Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: voJvX2Ltszc2HX4ruhI+JttBdhR6bDPDUWoMG06421I=
Subject key identifier: 7B:47:78:45:FA:6E:45:29:31:BC:70:19:A6:13:5A:4B:AE:EF:4A:5C
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 0197B7EA9D58F2B7E3F10045E89231D10AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 0E17
Signing time: Sat 28 Jun 2025 19:01:35 +0000
Manifest this update: Sat 28 Jun 2025 19:01:35 +0000
Manifest next update: Sun 29 Jun 2025 19:01:35 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: OxGAHAzAwTDYBqGUwDac5C+tzS7DiRYg6odCGiGcNc8=)
2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:9d:58:f2:b7:e3:f1:00:45:e8:92:31:d1:0a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Jun 28 19:01:35 2025 GMT
Not After : Jun 29 19:01:35 2025 GMT
Subject: CN=7b477845fa6e452931bc7019a6135a4baeef4a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:83:fe:0c:34:78:3f:c6:2d:0a:22:a6:e6:
6e:7f:f9:95:eb:ed:1b:ca:0c:7f:b8:5a:fe:19:4b:
71:d3:07:b3:4d:e8:e1:3e:5f:82:0a:ce:22:2c:88:
08:0d:70:68:74:e6:1e:ee:40:16:59:ec:0f:f0:75:
a0:18:8a:71:3b:11:e4:ab:74:1d:bb:ea:f6:73:40:
70:0a:2e:da:7e:0f:88:87:d8:f5:fd:82:7c:7e:56:
68:be:7b:81:c9:68:29:f6:8a:b2:09:e4:cd:0f:9d:
36:1b:c0:d5:37:e9:56:a4:6b:0c:c7:43:cd:5f:14:
ce:fa:bd:4b:f2:42:bf:5f:5c:7a:50:43:b5:b5:6a:
f7:dc:ab:ad:e3:43:c4:1d:fa:e2:4e:3e:ce:05:9d:
a6:42:61:83:6e:44:92:da:c9:df:e5:9c:b5:80:52:
22:a4:4c:96:87:ef:1b:01:51:11:4b:7a:b8:06:c5:
4e:f0:c9:c9:13:74:7f:d3:0b:9b:70:eb:e8:6f:d4:
d9:65:8f:0d:c6:6a:0b:ac:61:00:7f:1c:ad:31:b1:
ef:1a:d5:14:d1:98:54:09:28:3e:3f:d2:05:bc:8c:
f5:b6:4d:9e:08:d4:46:da:f0:d6:fb:92:33:08:28:
52:83:96:29:04:77:a1:ac:7c:61:65:12:03:73:08:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:78:45:FA:6E:45:29:31:BC:70:19:A6:13:5A:4B:AE:EF:4A:5C
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:41:85:1c:45:b5:60:24:17:d1:a0:bf:7b:5f:b5:cc:ad:
bd:31:f9:b3:fe:9f:b2:62:39:de:fb:85:0a:b2:4e:0e:7a:ff:
35:42:de:0a:67:3b:62:03:78:43:33:20:24:89:08:82:d2:ef:
9e:b8:73:e1:a1:dc:dc:59:81:44:4e:62:64:38:c3:3c:67:55:
8e:e7:e7:1d:0d:08:fc:ce:60:2f:ff:b7:d1:66:aa:1b:3c:8f:
ad:c0:2b:62:ac:33:37:8b:62:8a:b4:a4:c5:9a:ae:84:bb:e6:
14:69:0a:4d:11:06:a2:1a:e1:05:d0:81:ab:d8:a6:5d:eb:cf:
f4:ff:6b:23:e9:63:10:e8:59:02:3f:70:d6:3f:5c:8a:d1:dd:
75:b2:74:ab:72:68:83:42:91:68:14:6c:2c:4a:40:86:68:b8:
2e:ed:e8:cc:fd:29:f3:cd:6a:f2:1a:f2:62:95:74:29:10:cc:
49:7d:35:78:87:6f:b2:8f:9f:1d:5e:83:c4:4b:51:ff:0f:48:
2d:0c:55:42:83:4c:51:95:53:a0:c7:26:e7:76:86:62:69:26:
f7:3e:44:09:6f:25:49:c7:0f:e0:c9:6c:67:cc:f3:51:6b:2f:
09:e9:ad:31:84:f9:e5:ae:5d:f5:f5:62:94:86:52:84:62:3d:
10:5b:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:22 2025 by rpki-client