Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: ZHx/Uw4z8d8Gm3eMQzNRGbt/ONZGQgKg2XR/2INUfLM=
Subject key identifier: 21:AD:EF:2A:7A:EF:91:8E:16:CB:77:B7:70:8D:3D:B1:E8:40:A2:09
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 0197B6A146CF8F36FC327FE4F6E7CF0F8348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0BA2
Signing time: Sat 28 Jun 2025 13:01:52 +0000
Manifest this update: Sat 28 Jun 2025 13:01:52 +0000
Manifest next update: Sun 29 Jun 2025 13:01:52 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: bWFwhXTIwZM+66G6FNljfcnPBMqE2A1o0Z6bcTfCXck=)
2: IakaUVIwolxABf_iFG6RX8yq8dc.roa (hash: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:46:cf:8f:36:fc:32:7f:e4:f6:e7:cf:0f:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Jun 28 13:01:52 2025 GMT
Not After : Jun 29 13:01:52 2025 GMT
Subject: CN=21adef2a7aef918e16cb77b7708d3db1e840a209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:28:e3:1f:7d:9b:2a:f5:ab:ec:d2:e8:1b:
33:be:fe:df:54:e8:0b:5b:62:92:c4:f7:a6:61:2a:
5a:6f:3d:91:a0:0c:5e:a8:39:35:5b:99:80:24:6a:
fd:cc:70:2a:0f:62:9b:da:85:da:f6:bc:d6:cf:d8:
bd:39:c3:a0:c7:e1:e1:d1:14:47:07:63:a5:89:dd:
9b:3e:f3:52:d5:2c:b7:fd:10:92:af:e3:b3:56:a6:
e4:ac:df:bf:89:c1:f0:db:14:6f:10:e0:24:83:df:
28:df:0f:f8:7a:7d:e5:3e:03:e0:63:d4:5b:c5:1c:
91:03:14:51:ef:aa:32:36:25:ec:24:01:14:53:1c:
8c:26:0b:08:b1:6f:4e:e3:a2:43:c1:e3:a4:bd:e6:
2a:98:87:fc:2c:33:f3:26:90:33:e8:4c:c8:43:f8:
2d:34:af:08:95:ce:82:8c:b3:d2:94:79:04:19:46:
af:65:39:d4:e4:dc:c5:cf:1f:de:b8:4d:09:08:68:
3e:fd:e5:e6:8d:21:15:4c:e8:52:bf:06:96:1f:98:
74:97:38:8e:2b:89:8f:14:0c:42:e2:a2:0a:0d:85:
e7:3a:f6:c7:35:92:4b:76:6e:b6:e2:72:98:e4:bd:
14:5a:46:48:41:ae:e6:72:71:08:94:34:2c:43:87:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AD:EF:2A:7A:EF:91:8E:16:CB:77:B7:70:8D:3D:B1:E8:40:A2:09
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8f:8d:49:38:e4:0f:5c:b4:e2:35:03:74:07:46:2b:6c:7c:
ea:bb:27:c0:8d:5b:8f:3a:9d:fd:cf:35:07:99:00:3b:28:a0:
8e:8f:ae:46:40:8f:4f:75:54:e9:eb:6e:44:ee:b9:aa:91:d8:
35:e5:fd:c1:b4:57:6e:df:90:e6:b5:a9:ae:80:d5:2d:96:b4:
32:41:1c:f8:a0:c2:79:f5:33:88:57:66:81:8b:03:9e:fa:bb:
c8:86:bd:71:d7:3a:13:8d:be:89:a4:87:cb:eb:c6:ff:75:f5:
ab:86:9a:0c:3e:4f:a7:36:6a:40:e7:d8:2b:de:ff:b1:d0:52:
2b:a7:03:a7:b8:4e:ee:33:f4:98:88:0f:a2:e9:25:36:1e:a4:
58:a6:92:a8:dc:26:38:5b:4b:4a:b3:2a:5e:ca:7d:b2:e7:21:
09:06:56:a8:b0:78:7f:49:8e:d5:34:51:1d:57:43:e6:5b:2c:
47:99:df:b1:d3:1b:79:08:2c:45:3a:5a:3f:92:7f:b3:f6:e2:
f2:fe:4c:d6:d9:66:4f:35:8a:22:29:54:a1:42:18:8f:56:9c:
8d:6b:74:26:77:2f:c6:a0:66:e6:70:43:39:49:09:e2:95:8e:
ae:b0:a2:76:05:e1:8c:aa:6f:5d:f0:f9:06:b2:ce:10:80:8c:
05:0b:ff:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:54 2025 by rpki-client