Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
File: 0SO41GITRmfsap0eFU5cfwWWZiw.mft (raw, json)
Hash identifier: 4ZJGnk9EGqkQfzdicVK46wssmDfXA8QX+B+zJ0lNapw=
Subject key identifier: 89:82:C3:0C:9F:D0:79:2A:98:78:4F:58:E7:CD:FD:37:E6:44:7D:73
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Certificate issuer: /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial: 0197B70EA51B3696E016C5A0F1DF5CC44DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: 0SO41GITRmfsap0eFU5cfwWWZiw.crl (hash: ZOUCLzxTNJ0lg568V8PvR+Okrs/kvYBtl2Oz1EEdwNo=)
2: ydYjDF75mH7bfqoCwNzPOqna2dk.roa (hash: sywFQUytXwSuvYG2++Bqw/RDZKafPOlycszuwNNtgdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a5:1b:36:96:e0:16:c5:a0:f1:df:5c:c4:4d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=8982c30c9fd0792a98784f58e7cdfd37e6447d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:a4:13:04:16:68:cf:1f:8b:6e:d7:b9:a8:
ef:38:e2:fa:97:7f:c6:83:a4:14:ad:d3:ef:a9:d7:
4c:2f:37:6c:c4:19:3c:c7:19:cb:92:fc:d8:f8:17:
4d:aa:05:be:b4:12:b3:a9:91:2d:1b:2b:c1:92:5c:
95:7f:a0:57:ff:e3:63:17:a1:60:4c:2b:90:dc:7e:
54:e6:8e:de:f4:26:ef:1c:45:01:1d:8d:d0:57:cf:
d1:11:d5:df:7b:e5:b8:89:7d:82:fc:d6:9b:e0:1b:
fb:43:0f:78:1e:29:a0:ba:ed:ec:f1:ed:06:00:58:
7d:7b:90:1a:5b:70:e9:8e:02:d5:8e:4b:ab:be:c8:
50:8d:3d:be:16:e0:61:52:02:dd:f3:ee:b8:26:17:
5c:89:58:26:ad:0f:57:c2:f4:fc:2a:3f:f0:2e:be:
3d:02:18:d9:37:d1:91:5e:0b:4b:09:94:61:c5:e1:
79:44:12:7d:f4:d1:a2:15:94:ea:e0:38:61:14:82:
93:7a:f2:46:bb:ad:a2:7c:c1:6f:20:f3:72:34:3f:
5d:48:93:e0:c1:5b:d7:a5:b9:bb:76:b7:28:d4:23:
2c:c7:c9:ed:8f:3a:d0:1d:81:f1:06:26:0a:b2:bb:
61:e3:20:d9:2e:ed:46:c7:fe:0a:86:56:e0:46:5d:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:C3:0C:9F:D0:79:2A:98:78:4F:58:E7:CD:FD:37:E6:44:7D:73
X509v3 Authority Key Identifier:
keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:30:c1:6f:d4:a3:8b:53:ba:d2:a3:02:27:29:3b:ec:5c:ef:
7e:24:7b:e2:7e:56:34:94:42:9b:a1:f2:7b:68:2e:eb:6e:04:
eb:49:99:e9:ae:bd:c1:60:a9:6b:81:40:a2:4f:c5:55:b7:c7:
9b:ae:23:9a:09:26:2c:54:49:49:d1:17:6b:50:38:30:37:e5:
c4:9d:d9:ab:35:22:9b:96:14:cf:6a:0d:28:fe:8d:b4:01:dd:
70:e1:5c:04:be:6b:bc:58:ea:03:dc:01:6f:37:03:d8:31:d2:
29:0c:c7:58:6e:cd:c2:ec:fd:dc:da:54:a0:5c:d9:7e:a2:74:
c7:44:d8:e8:45:74:08:90:58:b4:35:4a:1b:d7:2a:5c:99:5c:
28:6b:67:49:0f:fc:a7:06:e0:63:62:28:5c:07:5c:56:19:c7:
20:6a:58:88:36:84:5e:03:d2:2f:c4:36:9b:c5:5b:da:8b:8e:
72:15:98:30:05:03:bd:8d:21:64:f9:97:c2:5d:56:64:57:ef:
7c:73:87:19:49:1e:95:0f:9b:e1:b9:33:fd:80:99:fe:aa:b1:
ed:0b:bd:fc:c6:4b:c2:bf:26:54:63:12:66:e2:c3:35:4e:96:
3a:b9:d2:86:83:4e:44:8b:62:2b:9c:fd:ec:df:1f:0e:a6:2b:
ec:ff:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:16 2025 by rpki-client