Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: NNbT73kpSW81p1q2cHVCVzBcP8hGEc3IgaNVnpy7XBw=
Subject key identifier: 0F:6C:E4:4C:30:D4:CA:50:1D:CD:84:85:9B:D9:CF:C7:5C:54:31:06
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 0197BA7EC26A419C0A9EBEA770FFB876B692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 0644
Signing time: Sun 29 Jun 2025 07:02:38 +0000
Manifest this update: Sun 29 Jun 2025 07:02:38 +0000
Manifest next update: Mon 30 Jun 2025 07:02:38 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: 5duWrTRzakF9AOg4k98CXJcJb/seLs++LojHcvxzb9k=)
2: z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa (hash: UVS5jjAa9OEvk26uuzlwcbiMZWOU5g+RlzuAxXPKfXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:c2:6a:41:9c:0a:9e:be:a7:70:ff:b8:76:b6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Jun 29 07:02:38 2025 GMT
Not After : Jun 30 07:02:38 2025 GMT
Subject: CN=0f6ce44c30d4ca501dcd84859bd9cfc75c543106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ca:73:a5:e8:6c:f1:ef:0a:93:a3:78:4c:4b:
c3:15:6b:df:63:c5:bf:ab:3c:28:25:18:99:f1:80:
74:de:0e:54:3f:6c:e8:6d:3e:0f:73:f0:31:16:31:
72:1e:49:6d:5b:3e:88:68:3b:05:72:59:8a:7d:16:
37:d3:71:62:00:56:7d:ce:04:1a:54:37:1c:6c:ac:
1a:00:2d:d2:25:e4:2e:c1:22:f8:18:7e:2f:43:78:
50:d2:8d:ca:38:9f:e7:99:62:05:46:81:cc:05:ad:
f0:28:50:bc:39:c7:74:0c:a8:9b:17:a0:e1:f8:fb:
38:77:50:8a:f0:25:01:06:39:fb:cd:a0:6b:36:29:
5d:82:49:7d:40:2f:ad:74:06:fe:82:c7:21:b7:67:
10:2a:c5:f5:9a:da:39:bb:49:07:d4:b3:9d:7f:3c:
23:55:9d:22:1a:dc:3f:04:76:4d:13:f5:c8:b8:f3:
1f:c9:d4:53:9d:78:ac:31:7b:a3:65:61:0e:82:d6:
6e:52:18:1a:9f:e0:60:1b:43:89:36:27:99:78:ae:
7c:fd:47:cb:be:c1:24:93:32:a2:08:15:a9:a8:91:
86:13:83:63:de:f6:ca:e7:aa:8d:ef:2d:3b:ba:b3:
d0:4a:44:b6:4f:09:1a:a5:67:83:15:fb:e3:46:3e:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6C:E4:4C:30:D4:CA:50:1D:CD:84:85:9B:D9:CF:C7:5C:54:31:06
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5c:16:8e:c3:80:d9:d5:6c:3a:d1:c4:f2:51:b2:ae:11:b3:
44:0b:de:de:d0:e1:20:0f:20:ba:17:e0:e3:57:1d:53:fa:c7:
2d:0c:e1:ab:65:b0:f1:b4:0c:0a:2a:19:95:4e:7d:1b:af:2c:
e7:df:63:70:a9:d1:6d:77:ed:68:c8:91:50:7d:c6:d2:1f:ba:
86:7a:81:b0:0b:83:b4:4b:a1:52:bc:cd:8f:fc:ae:b1:dd:61:
31:e9:a0:eb:7c:ee:f2:ca:df:cb:17:96:21:05:73:d4:b4:2e:
25:9b:ed:59:cb:a8:35:57:88:25:c7:92:85:09:59:12:69:4e:
49:f8:fe:28:f0:a3:5a:1b:75:fb:7c:be:fe:fd:a8:c7:6a:f8:
b2:de:81:3c:b8:91:64:25:5e:1b:68:a8:7c:aa:6f:5d:2f:d7:
80:8a:c8:62:c0:79:ef:6c:6b:bb:d7:79:fb:73:16:da:f1:50:
50:cd:c2:c8:2e:fb:c2:e9:26:68:de:83:07:5e:29:1f:95:16:
c4:76:ce:4d:a3:f0:b3:51:08:b4:26:64:88:75:d7:62:89:6b:
36:9d:fa:1a:68:30:f3:3c:01:1f:4e:25:a1:30:d8:92:b6:b5:
30:53:30:24:a8:b1:4b:d9:7e:5f:87:53:b4:18:25:8d:73:e0:
fd:09:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:34 2025 by rpki-client