Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
File: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json)
Hash identifier: 04mdBOWrvI9voBGpG0xO/sjpLQXgg5MDjRoE0pJ0SM4=
Subject key identifier: 41:B9:C3:EA:3B:E3:AE:3F:63:36:59:85:06:3A:1D:2B:85:4E:94:4D
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial: 0197B5FBFE316B93303170E5E4EFD3D868FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:20 +0000
Manifest this update: Sat 28 Jun 2025 10:01:20 +0000
Manifest next update: Sun 29 Jun 2025 10:01:20 +0000
Files and hashes: 1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: 9RoGVFcwoujARXaSdBUh2tY6PAMHriFTuS42h9hkNb0=)
2: OCcJDhB4OQ1X-MIeEHbwYqPSbys.roa (hash: bYb4Alf329H7/hgxf3+yXtwxwALKiQ1xJi7nvHZupTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:fe:31:6b:93:30:31:70:e5:e4:ef:d3:d8:68:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Validity
Not Before: Jun 28 10:01:20 2025 GMT
Not After : Jun 29 10:01:20 2025 GMT
Subject: CN=41b9c3ea3be3ae3f63365985063a1d2b854e944d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:80:d0:a0:8e:24:67:c2:fb:16:19:c7:13:
8c:80:ff:12:90:12:04:79:61:e1:67:5d:78:cb:1a:
a0:d6:d8:3f:05:78:ee:87:ab:b4:80:a1:94:f6:9f:
ed:a7:07:a3:90:36:e3:fa:1e:6d:36:e7:b3:df:f7:
05:84:aa:19:9b:08:51:de:aa:0d:a1:a2:37:d9:1f:
03:cf:de:23:ea:1f:59:1e:9a:63:52:01:6b:4c:8b:
0d:74:38:f1:f6:a1:0e:80:86:db:71:a5:75:28:55:
b1:a8:4b:bc:a8:88:bb:92:57:56:eb:f8:5e:b3:a5:
90:68:e9:22:51:f8:b1:07:ce:49:dc:42:b7:cf:53:
96:e8:af:84:94:19:b1:fd:f0:ca:7d:f0:c3:88:d3:
f7:40:96:4c:04:3a:65:86:36:4b:c2:14:63:5a:f0:
12:a7:e1:88:ff:61:45:c7:34:6b:01:60:1f:c5:43:
2c:bd:08:dd:c2:42:75:1d:c6:29:f9:6c:fc:27:61:
06:99:1a:7d:ba:1b:e2:00:c9:e5:a1:d4:a1:d7:e4:
75:2e:01:a0:bf:6d:0d:00:01:7c:20:6c:8f:62:38:
67:3e:d9:31:90:41:e4:30:69:57:30:7a:53:f8:0d:
f8:46:f9:03:7a:f6:e9:b8:cf:41:4c:f7:5e:71:b0:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B9:C3:EA:3B:E3:AE:3F:63:36:59:85:06:3A:1D:2B:85:4E:94:4D
X509v3 Authority Key Identifier:
keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:60:61:0d:df:b9:24:06:c1:7b:9d:ff:3a:ed:5f:a5:75:5d:
d2:76:94:de:f9:04:bd:3a:ae:b7:43:9a:e1:5e:30:b7:4f:1f:
3e:e8:c5:ad:0e:29:1c:30:94:e8:f5:71:b9:e9:c9:dc:56:5c:
27:ca:47:a1:33:52:8f:c3:67:97:a8:43:e9:8c:38:2b:98:b2:
cb:7a:36:24:9b:b2:cc:00:2a:76:c2:38:c7:9f:9c:9d:c8:29:
d7:8f:da:29:89:8a:a6:60:96:b3:9b:47:94:59:75:bf:c5:3f:
a0:74:3f:53:84:d1:d2:38:45:91:76:40:ff:09:59:ab:a2:78:
f7:3a:bd:de:92:b0:69:5f:88:ce:12:be:77:94:af:01:b2:36:
1d:ad:d9:2c:30:c5:3e:09:6a:7a:ca:6a:fa:73:9d:0f:7f:34:
90:16:34:94:98:a3:4a:f3:18:d8:88:32:c5:0d:59:4b:94:b7:
1e:cf:37:fd:23:16:e2:f2:64:d8:9a:3c:b7:80:78:1a:d6:f6:
f4:15:a5:b9:88:b1:ba:de:ee:a9:4c:7f:b7:5c:b2:19:e1:26:
e6:7b:23:8f:ee:2e:63:db:bb:4d:bb:89:4d:1f:7e:c6:f3:40:
7a:56:39:de:cd:0c:1c:7c:e1:92:e8:26:eb:6a:84:db:57:d1:
3e:8e:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:23 2025 by rpki-client