Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: Kt/wWZXC1/F80eJZz8VdzOLU7pUYw+lImQq/VzqN5kg=
Subject key identifier: 99:F4:96:D4:69:3A:B5:12:7F:E2:52:FF:EC:6A:83:3A:E4:0D:5B:99
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019769976FC793250B64FFDFF8ECAB123FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 02BC
Signing time: Fri 13 Jun 2025 14:00:21 +0000
Manifest this update: Fri 13 Jun 2025 14:00:21 +0000
Manifest next update: Sat 14 Jun 2025 14:00:21 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: elrwcNniFP/V2Zk3ebII76WHOYng/VcqK131SOv4YDA=)
2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:6f:c7:93:25:0b:64:ff:df:f8:ec:ab:12:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Jun 13 14:00:21 2025 GMT
Not After : Jun 14 14:00:21 2025 GMT
Subject: CN=99f496d4693ab5127fe252ffec6a833ae40d5b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:db:c5:b8:b0:4a:9b:27:a5:da:13:f4:b8:
05:63:37:53:8b:24:27:4f:f5:89:be:29:ba:76:4b:
3d:4b:e3:14:9c:06:cf:86:fb:3c:c6:f6:58:1f:f7:
dd:0d:23:2c:0e:92:f3:0e:ab:16:3b:e8:78:d3:ae:
49:8c:81:b5:12:ce:b7:95:19:5f:7b:80:39:4e:f4:
af:da:d3:6c:58:23:54:3c:77:1c:ec:fd:a3:b7:dc:
fc:d7:68:f6:f6:f0:0c:90:fd:ed:61:17:9e:aa:f7:
10:27:b4:25:bf:af:18:fd:f9:2c:55:8a:cd:f1:f8:
9c:00:cc:e0:3f:3b:54:6b:97:63:ae:59:2f:51:2c:
df:d5:7e:15:ed:bc:0d:03:82:55:71:03:ea:ec:a1:
c6:73:3b:dc:5b:e6:c7:37:60:91:e0:bc:87:75:2a:
1f:39:a0:74:05:8f:f2:6f:2c:e1:e6:b2:87:8b:17:
b1:ab:83:d6:4a:b6:0b:60:5e:f1:8a:a2:bf:f6:e8:
75:e7:5a:c2:20:26:4b:2a:82:1c:78:b3:90:ad:54:
b2:5a:93:e0:47:a3:6e:49:7e:1c:e8:52:a6:85:d9:
27:3d:b2:dc:8e:54:b9:ab:9e:cd:7a:30:fd:23:ee:
b7:1c:5c:c9:03:2d:53:b2:0e:7a:c7:7e:c5:d5:72:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F4:96:D4:69:3A:B5:12:7F:E2:52:FF:EC:6A:83:3A:E4:0D:5B:99
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:63:f9:0e:b2:af:51:90:c6:1a:87:91:79:44:c4:ca:bc:39:
f3:7c:ff:b7:1a:b7:81:12:a8:4e:6b:3d:70:1a:24:63:9f:d1:
07:da:f4:9a:f8:ef:da:c7:aa:0d:46:27:cb:3a:b3:72:5c:c5:
3a:81:9f:e1:4a:78:b7:2b:de:d4:3c:0a:0d:97:20:5b:c7:47:
26:7b:3d:ed:a2:39:70:9a:bd:7e:fa:07:bd:4a:ef:d5:c7:e1:
6e:06:c4:00:96:14:10:08:ff:34:37:c4:a1:38:93:d8:18:18:
00:60:3a:de:d0:d3:01:b0:ac:75:58:a9:4a:4d:c3:6d:4b:3b:
26:e3:84:b3:f0:d3:47:e8:73:f7:e3:a3:0b:05:19:23:c9:a8:
bb:6b:14:c2:eb:ec:a9:b5:95:3e:9e:a1:a8:0f:2b:71:1a:32:
4c:33:7e:d4:75:09:84:d6:c4:ab:3c:ac:ee:bb:75:64:e7:61:
52:bd:6f:dc:f8:1b:b2:da:3e:40:ae:c5:c5:cc:87:5a:b4:ff:
57:6d:40:74:5e:93:de:27:64:e0:82:71:df:fa:01:5a:9f:83:
a5:e6:5b:34:9c:0d:8b:12:d5:d6:95:2b:3a:d0:36:f4:d1:7b:
2d:57:bc:fd:b7:6e:e6:14:d2:c7:ab:1f:51:39:72:21:a5:90:
28:ae:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:28 2025 by rpki-client