Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: jnM6WvE2w7fMZTfxgn5nV1Fsxnkb8oEjN58TejPQgJA=
Subject key identifier: 0B:7A:8E:4B:42:E0:94:ED:A2:F5:46:26:84:6B:41:DF:B4:EB:85:B4
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 0197B745625F7653AFE328F5134BDF728E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0C45
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: z5mURBylb9cLb061BAqBjkTevG26+263ZlnZ51/OJWk=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:62:5f:76:53:af:e3:28:f5:13:4b:df:72:8e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=0b7a8e4b42e094eda2f54626846b41dfb4eb85b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:06:c9:52:11:ff:2e:5e:47:53:d2:ee:62:
c0:f1:74:be:09:51:b3:e9:bc:7d:6d:1d:0e:db:63:
46:87:08:44:58:2b:1e:26:47:31:d1:66:1a:a0:b1:
41:a2:4c:6c:be:17:7c:fc:87:65:a1:57:2a:f8:ad:
1d:1e:30:0c:d5:1a:f4:76:f9:27:6c:b1:c7:db:bc:
e4:f9:a6:34:ed:b8:da:a0:7f:a4:11:a3:d4:04:b8:
b0:c1:62:84:b6:d3:78:27:cb:11:35:c8:f9:50:07:
68:9d:bf:17:a4:90:f6:a0:01:01:4a:45:72:c7:27:
6b:59:26:fd:c0:c7:68:60:0e:65:1f:e6:0e:61:06:
5f:b7:1e:10:41:72:6b:ea:1f:4a:e1:9d:8b:29:ba:
5b:4d:a7:c4:16:6e:89:38:dd:8d:b6:0f:fd:79:71:
16:5c:22:f8:26:d8:20:0a:4e:45:ea:d1:30:5e:d2:
2c:86:81:cd:54:1f:03:df:bb:6c:98:30:6a:5f:2a:
46:57:54:5c:c8:89:80:11:2d:b5:11:66:b9:b7:2c:
ed:dd:ac:28:ad:98:50:a4:db:a8:4e:e0:17:1e:79:
6d:0c:66:fb:7e:e0:b8:ff:c1:0e:eb:c5:70:2d:2b:
b9:21:62:ba:f0:4e:4a:7f:7e:7c:3d:92:fc:a7:00:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7A:8E:4B:42:E0:94:ED:A2:F5:46:26:84:6B:41:DF:B4:EB:85:B4
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9c:a3:04:a6:6b:0d:b0:08:d7:7b:ed:d4:ac:94:ab:e3:e1:
93:4c:06:77:d5:ed:3d:da:60:00:ed:64:c6:51:e1:f3:31:bf:
44:b5:3b:95:95:33:07:76:fc:9c:62:e7:3b:61:76:a7:0d:6e:
61:f1:0d:d6:6a:29:7d:27:b0:ff:d9:82:9e:0c:ae:d9:36:ae:
76:b6:56:7f:55:56:ff:f2:0f:d1:0c:4a:d8:b0:04:68:66:c3:
90:fe:ad:c7:ea:20:7d:96:b8:e0:f1:58:26:5b:04:6e:5f:c5:
97:7a:45:19:6b:32:3c:89:aa:b4:ae:bf:39:15:71:a5:ec:a7:
04:71:a9:14:13:71:08:5c:fd:1f:3f:02:bc:8d:5c:bf:b7:9b:
5e:cb:79:9a:49:82:6e:f8:b9:d9:dc:dc:97:e5:4a:9e:ba:f7:
11:59:25:32:40:5e:bb:fa:22:50:eb:3b:00:7b:87:db:e8:13:
ab:2e:d6:ac:07:e2:ba:64:54:64:c2:19:3c:f8:47:52:c1:0b:
96:45:68:2d:3e:06:31:ce:49:01:01:4c:c3:b3:9d:50:ba:70:
19:91:ba:b4:77:74:af:8c:f4:24:51:78:a5:66:0f:72:b2:d7:
c7:49:23:54:ca:e6:e0:dd:33:88:7d:1a:19:70:13:75:63:b0:
ba:05:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:40 2025 by rpki-client