Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: Kmq0TqlVFVxhV6zOK+JpafzeHJ/o1pjHtWi5I1okD6c=
Subject key identifier: 27:95:B7:36:3D:C1:3B:3A:E6:7B:6C:13:BF:90:37:D8:48:83:CF:49
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 01976D3DAD690DE56E4ED62990A7F1743235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:00:47 +0000
Manifest this update: Sat 14 Jun 2025 07:00:47 +0000
Manifest next update: Sun 15 Jun 2025 07:00:47 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: ZssQhY8xsECFtKUzjSQK3EhWXjzA0ERQONm5J108uB0=)
2: zKQIfOeURvANDMREU7yI_nE_KFw.roa (hash: rsODojes6psnJwHqpB6iZWFEwYShL6Rps2nkmwoPbsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:ad:69:0d:e5:6e:4e:d6:29:90:a7:f1:74:32:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Jun 14 07:00:47 2025 GMT
Not After : Jun 15 07:00:47 2025 GMT
Subject: CN=2795b7363dc13b3ae67b6c13bf9037d84883cf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:d2:d8:5f:e8:b4:30:44:21:38:82:fe:be:
41:3d:ea:94:9f:26:11:e6:56:77:8f:c8:c2:78:5d:
3f:32:36:36:14:3b:7f:ea:f7:3d:40:03:bf:9f:6b:
b1:19:d2:8d:41:98:0c:7c:26:5f:6c:35:87:dd:a8:
de:7d:e9:58:44:88:20:a8:ef:ad:1c:61:11:2d:22:
75:c2:b1:27:06:e3:8f:0f:bb:a5:97:3d:f2:6d:a6:
5b:70:b4:2c:30:b1:11:2e:fc:8e:bc:fb:9d:5e:95:
25:94:05:4f:dd:7a:03:d4:dd:f0:ad:1f:d9:ae:98:
e6:d7:79:82:ea:34:92:d9:d6:e1:5d:2e:b3:b1:93:
21:c8:a5:b6:cf:37:68:1c:7b:b2:8d:4d:41:87:43:
f2:6a:ae:04:d3:ee:d2:18:52:b4:40:90:79:1f:6e:
79:ce:28:f9:10:f7:3a:37:84:5a:69:ed:c0:c0:86:
26:91:8c:91:83:90:05:17:3e:21:79:46:25:61:9a:
39:03:f5:2b:2b:38:1d:a7:a4:52:06:a5:ed:05:73:
01:1a:d6:fa:da:ae:6a:90:ff:4d:7f:52:38:70:6e:
bb:41:64:f3:44:f3:5f:6e:17:cd:18:f3:1d:fb:cc:
89:2b:e7:ac:e8:ec:12:f7:ac:83:00:4e:34:cb:88:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:95:B7:36:3D:C1:3B:3A:E6:7B:6C:13:BF:90:37:D8:48:83:CF:49
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:82:3c:d3:5f:47:99:8c:4d:18:41:29:e2:67:bc:73:fd:46:
fd:a6:5c:b1:ab:fb:fd:84:94:50:a0:27:51:22:1f:9f:ef:ec:
b4:6f:94:9c:dc:15:ba:99:77:e2:31:e8:e5:65:42:a6:90:3d:
23:8e:3f:f5:5c:4f:51:ff:20:fc:f7:42:d7:1c:9c:53:f0:d1:
3b:e2:c2:21:cc:ff:c4:ee:ab:07:5c:3c:cd:f4:f1:97:8c:85:
e7:c5:49:06:09:97:86:97:5e:ae:8c:61:8b:08:83:e2:36:c6:
d1:b8:00:4c:a1:46:2e:91:23:3b:6b:f0:00:c0:e5:04:af:6e:
16:90:d9:94:ab:ec:ba:1c:a1:f7:89:e9:b6:91:a1:e0:bb:8f:
69:1a:b7:e3:48:4f:fc:56:0c:df:4a:74:c9:dc:b4:bc:ae:2d:
2e:34:d6:9d:31:45:f5:8f:23:3a:4b:af:f4:41:16:7f:eb:69:
f0:4e:0e:4c:cf:07:cd:7f:cf:61:b2:47:8c:e4:a1:0a:11:0f:
57:d9:ab:02:27:bd:3f:10:c2:42:51:cc:48:04:7c:e8:ad:a2:
f1:53:c5:0d:0c:8b:58:bc:bf:37:65:3f:20:c2:74:69:b5:62:
70:f7:50:b4:35:fe:55:63:92:af:c8:74:aa:60:e1:2e:66:49:
03:8f:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:58 2025 by rpki-client