Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: 4+MiGAPK3CDGvpEUNFlEZL8zAcX8hNAgdtJYM5tVsZs=
Subject key identifier: 4A:36:1F:49:AF:70:F6:1B:8F:04:06:C5:56:F7:12:E3:DA:96:29:2E
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 0197B5C4AA60AEB70C7DDF4D28FFE18C3773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0D30
Signing time: Sat 28 Jun 2025 09:00:54 +0000
Manifest this update: Sat 28 Jun 2025 09:00:54 +0000
Manifest next update: Sun 29 Jun 2025 09:00:54 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: JJjiFNy2s75JeYjydy9vA5Bk2z8XIK/8AzH4CbdNk4Q=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:aa:60:ae:b7:0c:7d:df:4d:28:ff:e1:8c:37:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Jun 28 09:00:54 2025 GMT
Not After : Jun 29 09:00:54 2025 GMT
Subject: CN=4a361f49af70f61b8f0406c556f712e3da96292e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:5f:32:f6:f8:09:27:41:2e:6b:6b:89:5c:
3a:5c:ad:d7:3c:c0:30:a5:b5:4f:8f:ed:31:a7:96:
9e:46:d7:c8:fc:24:77:3c:a1:7e:87:4e:5f:81:a2:
c9:3d:7d:24:4c:f9:a8:64:bf:d8:ff:97:66:d7:50:
bb:53:4a:9d:5b:5b:4a:16:5f:aa:57:86:a4:91:27:
52:fd:82:51:84:f1:4b:00:5d:58:3a:a0:45:fe:61:
c8:36:b1:49:b7:09:4a:7d:9a:83:e8:95:49:d7:c2:
02:cd:7a:62:d8:61:12:f0:14:06:45:01:78:9b:35:
7d:11:4a:87:0e:e8:15:2a:39:45:a7:da:45:64:cf:
32:51:27:21:97:9b:17:84:42:32:79:15:30:20:65:
ef:50:c9:85:d6:e8:24:9c:4e:6f:2c:2b:16:2e:cf:
e3:a9:67:74:78:2b:09:4e:a1:85:8e:b8:97:b5:c2:
ec:c0:c7:5e:9f:cc:05:8f:29:2d:24:0e:b7:bc:96:
66:c3:10:d0:e0:86:5b:80:7a:85:48:91:56:37:c5:
fd:9f:7f:af:b0:ed:0c:6d:d8:15:83:a2:bc:14:13:
d4:98:58:f2:66:f6:24:91:55:9d:f9:e4:e4:c8:75:
69:e7:bf:85:b6:a2:f8:34:cf:c7:a8:f7:f3:8c:f6:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:36:1F:49:AF:70:F6:1B:8F:04:06:C5:56:F7:12:E3:DA:96:29:2E
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:06:2a:a3:9c:e7:16:41:ef:92:16:cb:2d:0b:0a:b2:25:30:
c1:a4:33:81:21:9f:b1:e3:8f:6d:2e:f9:b4:71:ff:29:e1:5a:
eb:42:1c:03:1f:49:1f:b2:4c:05:63:ee:ec:dc:3c:da:98:f2:
50:27:d1:0c:04:84:66:63:a5:dd:13:d6:13:f7:07:4e:45:a5:
d7:76:16:9c:60:42:b7:82:46:9f:77:27:34:39:76:46:cf:0e:
80:ad:bd:86:dd:82:9a:c9:2e:08:1b:1d:60:9d:19:a5:97:27:
0d:be:a2:68:41:85:60:09:45:ef:77:9b:69:79:7b:4b:3b:66:
22:fb:a4:81:b8:4c:dc:7f:15:5a:36:09:2c:1a:3c:a5:5a:d4:
2f:af:21:c6:fe:d1:df:7d:3f:71:55:2c:09:e4:8b:6b:b1:1c:
b0:a9:5b:4b:4e:98:2d:45:2c:f5:c2:4e:bc:ad:1f:ed:f6:83:
55:62:db:2f:e8:17:28:bb:3e:51:b3:c0:01:82:52:43:f2:a0:
71:26:84:55:75:a0:43:fb:6b:83:3e:61:71:59:66:34:c9:12:
eb:aa:a2:e0:be:6a:4f:4b:d6:57:81:4a:a0:a9:bd:ba:5e:f6:
39:bb:c6:48:10:5f:48:78:3d:d3:4d:7e:5c:d5:57:bd:29:19:
92:ce:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:53 2025 by rpki-client