Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: MdFJOqMdc2khS0Y3lPS3qqNLwCH9b5pzP4MuvsO4PXA=
Subject key identifier: D0:61:71:8D:2D:E5:BD:FD:97:76:4B:B9:0E:7F:6A:22:BE:73:CF:3B
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 01976C2A8FF2F39DE93835B510DE3CB116CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0501
Signing time: Sat 14 Jun 2025 02:00:17 +0000
Manifest this update: Sat 14 Jun 2025 02:00:17 +0000
Manifest next update: Sun 15 Jun 2025 02:00:17 +0000
Files and hashes: 1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: Ph4u1r0CLm2qJ9eiw0Zfbpj70PhqYHBRSor2Z9lPX+U=)
2: qj9pJEL6aLQRmJQwwNdSHRT6Q7o.roa (hash: YXXU3MHXgJerIl9CeLyHeV8Hu3RdrFxQkf90wVwUCHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:8f:f2:f3:9d:e9:38:35:b5:10:de:3c:b1:16:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Jun 14 02:00:17 2025 GMT
Not After : Jun 15 02:00:17 2025 GMT
Subject: CN=d061718d2de5bdfd97764bb90e7f6a22be73cf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:51:d3:22:03:66:b3:c7:ce:1b:ff:fa:d7:0a:
8f:cd:e3:e1:75:4b:d6:a7:30:38:52:1a:e7:75:bc:
c2:c9:19:4a:a6:2b:50:31:76:5e:74:ca:56:e3:84:
59:10:8e:43:ba:d3:bd:57:c4:35:2a:6f:22:81:26:
7a:3e:3f:c5:7c:a0:d4:b4:d2:fe:07:96:cf:d7:1e:
63:84:6c:39:5a:23:17:a7:b2:29:a5:90:ab:11:42:
55:ec:61:9d:76:d8:58:2d:6d:77:0d:c6:e5:31:6e:
ca:d9:85:c4:53:f5:6f:68:2f:44:6b:b3:e5:8b:79:
9b:93:6f:d4:f6:57:4f:90:d5:9a:de:ea:8d:de:fc:
f0:ae:5a:8d:e8:8e:c5:6e:0f:55:3e:2f:40:39:9d:
ce:4a:e9:16:47:b2:61:3e:98:4a:71:0f:0c:66:b1:
e5:2a:a6:b4:a7:af:2e:a1:0f:c1:86:4f:bc:26:45:
8b:43:f6:23:22:ff:e2:55:2d:cc:27:f3:f1:59:96:
c6:a3:c1:72:5e:c0:7c:ab:46:f5:be:7e:76:e9:2d:
8d:24:85:40:49:15:96:77:19:8b:84:11:0f:8f:53:
ec:dd:13:31:1c:23:ef:46:b8:2e:1c:fa:f6:a7:dd:
da:22:8c:ac:e7:90:f9:be:26:e7:f0:9f:c9:1e:50:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:61:71:8D:2D:E5:BD:FD:97:76:4B:B9:0E:7F:6A:22:BE:73:CF:3B
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4b:9d:b5:2b:c0:02:cc:4f:7e:87:e0:2b:d8:a7:ff:d7:40:
0b:a2:cb:f2:30:98:1c:8f:86:a9:5f:51:e8:80:d1:17:6c:d6:
88:06:fa:92:21:4b:5e:18:5e:81:32:fa:6e:a2:8b:da:60:fb:
f7:b0:0e:0d:c8:d0:cb:85:58:e6:68:be:8d:3c:91:3f:54:0c:
f7:4f:7f:ce:36:e0:58:f4:82:c6:ce:e5:a3:ec:d0:8e:16:14:
d0:1e:e3:06:5d:9d:84:c9:11:61:ab:7c:36:42:e7:47:b4:f4:
23:69:21:2d:73:b0:55:af:88:fa:fc:f0:8c:29:e0:ad:71:85:
c8:2e:f4:97:4a:72:99:11:ea:c3:1e:58:8e:8a:f7:33:d4:92:
c7:48:f9:b7:d9:7c:39:09:cc:65:af:ab:fb:13:e4:2c:99:0b:
0b:ff:44:3a:4a:83:8b:66:43:9e:e4:c2:77:20:7f:93:f7:78:
a4:c8:96:d2:0d:f5:ee:3d:20:e9:43:dd:9e:5f:8e:8c:29:5b:
8b:b1:04:01:25:45:41:77:e5:8d:6c:e2:fc:b5:50:db:85:e9:
a3:94:26:0e:eb:47:7e:5a:de:18:82:aa:19:f2:4c:a6:53:9b:
9a:bf:d8:61:13:4a:e7:10:ae:d7:b8:79:eb:51:77:0b:4b:4a:
aa:20:e2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:12:17 2025 by rpki-client