Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
File: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft (raw, json)
Hash identifier: Lu44wNJFWtUNZc1d0RrMCFDpSVge68nVRmoPo77Ox18=
Subject key identifier: 17:14:3B:EB:3F:7F:F9:89:7B:1D:01:10:5F:67:A2:95:BD:AB:38:FD
Authority key identifier: D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
Certificate issuer: /CN=d0c3d358812e60b680e4e11632f139560bf525fb
Certificate serial: 0197684E03B2014B6BAD90602C25408F3396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
Manifest number: 0D13
Signing time: Fri 13 Jun 2025 08:00:32 +0000
Manifest this update: Fri 13 Jun 2025 08:00:32 +0000
Manifest next update: Sat 14 Jun 2025 08:00:32 +0000
Files and hashes: 1: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl (hash: OdCJg8iu9gGMTXg9PxSHJHTFgxkFBBt8MVKWL+6OYOY=)
2: HME8zGcc-HAVtbr4sZdbeNLJU5A.roa (hash: TPPi4et5FVDHl+8Hye2r4DlU6tqPyGa2KXSYWnxyrpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:03:b2:01:4b:6b:ad:90:60:2c:25:40:8f:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0c3d358812e60b680e4e11632f139560bf525fb
Validity
Not Before: Jun 13 08:00:32 2025 GMT
Not After : Jun 14 08:00:32 2025 GMT
Subject: CN=17143beb3f7ff9897b1d01105f67a295bdab38fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:0a:13:c4:34:3a:1f:e8:63:cd:cc:26:e1:
d6:47:54:e6:23:bc:42:b6:c3:35:39:4f:7d:6a:76:
be:36:57:2f:61:9a:5b:4d:03:45:a3:d8:f0:51:0e:
3b:03:03:ad:15:ad:0a:39:de:33:67:35:09:3d:d4:
c9:65:e5:54:3d:66:7d:e0:1d:44:e0:bd:00:84:d2:
20:2c:fd:39:46:e8:fc:ec:4d:15:c2:5e:11:66:53:
22:75:4d:77:12:bf:23:1a:09:8c:51:77:70:69:1a:
7e:3c:e1:d8:c9:9d:16:f9:7b:e6:30:c0:66:52:d6:
05:8f:92:01:82:34:e7:49:5c:91:2b:2e:b4:05:48:
9c:40:7a:57:5d:eb:7f:a4:3d:8c:9c:61:6d:43:28:
cd:fa:03:6c:3e:39:6c:04:2e:8f:c9:88:8b:1f:21:
9d:0c:b2:39:a2:79:58:61:0c:77:27:57:39:29:f3:
45:1b:c8:04:30:a4:0f:68:50:ca:ac:0f:bb:87:d7:
d1:fa:06:f2:87:df:b1:4c:34:fe:d3:f5:40:42:58:
bf:5c:f3:7c:4b:26:06:42:5b:32:02:b1:93:df:d8:
b5:ee:34:d6:83:cd:ca:89:6d:a1:43:67:e9:37:e0:
16:0b:fb:f6:62:a5:68:62:ad:87:18:54:17:ec:08:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:3B:EB:3F:7F:F9:89:7B:1D:01:10:5F:67:A2:95:BD:AB:38:FD
X509v3 Authority Key Identifier:
keyid:D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:36:4c:95:57:e5:9a:4b:b6:63:9a:e0:f7:8f:89:3a:f3:a8:
75:77:37:26:4c:4b:f3:1c:7d:ac:ae:ca:c6:01:97:36:80:34:
6b:fd:25:85:00:7e:5d:b6:16:0e:48:8b:1f:13:1a:62:a8:bc:
1d:32:d7:3e:71:43:a1:f8:4f:ec:16:7c:99:20:40:2f:aa:40:
63:89:75:c8:77:b6:52:60:6b:01:cc:12:c8:82:1a:1c:bd:c6:
c9:c8:4a:16:f0:9f:25:2f:a7:09:f3:09:ba:fb:35:9a:3f:0c:
96:d0:ee:d0:55:6a:64:56:db:29:72:1a:84:e3:08:3a:67:af:
2f:95:80:30:74:d6:26:9d:64:e9:7c:05:83:f6:87:b2:25:66:
4e:81:dd:69:aa:76:fc:6b:81:a5:5e:ac:3b:87:77:98:cd:6c:
cd:0b:67:30:0a:75:e0:08:e4:c9:59:37:a0:6c:9f:ac:e4:8b:
f0:8c:65:f2:fd:61:1d:a7:83:20:40:7c:46:7e:b8:ac:ab:d4:
f1:b5:ac:3b:fa:e0:0d:f3:d5:6c:2b:26:14:84:4d:a8:48:80:
d5:75:f9:7a:d6:71:ca:9a:8c:0c:36:43:84:a5:f0:53:05:a7:
16:90:47:23:66:dc:d2:78:7a:84:b5:20:37:e3:98:4a:a3:0a:
4f:63:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:43 2025 by rpki-client