Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: 6O1YHjwwRBQoz2snHiPgij5UO5ejGzhOteaRoLledFE=
Subject key identifier: 30:B8:07:59:4B:FD:34:BA:73:E4:C7:FF:1F:1E:6E:97:1F:F3:E4:F5
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0197B6D76C89A824E6890EEC45D5DAD080D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 0DC6
Signing time: Sat 28 Jun 2025 14:01:00 +0000
Manifest this update: Sat 28 Jun 2025 14:01:00 +0000
Manifest next update: Sun 29 Jun 2025 14:01:00 +0000
Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=)
2: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=)
3: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=)
4: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: Ml5Q6wel3pAOjV2nZ2YJFIHNNZ4q1f5UzEH/ykGjrto=)
5: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=)
6: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=)
7: rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa (hash: UmfdL/yMHB7LypaEgd2ulm2mGfbyrt6kIxKgT/oReek=)
8: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=)
9: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6c:89:a8:24:e6:89:0e:ec:45:d5:da:d0:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jun 28 14:01:00 2025 GMT
Not After : Jun 29 14:01:00 2025 GMT
Subject: CN=30b807594bfd34ba73e4c7ff1f1e6e971ff3e4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:78:94:80:78:71:7d:2e:97:89:a0:31:7d:
ed:bc:5e:bb:23:d3:94:fd:da:fa:6d:e6:8d:36:d1:
b0:dd:0f:ad:65:9f:19:aa:8f:df:53:0c:97:c2:cc:
fc:80:46:25:0b:d1:49:af:db:e6:4d:99:07:f1:d2:
99:be:27:fe:20:eb:aa:a9:54:33:15:7b:f2:e5:c9:
e9:54:26:71:16:f2:47:cf:84:62:e4:4d:fc:6f:25:
44:be:95:1d:dd:02:99:9c:b3:b3:ce:8b:16:85:7f:
8e:b2:7e:d9:4c:5c:20:82:2c:03:e3:c1:35:49:75:
41:2e:e2:fd:ba:17:a9:b0:d7:ec:0c:75:ab:4b:09:
4a:26:4a:ec:dd:38:cd:a2:97:0a:de:ce:61:af:66:
62:65:9e:f2:dc:e2:be:7b:d7:89:31:72:83:5b:22:
64:2d:73:85:cf:37:e5:ee:63:ab:f1:73:5f:1e:13:
04:74:1f:f2:a2:e8:d7:95:0e:56:c7:42:a3:70:12:
36:fe:21:e5:16:db:dc:84:51:bc:4e:96:37:bd:b7:
ab:40:db:d1:d5:33:02:c4:7f:10:64:78:c2:e0:54:
6f:97:67:8c:d4:55:59:15:8f:36:57:34:69:e2:ad:
2e:c0:65:17:71:60:64:f8:34:6f:bc:9c:a8:73:06:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:07:59:4B:FD:34:BA:73:E4:C7:FF:1F:1E:6E:97:1F:F3:E4:F5
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5c:87:e1:57:cf:5c:77:46:7d:b7:7d:f9:33:ef:f4:db:7e:
06:8a:e2:c1:55:67:88:14:75:ef:1d:3d:94:fa:1a:72:ec:1c:
18:1e:c0:aa:cf:78:e6:a8:6c:e8:00:62:e2:1e:d9:2e:ed:7d:
f1:c5:d8:6c:98:45:42:57:ad:c8:20:25:c6:cf:ab:d0:c9:17:
1e:20:6a:2a:df:08:28:5e:fa:39:97:42:67:59:63:90:36:81:
74:d0:f9:04:d6:b8:aa:7e:af:57:a4:a3:56:41:b8:51:53:a5:
e6:ea:c1:0b:4e:ba:d9:22:76:bd:a9:9f:a9:5f:55:c4:ab:77:
4d:53:62:c2:ab:f4:21:30:f9:af:fa:27:82:3b:60:5a:08:2b:
35:34:d2:f7:6f:b5:05:2c:bd:5e:4c:79:e1:39:97:ae:20:e0:
2a:d8:a0:2d:6f:90:76:d0:75:89:93:14:bb:d8:44:95:e4:c8:
40:3b:fb:9c:71:15:e6:05:71:36:43:34:a4:d3:f2:a5:23:db:
71:39:ff:7e:9e:f4:64:ed:dd:18:04:46:84:6e:3d:6f:ca:a4:
95:e0:6a:39:23:05:9e:f7:4d:e1:3f:6f:b0:39:65:ca:59:9c:
fc:e5:ec:e3:5b:e0:39:b0:80:06:bf:a2:50:ce:ee:39:99:14:
60:5a:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:32 2025 by rpki-client