Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: A8QVsiQ2CnmxIUF+o2ZGl+yTfWKoAddt+esyb2/TerY=
Subject key identifier: 58:20:EB:0B:0A:50:FD:BE:6E:85:8F:3D:82:06:24:7D:8E:33:D0:EE
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 0197B70ED26D36AB271BE3E8804154AD23C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: w0T4WSdSqQNxzICKxDb9/YzW1rkvMy4yQaOIR6BwfuU=)
2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d2:6d:36:ab:27:1b:e3:e8:80:41:54:ad:23:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=5820eb0b0a50fdbe6e858f3d8206247d8e33d0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:4c:9e:53:c1:a2:0d:75:a2:3f:7d:6a:70:
d2:e5:25:03:a8:1d:29:46:7e:27:1e:99:f9:8b:1b:
0f:7e:48:3d:21:bf:68:ff:b3:c5:93:96:cf:86:04:
10:f0:6b:a7:e8:3b:3d:76:f1:2c:d7:33:e2:6a:fd:
34:2c:cf:b5:ae:ef:6d:63:f5:e4:06:6b:be:79:75:
4f:c9:5c:92:6f:87:c8:0c:f8:52:48:a1:71:90:d8:
2c:d5:a9:9f:b3:a9:96:a9:8d:7f:a3:4b:ae:24:89:
91:6f:26:1f:03:c4:67:1c:0a:52:e8:09:e7:8e:01:
37:7d:9b:39:f1:c2:3e:3b:7c:5f:48:d1:67:e4:19:
14:d6:5c:45:06:e5:ba:29:af:b6:41:16:ac:9e:c7:
8a:a5:e1:35:9d:1b:1b:74:a9:8c:fa:a4:e5:a5:f3:
9c:37:ca:0e:79:9e:17:be:57:80:d4:21:9e:97:0c:
08:4e:d0:9f:85:9f:92:6f:0d:33:f4:3a:41:80:70:
1b:04:1c:1d:e1:9f:e7:39:e0:c9:4a:d4:35:a2:34:
ab:ff:7d:06:48:8c:45:5f:1b:dc:a3:36:f8:d9:36:
e9:3e:32:ff:38:97:28:5a:ad:62:1d:5e:76:c3:4e:
ab:9c:8e:fa:df:5f:9d:f3:b8:e5:92:c5:61:a2:c6:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:EB:0B:0A:50:FD:BE:6E:85:8F:3D:82:06:24:7D:8E:33:D0:EE
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d9:8c:a1:ab:c3:7c:3c:90:9c:75:11:70:52:38:bb:ae:6c:
07:6b:2d:84:e6:ef:13:a6:05:46:b6:6d:b1:af:c9:9d:01:c7:
ab:d5:f7:ba:2d:eb:04:ee:37:08:df:eb:c6:36:1b:1c:53:b8:
cb:5f:c7:65:ac:f6:4b:ba:65:18:ef:8c:47:2d:77:ad:8b:40:
41:f1:0f:39:1f:f1:51:7d:ed:3a:e4:42:de:fb:28:59:2c:67:
c0:39:3b:42:00:d6:9a:09:b8:c5:ec:73:eb:29:a7:df:7e:35:
88:90:6c:e0:ec:1f:56:72:c8:40:6a:7a:da:8f:db:64:6a:fe:
19:3c:5b:c6:c9:b7:74:6a:3b:24:f7:da:11:a1:21:ed:9b:7d:
ba:a6:6b:1a:68:c7:36:9c:69:80:f9:94:8c:83:44:db:05:b4:
33:ec:fd:74:b9:1a:49:ba:8a:f4:0d:4d:6f:9a:3a:42:78:5a:
4c:7d:82:b7:b3:a9:ac:63:c5:e4:57:d9:d4:73:6a:85:67:26:
6a:00:9c:6c:ee:74:31:7f:ad:eb:94:31:72:47:6f:41:ed:3c:
92:ca:2e:87:25:de:a2:c0:26:6e:0d:bc:65:67:53:eb:7c:66:
1b:8a:b8:72:82:a7:76:33:3e:08:e0:7e:f0:7e:42:10:1c:e4:
0f:e0:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:18 2025 by rpki-client