Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: 5CjMtzE3a4AdWT4ayYXxwZlr8p3QeIDbHM/wVpNAK4g=
Subject key identifier: 90:25:DE:84:EA:94:2A:EB:5C:7F:EB:2C:CE:AC:F7:A1:81:70:BE:E0
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 0197B7453351EFAC46A88489881D615FF25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: 3W8huMohhuPy6cAXuJMBN/qmmy2krwiJJHnisk4j3J4=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:33:51:ef:ac:46:a8:84:89:88:1d:61:5f:f2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=9025de84ea942aeb5c7feb2cceacf7a18170bee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:43:eb:75:d9:69:e6:6d:8b:8d:94:4c:f5:
f3:53:6f:fb:8c:11:56:cf:f1:00:29:d7:40:27:d7:
75:32:2b:44:9e:33:b1:1d:3c:98:04:b0:b0:79:1b:
5a:29:3b:3d:5d:bc:c0:f7:9f:4a:02:97:93:51:df:
8e:ad:ab:48:00:93:6b:10:f3:b4:12:7d:a9:db:cf:
9e:0c:9b:de:af:9a:d5:58:d9:46:6d:b9:30:eb:80:
82:2e:de:58:aa:e0:81:4a:16:87:95:c9:8e:61:3c:
e0:4f:ed:11:96:84:64:41:01:ad:89:34:81:68:5d:
91:52:d3:28:a5:f8:f2:59:4d:19:6f:f6:7f:20:b5:
4c:c3:1f:9b:e4:78:1a:19:c5:71:b8:88:cf:e1:eb:
bd:15:39:62:ce:70:7f:b1:49:14:64:a7:eb:b2:67:
c8:cb:c0:7c:64:cd:fc:75:93:46:2b:4c:8d:31:d4:
4e:ab:7c:37:1e:41:f9:da:2e:23:9e:78:9c:03:28:
1b:39:2f:b2:a1:75:54:c1:f5:9a:a3:93:a0:df:ed:
27:04:34:eb:fa:eb:7c:07:76:49:48:2f:2b:41:c3:
f3:a5:02:bd:4d:1e:d5:43:b5:c7:48:10:c5:b9:f7:
81:9d:44:7c:16:66:5a:7a:87:60:3d:79:c6:df:d8:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:DE:84:EA:94:2A:EB:5C:7F:EB:2C:CE:AC:F7:A1:81:70:BE:E0
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4b:b1:ef:a0:98:19:76:49:8e:b0:88:28:54:24:a6:ac:c8:
fb:37:eb:a0:6d:bf:bc:ce:40:5f:ea:ab:95:9e:41:b6:eb:0a:
92:70:04:10:60:7a:73:05:45:aa:e1:a6:97:b6:45:87:59:dc:
43:b5:1f:85:96:0a:fd:f1:1e:14:86:72:a8:bf:48:bc:d7:8d:
02:1e:d9:35:1e:59:9a:29:74:bf:7d:5e:92:41:7c:1a:be:71:
33:c9:ec:09:90:f4:b4:af:b9:5e:e4:2a:8d:94:ae:95:39:74:
df:1b:ba:7c:e1:f5:8b:4c:8e:79:83:2e:93:e0:34:00:b7:bf:
36:bd:87:43:c7:fe:d4:d7:c9:73:4d:c5:40:18:ae:10:b5:b7:
08:71:3c:74:89:34:2c:fe:f9:a5:15:36:b1:28:d1:c1:39:1b:
6a:58:77:56:1d:ae:cf:36:34:69:22:e7:7f:4d:ac:0a:9d:f6:
47:d8:c0:03:38:23:31:da:24:47:aa:45:77:91:eb:00:9e:b1:
f6:4b:d7:19:37:de:bb:a5:8f:66:ae:2a:d4:98:6d:f7:05:09:
cd:a7:d1:1d:cf:59:00:48:98:32:9b:7f:ed:ca:2a:9f:bc:45:
26:ca:52:97:b0:77:00:4e:c1:41:a4:29:a4:24:8f:72:39:32:
df:6d:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:34 2025 by rpki-client