Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: 8YG/o+yMayzu5HqmJYh/S1yVoaqR2vsATDZbfDPGIiA=
Subject key identifier: 7A:EE:4E:25:AB:1C:7D:4E:47:54:07:8D:66:5F:07:1C:10:EC:EF:74
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 0197D13BE35905D6FB2C6F537CC893371A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 15C4
Signing time: Thu 03 Jul 2025 17:00:52 +0000
Manifest this update: Thu 03 Jul 2025 17:00:52 +0000
Manifest next update: Fri 04 Jul 2025 17:00:52 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: yNe/Q6kBQKxu8koccauUH2eXwheTlkoFm4ITMgrrf7M=)
2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:3b:e3:59:05:d6:fb:2c:6f:53:7c:c8:93:37:1a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Jul 3 17:00:52 2025 GMT
Not After : Jul 4 17:00:52 2025 GMT
Subject: CN=7aee4e25ab1c7d4e4754078d665f071c10ecef74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:5f:d9:f4:f9:69:a9:d2:cf:5a:3b:a6:23:
14:92:4a:40:7e:ba:db:fb:fa:d7:94:d5:22:bd:a1:
ca:c2:0b:03:f2:b3:fd:c3:01:bc:03:46:35:e1:f7:
48:2b:5c:8c:01:7a:9d:f4:f5:2e:fc:05:77:ad:df:
ac:f2:70:ca:f5:86:99:4b:01:66:ca:34:d0:c8:68:
27:be:8f:b7:2a:91:a1:49:91:4c:ee:87:2d:1b:63:
f5:e8:0e:97:36:84:8e:44:10:e8:ee:0c:e2:2b:96:
fa:d9:b5:88:35:41:88:aa:ed:5c:eb:f8:77:95:07:
3b:7c:00:20:95:50:9d:2a:87:ce:17:fb:2f:b9:3f:
5e:c9:22:22:4f:8f:c1:23:99:6c:86:39:03:0f:5d:
ec:ad:ea:ad:41:0c:4a:f5:ed:00:55:0e:19:9f:68:
20:23:90:b6:27:db:a1:79:d8:d2:9b:b5:de:19:aa:
da:85:68:29:30:ff:39:56:38:79:dd:9c:01:a9:a4:
2e:6b:26:a6:48:6b:86:27:4f:70:f3:57:b3:0d:20:
4e:4f:2b:f9:30:bb:08:f7:7e:7c:5f:84:f5:c7:b2:
71:bd:4e:97:3f:7f:72:b5:73:df:a5:78:e4:0a:44:
6d:d0:5c:3a:7a:30:37:94:91:c9:c1:86:f5:42:79:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:4E:25:AB:1C:7D:4E:47:54:07:8D:66:5F:07:1C:10:EC:EF:74
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:12:b0:6f:e4:b7:6f:66:58:ee:24:94:e7:58:76:e3:fb:16:
20:c5:19:27:5d:a1:11:a1:d3:a8:24:b1:82:6b:3e:f3:90:cf:
d8:ba:fb:89:50:ce:45:11:a1:9e:2e:0f:6c:a0:27:b0:24:b8:
83:84:bc:1b:1e:f3:3c:12:ba:86:f1:78:39:73:51:8e:3e:2f:
cc:c8:31:2a:ea:f5:fc:8b:04:71:e8:73:70:a8:18:4f:af:f7:
0f:a6:8e:06:d3:2a:3b:94:8f:14:e9:df:25:f5:6e:10:d3:66:
a3:d7:f6:b7:07:17:49:79:33:04:d7:45:9f:62:de:51:44:6b:
08:9f:d0:59:9e:87:a5:d7:22:2c:1c:de:a8:5b:a2:69:0e:ce:
7e:26:df:20:9a:9d:0a:ec:ac:3c:cf:8f:58:8b:2d:20:e0:f4:
42:73:9a:2e:45:72:fb:42:a3:3c:38:38:0a:f5:17:cc:a1:2f:
36:35:9f:cb:44:16:b4:24:3d:c1:77:5d:92:b9:7a:e6:7e:6b:
9d:d3:31:4f:3e:33:6d:3c:86:31:b6:88:2c:0d:24:13:73:93:
5a:c2:29:63:2e:5b:d8:af:aa:1b:02:84:0f:e3:1a:68:55:00:
cd:68:b3:18:0a:29:21:6c:5e:cf:a1:f7:6c:a8:9a:65:98:39:
f0:97:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:28:39 2025 by rpki-client