Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File: 0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier: G6+PjPJ2B269k7K84ek9w1odw/s7i7MCigNOKS2COvU=
Subject key identifier: E7:1F:64:29:8E:70:0F:CE:A5:BE:97:41:11:59:4B:B9:D6:25:B8:4B
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer: /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial: 0197B6D76780B54385EAEE92684DE20B28A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:00:59 +0000
Manifest this update: Sat 28 Jun 2025 14:00:59 +0000
Manifest next update: Sun 29 Jun 2025 14:00:59 +0000
Files and hashes: 1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: Kb3SY4FVq5wmxmDP2rq35x44Fq2lCSAp/Ji1QSMVSxY=)
2: QxqcS0TVGSUgUZVV2ZivYzu4jmI.roa (hash: ZdHOHVJoAbkKGlM6IZatNPTQ3rdTLS0gUgU+DGM3k0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:67:80:b5:43:85:ea:ee:92:68:4d:e2:0b:28:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Validity
Not Before: Jun 28 14:00:59 2025 GMT
Not After : Jun 29 14:00:59 2025 GMT
Subject: CN=e71f64298e700fcea5be974111594bb9d625b84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:8f:bb:96:04:4a:db:15:f4:c7:11:ba:46:
ef:4d:98:89:cd:f7:1b:f7:5a:11:7d:fc:af:dc:14:
1d:1a:d0:96:dd:21:79:51:7a:69:1c:bf:3b:99:d5:
d0:ab:aa:cf:8f:8e:62:60:5a:43:d8:88:4f:98:48:
dd:f2:8f:5f:64:5f:e1:94:c7:b7:8e:56:82:29:1e:
2c:01:cb:1a:aa:50:e2:94:56:a6:83:4b:d6:8e:13:
ec:ec:52:30:31:57:48:6e:29:27:dc:4e:9a:15:d3:
d2:bb:19:0d:82:93:76:d5:59:92:e3:ce:04:84:39:
0d:e8:68:8e:f3:f5:5d:26:0b:4e:5e:67:07:fc:18:
41:3c:91:40:d4:a7:de:bf:b2:0d:73:8f:6a:9f:19:
30:3f:e5:68:ab:e3:b1:ea:86:2e:f6:07:1e:75:11:
07:78:7e:58:34:bf:8e:cc:f8:39:d1:f5:44:02:e6:
98:7e:0c:65:d7:55:d4:be:d2:53:02:c0:2a:81:9b:
2a:ab:3f:68:7d:37:3f:11:a0:dc:dd:f8:c2:3e:ef:
ad:b6:94:c3:f8:b0:52:c0:b7:ac:22:6c:f0:83:28:
ce:43:89:62:9c:40:ef:8a:4f:c1:7f:9d:16:be:4c:
fa:f1:c6:a6:07:09:fb:ad:df:95:d1:af:17:58:24:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:64:29:8E:70:0F:CE:A5:BE:97:41:11:59:4B:B9:D6:25:B8:4B
X509v3 Authority Key Identifier:
keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f3:c2:d6:3d:83:e2:57:45:88:1d:c6:3e:60:8a:3d:d3:3c:
dc:1b:48:dd:4b:58:69:89:86:be:4e:cc:a5:34:a2:28:bb:bb:
7f:00:66:50:25:5b:47:da:6d:05:34:49:fa:32:3c:c8:b4:88:
d3:40:ed:db:21:14:3f:ff:11:29:15:4f:4b:8f:91:43:ff:36:
2d:3b:d7:45:f8:c6:0b:79:31:7e:92:c8:17:a0:aa:07:46:0f:
19:aa:c9:b6:e9:ff:c0:4e:f8:ef:3a:87:e3:a6:33:d8:7d:07:
94:16:0f:1c:3d:4b:87:40:8e:9d:3e:9e:84:cb:11:e3:cf:85:
2b:1b:ea:76:14:5c:31:e2:91:d5:e8:ac:2a:2e:35:e1:2e:8e:
f8:87:ce:9d:8a:41:34:c9:93:6d:b5:3b:90:2d:63:ee:17:05:
01:b5:56:fa:d1:f3:ba:a5:4b:71:88:8d:61:1b:2d:41:44:ba:
01:a9:f1:6e:cd:34:78:56:46:30:48:d6:7c:60:db:a3:e4:c0:
b1:73:c6:1e:24:b3:3f:e8:ae:c8:67:8e:e5:51:fe:8d:18:64:
28:02:e7:ea:f0:51:23:9f:8c:ad:b0:b5:69:33:ee:10:64:a1:
e8:75:2b:c5:7c:c1:f2:f8:69:bc:68:73:35:24:9c:ff:87:38:
04:03:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:57 2025 by rpki-client