Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File: 0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier: z+4hfdC+Ka3irtSBTm3DoiZlcK7HrJfsgu8m5itICHg=
Subject key identifier: 88:E4:37:F2:FB:09:FB:E9:A4:F2:F8:B6:79:1F:43:F8:0D:AF:BB:C5
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 0197B6A0D183B6C15C5D5007CF0B593864F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: CaOjJ1HWur1diZig2gbubzDQz7SrCfC7gPVzd82T54E=)
2: TOONOy5Q_RT0Xdkv1KFKuSIfrvU.roa (hash: TXGZC4gRCS30Z/KLMEQnuIwYUvM4xeHM8tIdbYo8vlk=)
3: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (hash: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=)
4: uruDYSjJsQHtgQsmkfxJYvrLAmA.roa (hash: ugK90f7lpLYbl+ftnhcqa/fEdcHq1apLzUka+OcYLBc=)
5: xhEX51qp0YGYG_1Xjcz1FIDptho.roa (hash: S68nwmQ0GGVwMdWpSzCa8wmg/ndTObvviSDOIpAfn2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d1:83:b6:c1:5c:5d:50:07:cf:0b:59:38:64:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=88e437f2fb09fbe9a4f2f8b6791f43f80dafbbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:e5:2e:07:ec:58:c1:33:66:af:8f:b1:65:
64:73:6a:3c:25:f3:2d:04:a8:b2:d1:09:2e:d8:2a:
93:46:1e:93:55:5a:1d:86:4b:e0:25:02:77:57:a1:
64:9c:bc:90:5e:24:fc:a3:66:ba:2e:2f:8c:ba:ff:
d9:68:b3:b0:49:9c:3e:b9:52:39:db:c8:10:ac:c8:
16:f1:a8:6e:9a:8f:f3:de:a0:61:c5:33:00:53:cc:
a9:f0:a8:43:76:28:48:62:11:fc:b8:b1:cc:32:41:
fe:e6:5b:70:e7:4d:78:cf:b1:02:78:af:a9:42:12:
6f:6f:5f:69:a4:15:33:80:a8:02:e0:3c:a8:43:cf:
8f:41:5b:79:33:78:2b:43:2d:79:3e:c5:69:c1:a3:
15:de:d1:e9:09:ee:9b:c6:bf:1e:60:bc:6c:2f:1b:
17:a2:71:fa:d1:59:e7:65:e5:ef:74:83:d4:7b:1e:
5f:5f:fe:a9:ff:b4:92:d3:bb:4a:7a:24:ea:06:cb:
15:fb:69:3b:06:30:3c:db:d9:29:ab:5c:da:85:bf:
50:f6:e7:b6:c0:8b:fd:66:45:b7:dc:ad:cf:97:7e:
af:9a:ec:56:3c:f3:f6:bf:5d:7a:6e:7b:e3:f8:91:
ee:6b:b9:12:b0:55:02:e2:79:e8:1b:a9:06:f4:20:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E4:37:F2:FB:09:FB:E9:A4:F2:F8:B6:79:1F:43:F8:0D:AF:BB:C5
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a3:f6:f3:93:a1:ae:00:3f:d7:5a:d8:59:31:fb:32:92:14:
25:37:36:c8:8d:76:23:c9:5e:e0:41:4e:50:96:c4:25:a2:42:
61:c9:3d:e9:15:c8:20:a6:a5:c8:42:c8:85:e9:23:4a:d0:a5:
d8:0b:cc:cd:f0:d6:43:af:1b:44:0f:0a:33:10:03:01:5e:c2:
ed:79:97:df:12:8a:5c:09:6e:0a:1f:51:85:34:e9:81:f7:4e:
5e:9c:5a:ea:a3:8c:65:88:1f:d1:3c:ee:b7:5b:0d:d6:cd:ed:
dd:24:5e:0f:85:16:d3:74:07:0c:05:50:08:f9:b1:66:b7:b9:
bd:cc:5b:47:ab:f1:d1:2b:70:fb:1c:ee:01:ff:16:b4:2d:67:
a7:7e:c9:44:e7:09:bd:c5:72:14:52:95:85:d1:b9:a0:c4:9c:
e1:c6:2f:17:80:94:9c:7a:39:00:31:30:62:14:56:41:9f:3e:
8d:ea:bf:93:fd:96:01:1d:bd:c8:15:70:e4:82:6d:5f:f8:16:
2d:c8:7c:0b:80:14:1f:50:3f:e2:71:35:03:cd:a5:1f:83:8b:
29:8a:d6:10:8c:5f:e1:02:86:dd:c2:14:72:41:7d:10:d3:79:
b3:90:5b:08:06:cc:f6:04:02:d0:dc:9e:9f:a7:0d:a8:22:cb:
02:eb:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:59 2025 by rpki-client