Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: Q7cr4sW3al4xiqyP+kkHjNkGBCaVaG3ejDh7Usv4lbA=
Subject key identifier: 57:9F:22:45:83:19:71:47:6E:2F:D3:66:82:68:26:73:D2:B0:3E:C6
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0197B77C0D1257773A1FB78EE810F58280C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: MTlkJwO6KFiiOrWDfYY8Gi6t5nHelegV8pvVU8bkhTM=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0d:12:57:77:3a:1f:b7:8e:e8:10:f5:82:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=579f2245831971476e2fd36682682673d2b03ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:ac:b7:11:dc:6e:bf:91:a3:d5:e5:b1:0c:
88:3b:74:ce:ae:e2:e7:9e:d8:8a:a5:06:3b:34:b7:
51:17:bd:03:a4:9f:e0:f2:21:51:62:77:f7:37:2d:
38:a5:b4:fd:69:28:d3:73:59:05:2b:10:4a:25:27:
02:38:84:94:ac:3d:db:5a:9c:3d:dd:51:a8:61:7c:
23:60:c8:f8:83:a0:b0:51:6f:f3:8b:5f:5f:ff:3c:
8a:4c:c9:1d:bb:45:02:9b:05:7e:e3:9d:3e:28:88:
7c:56:05:a2:f7:9d:b6:5c:ed:6c:b2:f4:4b:b8:6a:
15:ec:86:f6:fe:08:f3:a1:d3:be:a2:c7:aa:c4:4f:
eb:e1:d3:41:76:0c:0c:5a:bc:6c:c7:54:48:5d:63:
2d:34:65:3a:b6:80:81:ab:51:df:d7:21:c0:7a:73:
45:93:af:58:10:8f:d3:5f:96:bf:ac:f0:72:3c:87:
63:a5:d4:35:c5:bd:39:80:98:08:08:fa:68:53:01:
b7:56:51:c2:47:8a:41:53:bf:c0:85:df:c0:47:12:
2a:d1:28:82:8a:8a:e1:66:19:b3:6f:bb:04:ef:56:
8b:14:49:b7:c9:46:81:0a:5e:a9:5a:7b:b1:93:01:
7b:11:d5:c1:5c:7c:96:86:40:9d:91:d8:f4:b2:7f:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:22:45:83:19:71:47:6E:2F:D3:66:82:68:26:73:D2:B0:3E:C6
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:95:37:fd:23:90:b7:f9:93:b7:2d:be:f8:08:ce:05:61:e9:
13:a5:79:14:cb:d8:bb:70:3b:93:2f:8e:35:49:5a:8f:0d:d3:
7f:a2:5b:9f:77:e4:bf:a8:be:46:92:69:85:ad:e3:8d:e1:7b:
35:e2:80:a4:3f:32:8e:9f:1c:08:ae:c4:71:6d:0b:92:15:16:
6f:28:7a:17:51:7b:3b:b5:fe:e4:47:ba:18:6a:a2:8b:42:5b:
67:e7:14:41:76:5e:87:59:b1:11:ca:38:51:ea:1c:3a:81:f4:
ce:a4:96:e1:a7:03:a1:29:1b:12:20:65:10:7e:8f:fe:ef:cf:
e1:44:13:9a:73:f5:6f:38:e8:3e:5f:9a:e8:1d:ad:87:dc:45:
2b:be:34:cc:90:1a:78:7c:78:b2:4b:e1:bd:66:34:a4:04:65:
0e:5d:1d:49:da:39:d0:b2:39:95:27:8b:1e:75:2a:99:12:86:
4b:d0:58:26:74:5b:c7:a0:66:a5:00:e0:45:90:74:93:ea:2e:
4e:ce:43:11:de:25:de:f2:47:8d:e9:76:06:f4:65:6e:01:62:
87:84:a1:ab:a4:0e:d7:11:df:07:d2:cf:72:05:20:83:03:12:
4d:7b:59:71:d1:8d:0e:f4:a7:b6:65:a4:5f:35:11:c0:f0:60:
55:fb:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:41 2025 by rpki-client