Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier: 1V8Y4nDxeqdK0j1yhf9YT9nG+HE0rxm5OxakSE5Yvyg=
Subject key identifier: D0:43:1C:EA:EB:88:2C:B1:96:5B:37:13:9F:8B:B0:2B:9E:60:07:36
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 0197B8FCDF977CB04934FD93748A68B4C9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number: 0658
Signing time: Sun 29 Jun 2025 00:01:09 +0000
Manifest this update: Sun 29 Jun 2025 00:01:09 +0000
Manifest next update: Mon 30 Jun 2025 00:01:09 +0000
Files and hashes: 1: NxVQaX6suFkgxiAAF2vWtVQF7dk.roa (hash: zsaYmfZBz75BAmMTNCovG+cBN7yV/z5nE5MvUK9bhp0=)
2: QB7BRHUFuZiz_JCklEdTGkiHDXA.roa (hash: T5whSTEBQz0KfK/+KqfcupXVgP1i6/CuX9EnL85Iy64=)
3: hzmnrqGEcmQoLE8-QnNCBlnG1g4.roa (hash: BMDDmrLQ040JiodI6CtpS7rhdysF3qgW4lRm+vEVeGs=)
4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: FaUovwcmpfCymBG3MRymFZKqLm16j4Lq3gkgcYXe1Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:df:97:7c:b0:49:34:fd:93:74:8a:68:b4:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Jun 29 00:01:09 2025 GMT
Not After : Jun 30 00:01:09 2025 GMT
Subject: CN=d0431ceaeb882cb1965b37139f8bb02b9e600736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:cf:46:07:37:ae:d9:16:2d:18:e9:90:cb:
99:35:1a:22:6d:36:83:5b:78:2e:70:58:a4:b3:5c:
b3:2c:64:af:0b:93:c7:50:b7:c5:47:5d:e5:e7:52:
93:e3:78:dd:8f:08:3f:6e:4b:5d:e7:60:c4:31:17:
09:ae:28:61:7c:fd:cd:69:55:d5:6d:64:a9:81:69:
7f:c5:1d:05:b9:d4:b5:00:35:c2:f2:21:11:be:2b:
2d:52:60:ba:01:9d:e7:fc:91:6a:23:37:2b:db:12:
b9:17:b2:8d:b5:c3:aa:0f:33:8a:ee:aa:1c:ca:12:
39:56:c8:f3:a7:e5:dc:0a:d8:9c:00:2d:7a:bf:8d:
f2:25:81:08:7a:60:92:1c:da:96:9b:0c:40:80:60:
a7:2e:f1:cd:79:c0:c8:93:ce:f8:7c:45:c3:c8:ce:
21:07:a1:0e:2c:51:e6:a7:71:fe:ac:bf:a3:92:43:
7f:54:4d:7e:a0:34:c3:f3:98:6a:1e:53:cd:a5:95:
20:26:e5:5d:f5:0b:8e:69:34:c4:f8:d9:75:ea:ff:
8e:6a:6e:4a:e2:ab:5e:d6:fa:e9:77:9e:d3:cf:98:
b8:24:da:c2:4d:1a:c8:bd:bb:97:ba:d0:91:d4:28:
69:e6:94:18:1e:70:83:1e:95:8f:37:13:72:4c:71:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:1C:EA:EB:88:2C:B1:96:5B:37:13:9F:8B:B0:2B:9E:60:07:36
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:42:58:b3:36:4a:fd:6c:ad:8e:d3:93:c7:c3:49:97:55:28:
80:f8:1b:23:11:ee:3b:4e:08:e6:bf:1f:85:44:22:5f:5e:4b:
11:55:81:85:71:44:63:dc:c9:03:36:a0:ac:b7:b7:77:31:69:
0d:4f:d7:7c:67:d7:e6:fb:41:3b:2a:4b:a4:8e:a4:c9:b2:e3:
0a:e9:9b:ef:21:c5:9c:1d:b3:9a:5e:82:0d:a7:7b:6b:4d:37:
a0:4a:d5:d4:6a:6a:bf:85:9a:6a:01:67:d1:2c:d9:fc:f8:ad:
35:47:39:8b:d7:f7:1e:dd:37:1e:62:4c:59:f3:a4:59:25:00:
ce:25:79:f6:d1:bc:d0:56:39:34:a3:d0:bb:e3:f7:0f:fd:62:
86:12:92:b4:ec:c2:22:ce:06:f6:7f:18:40:50:f0:3f:c0:7b:
b9:2a:4a:f2:f9:49:60:45:e7:34:3a:43:3f:2b:21:b6:35:dd:
d5:e1:be:a4:dd:d1:cc:08:4e:35:ef:19:3e:9d:5d:99:55:35:
a7:69:e8:e5:33:a9:db:20:27:95:08:10:6b:25:e5:2d:72:c5:
aa:0e:c6:aa:84:07:f5:35:db:2f:24:4b:a0:97:bb:a3:ef:9b:
66:8e:34:a6:40:c3:b2:03:54:38:69:e3:4d:37:c5:96:7f:9e:
70:e2:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:42:13 2025 by rpki-client