Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: 7urN1haKPR8wl3XNDB7AjnUnXIC/utYIxZXvYAgeB60=
Subject key identifier: FF:A2:5C:53:1D:0C:72:17:A7:82:1E:56:68:9B:AB:3D:2F:11:A2:F1
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 0197B7456856CA9694E2F88C469E8FF051B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 023A
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: eZCuksR+4I+5Peg15l+uuuHdNaAUhSSOrfJbIOy+Mnw=)
2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:68:56:ca:96:94:e2:f8:8c:46:9e:8f:f0:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=ffa25c531d0c7217a7821e56689bab3d2f11a2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:24:9f:8c:a8:54:7e:40:72:4d:cd:fb:fe:
54:6f:49:b2:f8:9b:55:9b:11:e0:1e:6e:d9:66:6a:
e9:86:bc:10:3c:37:4b:4d:3f:19:30:7a:d8:71:b7:
4d:48:e2:a3:33:22:0d:44:1c:ab:22:8b:81:4e:73:
09:ab:98:02:c2:bf:18:b1:ee:eb:55:58:af:5c:df:
19:96:9e:fc:c5:96:95:7b:a1:ce:a8:22:09:02:e1:
07:29:76:c0:6b:0a:41:f2:1e:6b:41:68:b9:4e:22:
51:36:f9:ef:50:9a:90:e6:20:0c:50:f9:e9:aa:6c:
ce:87:2e:b6:01:33:5b:f9:5f:05:b8:a4:a4:86:1c:
59:c1:39:51:17:38:77:d8:4d:5d:eb:c8:76:27:1c:
bb:8a:61:43:5c:5f:e6:f4:be:46:50:b8:5d:37:43:
6a:7f:0e:36:d0:7a:c9:dd:78:e8:9f:45:a6:17:43:
6f:35:74:8c:34:ee:31:7d:cf:1e:c0:b8:bb:92:fd:
e4:32:7d:1b:a0:8d:80:c2:b0:c1:e5:4b:51:ab:37:
d6:66:fd:b1:07:ff:a3:a0:70:5a:c0:fa:fe:ca:ab:
76:a2:54:71:98:73:a7:3f:ae:a1:5d:34:a2:8a:40:
ec:ef:00:ec:b6:7c:2d:b2:cd:89:c5:17:a3:b8:06:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:5C:53:1D:0C:72:17:A7:82:1E:56:68:9B:AB:3D:2F:11:A2:F1
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:81:42:f5:47:ed:57:4c:95:4d:19:61:b7:01:8f:dc:ac:
9b:b1:fb:10:84:52:d2:e1:88:b9:b7:10:7e:ea:05:9c:34:03:
54:e6:de:8f:b6:da:1c:22:4a:62:d4:12:12:e8:29:42:3a:bd:
cc:d2:11:56:db:69:22:f4:a8:4b:fe:f0:a8:72:37:3a:66:bd:
b8:5e:30:2a:88:5c:4f:4f:aa:9e:ef:34:31:9b:96:34:77:49:
2c:f3:72:37:8e:8e:b3:b9:76:ed:eb:35:c8:b9:42:56:66:9b:
43:eb:8a:76:47:68:88:5d:b1:67:52:74:78:9b:b2:a9:a8:2d:
07:4b:76:e0:c0:cc:ae:0d:da:70:69:c1:0e:cd:01:35:cd:15:
41:de:b3:3d:39:fc:31:fa:33:f0:74:2d:6d:ca:3a:a5:30:02:
1d:c0:bb:58:6b:5d:b2:4e:0f:78:07:ca:10:6a:40:8e:1f:c4:
26:33:1e:80:ce:df:73:8b:30:62:ff:00:3c:9d:fe:17:46:44:
28:f5:f5:3e:a3:ff:0e:e5:e2:69:48:ab:b5:8a:c8:8a:54:7e:
76:c3:bb:37:64:8a:ba:46:9c:8e:5d:30:54:37:09:f8:ff:0d:
55:36:c1:38:b1:ec:39:81:05:4a:aa:28:a2:a2:42:4d:e0:c3:
0f:62:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:21 2025 by rpki-client