Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: hqO58mPt57VsjZn8klZonZiBtw93JjHIiRZe5w16F/I=
Subject key identifier: ED:D6:C2:81:32:7E:EB:FE:FC:DA:FF:26:C0:4A:F1:70:45:A5:4D:46
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 0197B745BB338C0D0AE2463A44B5204306E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 02AA
Signing time: Sat 28 Jun 2025 16:01:29 +0000
Manifest this update: Sat 28 Jun 2025 16:01:29 +0000
Manifest next update: Sun 29 Jun 2025 16:01:29 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: WSOEZfjYw/PKVlEc1AK9rMb2HjDkfaOngxhmoIOGTLA=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:bb:33:8c:0d:0a:e2:46:3a:44:b5:20:43:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Jun 28 16:01:29 2025 GMT
Not After : Jun 29 16:01:29 2025 GMT
Subject: CN=edd6c281327eebfefcdaff26c04af17045a54d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:e4:2a:e6:89:77:22:30:4c:f7:79:36:9d:
81:6b:43:b9:6d:44:e0:1d:66:e3:ab:0b:1d:91:7b:
4d:24:32:f8:5d:b3:d0:63:66:60:1f:56:62:5c:1c:
f5:c0:5c:ea:6e:32:3d:d2:bf:93:74:e4:42:32:3e:
3a:3f:7d:ca:57:46:a9:00:c8:f1:c9:b7:fa:f8:41:
20:66:5c:34:8c:03:ab:6e:ea:02:b6:6c:57:6c:fe:
da:4d:56:26:60:50:62:41:a2:e7:9e:95:d5:21:11:
ef:59:83:f4:18:d7:cf:ea:52:7c:e7:ae:ea:9c:ee:
0a:ae:bd:04:39:3e:89:e7:e3:76:82:c8:75:d6:02:
ec:22:83:21:1d:cc:27:92:df:b5:a7:c0:a2:cb:79:
de:b4:d0:5f:7d:b4:5e:f8:19:36:f7:b6:f6:33:58:
9f:40:65:ab:ef:61:12:71:ff:58:5f:c9:e9:7f:d4:
d0:c9:e7:bd:da:09:3c:35:65:c7:4f:7f:1c:54:45:
cd:98:d9:6f:68:d1:4d:4d:95:56:40:4b:bd:da:cc:
b6:d4:d5:ca:45:21:f4:4c:6b:28:b8:35:e0:ef:34:
4f:f0:b6:b3:c1:e2:a9:97:e3:ba:ea:54:86:28:df:
2e:91:fb:d4:65:94:e9:b0:cd:ea:b9:74:27:25:86:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D6:C2:81:32:7E:EB:FE:FC:DA:FF:26:C0:4A:F1:70:45:A5:4D:46
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0b:a7:ff:85:2d:ad:e1:7c:41:29:6d:0c:15:ba:bf:e1:a7:
a1:51:d6:eb:4f:09:0e:0b:bf:0b:ee:40:2a:e3:40:fa:47:c8:
f7:10:8e:11:d3:bc:55:ff:f0:1f:f9:09:2b:ec:a7:54:02:b6:
dd:1e:fc:5b:22:dd:15:b9:d2:67:ed:7e:72:a6:a6:51:35:fc:
e6:5a:86:1b:08:a6:3a:b2:6a:a1:65:98:64:b3:cc:30:5a:07:
ac:80:f4:26:55:75:24:da:c7:d1:4b:f8:c3:e0:d8:d3:ac:78:
e8:20:41:80:20:50:24:0c:a1:12:c0:05:22:32:8b:5c:4f:ea:
bb:d3:96:d8:25:4c:c3:6f:82:78:d9:a2:7f:4f:50:e5:45:a9:
6f:eb:89:7d:a4:c2:aa:9b:a8:e5:89:21:1b:40:31:88:90:ba:
af:9b:dd:d4:66:d4:37:c8:ae:a1:ac:32:ad:91:33:85:2c:d8:
b1:14:95:5d:a6:8d:ab:d2:e9:05:4c:39:56:64:09:f4:f4:55:
a0:ea:e4:b8:bd:0c:27:bd:ce:d4:7f:3b:b7:6d:32:1a:1e:81:
71:29:80:1f:04:17:56:59:e7:1f:ed:c0:c5:1c:b0:36:32:05:
9b:68:21:db:6e:89:d9:42:ab:f5:fe:0d:8d:4c:6f:b3:a8:ab:
09:68:38:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:02 2025 by rpki-client