Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: MqIEEE23YDB1qXTI091QgdGh7/SSlmvPWlW3LcVGQG0=
Subject key identifier: EB:C5:7F:0A:73:21:A0:6D:AF:64:5B:97:13:F6:9F:82:E0:A4:ED:C5
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 01976C6220C814A44BBCA3714F32310AF3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 03:00:59 +0000
Manifest this update: Sat 14 Jun 2025 03:00:59 +0000
Manifest next update: Sun 15 Jun 2025 03:00:59 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: Vk5OEjzsiOJ3wDNo3NkU1WBFoUN+iUQfkq6PirUng8k=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:20:c8:14:a4:4b:bc:a3:71:4f:32:31:0a:f3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Jun 14 03:00:59 2025 GMT
Not After : Jun 15 03:00:59 2025 GMT
Subject: CN=ebc57f0a7321a06daf645b9713f69f82e0a4edc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:69:76:bf:e4:dc:6b:98:e5:da:b9:3d:58:
0a:76:b1:c3:1e:34:5c:52:96:d5:a9:dd:eb:04:01:
ca:15:dd:95:f1:47:ff:8a:2a:cf:00:62:7b:6f:2c:
f2:2c:d3:c4:dd:2a:65:31:49:79:be:37:5d:49:57:
4b:13:51:36:1f:43:f9:ba:1b:5a:54:10:4a:5b:b3:
e3:7e:a8:86:72:d3:3c:2b:1e:c4:5b:4c:74:e4:9d:
3e:8a:81:c5:ff:20:d0:3a:99:4e:32:22:8a:2b:06:
82:7a:4c:05:f4:a5:1a:58:69:ce:92:ce:05:c1:c9:
0d:84:30:26:8d:d4:5c:44:ef:e1:a0:1d:d9:74:d4:
32:c9:0e:0a:4a:7f:ff:06:63:6e:81:49:0d:e8:4e:
21:f2:bf:f3:12:6e:9b:eb:2b:33:de:4e:cf:7f:f4:
8e:32:c9:f9:6c:df:88:00:0e:8c:45:72:17:27:c5:
e7:19:7a:ad:ed:02:71:ed:6c:d1:71:43:71:45:31:
be:94:6f:08:2e:82:c6:3c:ce:68:cc:c3:c8:18:4a:
ec:3c:03:0b:53:08:80:bd:d1:15:a2:af:97:70:8f:
77:c7:ac:36:65:1c:07:ee:a5:f2:af:5a:29:b4:07:
77:a2:c8:46:85:64:86:ab:e5:b1:5c:95:30:d9:b5:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:7F:0A:73:21:A0:6D:AF:64:5B:97:13:F6:9F:82:E0:A4:ED:C5
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:14:d3:c7:e8:1d:7c:02:b7:2d:14:bd:4a:b8:9b:cb:63:5d:
2c:e2:41:d7:fd:b6:c3:f3:c5:6f:be:dd:c5:26:73:6a:cc:26:
1e:32:a3:bc:72:07:c8:9d:48:6e:f9:c0:05:5f:3e:f4:df:db:
21:24:b3:aa:a7:ee:00:5e:ce:76:4a:b2:34:bd:9a:6f:eb:f1:
af:74:53:ea:18:4f:58:f2:c5:fb:f4:6b:4e:bb:46:7a:04:8a:
e4:c7:ca:7b:14:89:e8:d3:34:10:16:d4:32:ad:24:e2:13:05:
df:fa:c9:f3:25:25:45:9f:43:01:df:e3:1a:34:5a:75:30:f2:
44:51:92:c9:8d:b4:2b:36:f4:6a:20:c0:b9:13:7f:e5:43:46:
82:6e:5b:f2:be:66:d6:f2:1d:83:44:aa:5f:6f:28:eb:f5:75:
2b:ab:20:b9:39:52:fd:a7:80:5a:c0:13:21:7d:ab:e0:e7:68:
f7:2d:aa:55:13:fd:d9:58:24:37:e0:e3:98:89:57:87:1f:98:
b8:9c:e4:ad:b6:77:9f:5b:c2:3f:a0:ee:e8:0a:c0:81:82:d2:
95:fc:7c:d4:e5:fc:1e:9f:9a:0b:84:b7:2a:02:00:67:3a:10:
d5:1d:4f:58:a0:52:1f:98:b3:d1:86:e9:55:b6:cf:01:b5:67:
73:11:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:53 2025 by rpki-client