Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: I9w9FngBVAmgbVeoDn4TOcvIXZeIrQ1cZB7MSgUJneQ=
Subject key identifier: 12:D3:FD:3A:5B:5E:D3:AF:A7:AE:AE:C3:3A:CE:1E:41:D5:AA:F7:58
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 0197B7EAA41DC7914CF511E640BDA825F39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 033E
Signing time: Sat 28 Jun 2025 19:01:37 +0000
Manifest this update: Sat 28 Jun 2025 19:01:37 +0000
Manifest next update: Sun 29 Jun 2025 19:01:37 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: cxplUErI4Yd4dmaSZ5LsLq81sJaMpR+lvKt805Av5AA=)
2: BtILLkhjQwKc-cBqSY27nFkJu8g.roa (hash: j7KTEXdiX1vJGa7Y4gsoM737n4p+uU95jozk1BXznCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a4:1d:c7:91:4c:f5:11:e6:40:bd:a8:25:f3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: Jun 28 19:01:37 2025 GMT
Not After : Jun 29 19:01:37 2025 GMT
Subject: CN=12d3fd3a5b5ed3afa7aeaec33ace1e41d5aaf758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:c6:89:52:ee:f4:57:c5:98:11:7d:27:6a:
03:50:01:4c:92:0f:3a:e9:d3:2b:27:94:b7:71:f5:
0a:95:11:b2:a5:92:9d:2c:7f:8c:fc:48:76:0b:2d:
9f:49:86:60:38:5c:70:ac:56:1c:90:d3:c9:30:e8:
31:fb:99:1b:b5:07:3a:22:b1:fb:73:5b:c4:23:f4:
5d:1d:db:2d:ce:27:70:bd:1b:c9:d7:c8:82:96:be:
af:3a:40:92:14:45:1e:3c:a6:fb:28:a1:0b:fd:fc:
99:b2:b1:50:9c:93:4a:1f:44:00:ed:73:94:a1:d1:
15:f3:74:6b:d3:87:88:08:11:76:54:5e:d9:23:38:
f5:94:4a:9d:76:1d:87:da:d1:8b:27:c9:6a:84:5c:
19:61:a6:32:c2:86:a0:ee:2a:6f:58:f2:c0:6d:23:
c0:7e:66:dd:f3:3c:3f:2e:3a:0d:5d:b9:f8:fe:1f:
f8:f4:25:29:ce:29:c3:88:62:c4:68:d3:33:d9:bc:
ca:03:dd:81:9e:52:13:50:5a:aa:9f:3d:2a:20:62:
78:08:fa:c8:41:a5:cc:3a:ec:e3:27:2a:65:6f:e9:
e3:af:b6:e0:97:ab:22:34:dc:40:19:3d:88:98:07:
b7:02:13:9d:93:6f:d5:40:a8:b7:76:ae:21:91:97:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:FD:3A:5B:5E:D3:AF:A7:AE:AE:C3:3A:CE:1E:41:D5:AA:F7:58
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c4:ce:33:c7:53:21:75:0d:ad:e5:0c:99:53:24:ad:d6:cc:
d3:0d:3f:1e:c2:76:57:41:9a:aa:7f:ef:6e:41:30:57:d9:5e:
7d:9c:a4:ce:03:27:2e:f6:7e:ba:54:66:7f:54:10:e0:ef:92:
39:59:54:4a:f8:6c:d9:09:77:81:86:39:c9:5a:93:25:85:54:
a8:30:ad:bc:00:f8:0d:4a:f0:89:58:ab:2b:9d:ec:d5:b8:a3:
18:2d:72:ac:7c:bf:d1:6d:63:88:2a:ba:71:92:6c:11:1e:11:
1b:a2:0f:35:82:55:3c:07:37:3e:61:e2:d7:12:74:06:8a:42:
74:fe:d4:90:d0:04:63:f6:56:a6:10:7a:7d:6a:56:84:4d:54:
9f:2d:a7:20:d0:da:92:54:0d:70:32:0e:16:4e:b1:e8:e1:51:
9d:12:a6:2b:03:d9:e3:f3:94:e1:4b:56:58:71:51:d6:a1:9f:
49:dc:65:2a:08:93:4a:13:76:4e:51:45:62:52:1a:ec:bf:d5:
03:fb:6e:90:a7:0a:e0:d3:03:35:b6:35:30:25:1c:71:02:99:
2f:4b:4e:25:b2:e1:c0:48:7e:d7:58:b4:0d:09:10:ff:8a:54:
5e:ca:b8:7b:40:48:3e:85:9c:ca:4c:7f:ed:da:68:71:05:6a:
02:72:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:15 2025 by rpki-client