Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: lylKwItIHr1v2+WnQkp7VW3jednP3izayAhEv4/72hQ=
Subject key identifier: A9:7A:01:4C:61:2E:6E:49:12:B3:69:C8:52:17:AD:7A:1A:57:2B:66
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 0197B8FD5E9A17B2459A516822A0EC45350E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 03E7
Signing time: Sun 29 Jun 2025 00:01:41 +0000
Manifest this update: Sun 29 Jun 2025 00:01:41 +0000
Manifest next update: Mon 30 Jun 2025 00:01:41 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: I/GpekJh/1+QZtSxe/fNAY3PJ57OVLPMioQs/8kg9IM=)
2: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (hash: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:5e:9a:17:b2:45:9a:51:68:22:a0:ec:45:35:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Jun 29 00:01:41 2025 GMT
Not After : Jun 30 00:01:41 2025 GMT
Subject: CN=a97a014c612e6e4912b369c85217ad7a1a572b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:24:bb:e7:3e:94:00:9f:68:83:fc:8d:d4:
e3:3a:10:6f:64:8b:7f:bb:4c:f4:5b:80:81:d8:cb:
01:58:dd:07:65:63:b3:13:4d:bd:09:d4:9d:c1:4e:
98:9d:02:ca:e0:56:9c:5f:1f:de:ff:4d:05:ed:0e:
1d:14:4b:de:b2:7c:be:df:f2:3e:c6:12:83:b1:7c:
85:9f:f7:b4:25:2b:2a:25:1e:da:1b:f4:f1:11:2b:
5e:13:3e:b0:48:c7:fb:52:16:c6:15:84:d2:c3:94:
47:9a:ec:7e:d5:8b:c1:1d:22:62:70:4e:c9:0d:33:
f8:0d:29:77:27:ec:5f:45:74:da:6e:1f:fc:2b:92:
59:10:00:2b:ef:6d:04:7b:94:62:ce:ac:80:a8:44:
a7:ab:f8:88:bf:78:69:0c:a3:97:b6:a3:ff:09:ed:
45:28:8f:42:3f:44:d8:ab:7e:e4:e4:4c:8d:3f:d4:
14:0e:c9:79:7e:ee:94:16:a6:11:67:af:eb:b1:c2:
b9:7b:41:f1:6c:40:cd:05:e5:f3:63:87:13:8b:ab:
48:cb:29:21:61:c3:54:a3:56:c6:ef:4d:87:7d:d9:
c6:55:63:8a:46:ba:f6:aa:ef:fe:f9:e2:7a:df:53:
55:5d:be:e3:60:fc:d7:53:6d:d3:1c:ce:03:fb:95:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7A:01:4C:61:2E:6E:49:12:B3:69:C8:52:17:AD:7A:1A:57:2B:66
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:79:a7:b0:3b:2b:c5:a5:ff:91:e2:76:a0:a7:65:f8:65:18:
fa:08:64:92:7a:02:99:b5:f2:d1:6e:e6:3e:d4:b9:80:7b:69:
44:e8:06:b2:f9:4c:a1:a7:fb:3d:aa:7e:50:e6:95:28:16:23:
f1:67:5a:21:e5:57:e9:28:df:28:be:8c:75:91:95:ec:92:ed:
aa:cb:0e:ea:55:8f:a6:e1:7b:8c:43:fb:b4:ff:7c:04:62:c9:
4f:6c:08:53:5c:9a:cf:2e:83:fd:a1:a3:fe:d5:a6:fe:5a:38:
03:1b:9e:6b:1f:68:fe:d1:04:d7:34:d7:6a:67:ca:05:f5:c4:
2e:45:35:b9:35:cb:52:5b:d0:53:b3:ca:e7:da:4d:88:b0:93:
0e:4b:4b:fc:a6:68:f2:76:23:42:8e:3d:76:0a:a7:3b:5d:a9:
5b:ac:4c:e0:70:80:e1:df:58:d3:70:af:db:4e:a9:86:e1:a9:
09:6e:32:ad:b9:81:05:bb:42:cd:4f:0d:45:67:d8:78:06:81:
13:71:df:7d:d8:ab:16:ad:ae:ad:ad:93:cc:a7:be:7d:2f:ac:
d3:ac:7b:86:96:cb:c2:de:a6:83:57:8a:8d:f4:21:cf:8c:64:
28:69:e2:fa:c0:ce:eb:f8:13:12:d4:23:b5:92:6b:b8:5b:a8:
d8:f8:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:24:34 2025 by rpki-client