b1:8d:b0:c3:b7:
42:3e:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:02 2025 by rpki-client