Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier: YabN/Wts/YgkYOZtsjMfgWBR0Zu9fFTPCRCwfnfI9tc=
Subject key identifier: 87:5C:37:D2:20:14:CB:9C:6C:63:D8:B4:DB:5A:37:9E:0E:B1:82:41
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 0197B5C4D7F17B99F82EC7F9B74DA4303D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number: 1475
Signing time: Sat 28 Jun 2025 09:01:05 +0000
Manifest this update: Sat 28 Jun 2025 09:01:05 +0000
Manifest next update: Sun 29 Jun 2025 09:01:05 +0000
Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: jjljtfkeZy9WnI7tPlOOa2fctq6IcSxeGmc2NRBKSV8=)
2: Eoa2DgYKZQhIPrEs2BVXe4pbre4.roa (hash: Lzu15VnANjg8WWEayf+Lga5VSNyXHu7NEi9f0IPI47U=)
3: N1PB4wkghMthA8l4GP9N1SzOEWE.roa (hash: 8LPlkWhxVtJM+jMtTkRPToXaYbmZ6b57zhGOgt0FEmU=)
4: V7B5ePYrHsO0XNRkMFSzpgb0L6o.roa (hash: mqOCLJjTNfcn+4Yc3m3WAArsC6xNXAO5dY/bAJctVR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:d7:f1:7b:99:f8:2e:c7:f9:b7:4d:a4:30:3d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Jun 28 09:01:05 2025 GMT
Not After : Jun 29 09:01:05 2025 GMT
Subject: CN=875c37d22014cb9c6c63d8b4db5a379e0eb18241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:4a:c3:d5:e9:25:cc:8e:cc:45:7d:5f:d9:
e1:0c:e0:b2:d0:87:65:d4:fd:67:28:77:e5:9d:8e:
a0:a1:f5:ee:91:e6:4f:e9:03:5e:7a:9e:9e:d7:27:
76:98:2a:35:db:82:85:64:90:7a:9d:f2:9b:a0:00:
82:64:54:65:69:64:c8:6a:5e:13:48:90:77:f1:14:
41:43:0d:18:85:73:55:d4:89:1d:f6:5a:a2:3b:7b:
ce:23:4f:d8:f6:b9:99:f3:51:2e:c9:e0:df:46:9d:
34:e2:aa:b0:46:c1:74:22:bb:b9:8b:dc:be:0f:cf:
bf:13:74:83:0a:4c:4c:bb:a9:61:9d:73:02:1d:b9:
67:23:33:f2:62:e9:38:29:2a:7c:b9:a8:e2:7b:65:
67:2b:7c:76:80:45:3c:6a:ae:f9:9d:d5:cf:39:db:
19:68:9b:3e:4c:08:1c:48:78:50:63:48:70:81:2c:
fe:70:47:97:06:23:e0:00:3a:f6:86:6f:bd:88:21:
97:16:5d:fd:6e:df:64:86:b0:54:05:84:83:1d:16:
7a:2f:15:4d:85:0a:91:c4:e8:86:4a:27:9b:fd:8a:
f9:d1:f7:59:28:05:56:69:f0:e6:dc:67:45:25:11:
35:af:57:d9:3f:6e:80:4d:33:2f:ba:aa:70:ef:58:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5C:37:D2:20:14:CB:9C:6C:63:D8:B4:DB:5A:37:9E:0E:B1:82:41
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:8e:d0:97:96:23:95:3d:30:47:fd:d6:8c:0c:75:1c:18:
fd:6b:8e:c2:c9:bc:d1:8c:8c:c9:e0:64:ac:bc:00:8f:bc:3c:
a2:45:b7:28:32:89:d1:2d:73:03:12:6e:44:6f:60:4f:82:4b:
02:2b:e1:fb:2b:29:9a:6d:dd:00:da:60:5d:81:0e:46:35:df:
28:b6:f7:14:6d:0b:a9:e1:9a:64:cd:05:84:70:05:53:27:49:
c9:3e:b0:f5:31:aa:72:22:a8:df:de:41:da:fe:a4:4f:ad:af:
27:8e:18:50:d7:87:53:1c:43:1c:65:ec:c7:cc:8f:a0:b8:5b:
ee:1b:64:ef:59:18:e6:92:2f:7d:65:52:22:5d:b7:ac:4f:aa:
28:1b:6a:d2:a6:89:5f:4a:2b:f1:69:32:13:d6:2d:e3:8d:a2:
c6:eb:c5:bb:55:d9:21:3b:42:ee:3d:f9:ff:dd:2b:28:c7:cc:
8a:b0:ab:69:a8:24:45:a9:1c:13:c3:a0:2b:b2:d8:f3:95:c6:
58:df:74:a9:08:3a:c0:c1:49:f9:3c:ac:13:4c:4c:b6:60:b6:
fa:0b:e0:4a:7e:32:09:78:4b:4a:c8:e0:c8:20:33:be:68:38:
1a:8b:9c:72:bf:9f:5b:4e:2b:30:f7:cf:0b:b9:76:a7:d7:34:
1e:99:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:53 2025 by rpki-client