Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: sNapu3nSmAUaEi1KYywpUeGvcuUMNDiE023t/bxD3zM=
Subject key identifier: 0F:5D:D0:51:1D:53:91:5C:0C:2A:9D:65:F8:4B:14:EB:63:69:9D:B3
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 01976EBDD30CE8BA19747F12B656BCA55EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0D1D
Signing time: Sat 14 Jun 2025 14:00:23 +0000
Manifest this update: Sat 14 Jun 2025 14:00:23 +0000
Manifest next update: Sun 15 Jun 2025 14:00:23 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: H+NgJ6vXwjfwMvC3Be6ezPxGgug1D+wdD7lzIR9a7kQ=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:d3:0c:e8:ba:19:74:7f:12:b6:56:bc:a5:5e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Jun 14 14:00:23 2025 GMT
Not After : Jun 15 14:00:23 2025 GMT
Subject: CN=0f5dd0511d53915c0c2a9d65f84b14eb63699db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f3:60:cf:f5:80:54:34:cd:4b:d7:78:ea:a3:
8e:ce:69:1f:8c:dd:26:ea:0e:ba:f4:60:14:ef:a7:
e8:1f:66:d1:da:12:51:28:31:c9:2d:a1:f9:04:5a:
11:ad:99:98:15:b1:ed:6d:d9:c1:74:4c:fb:8b:f0:
ae:be:ee:44:82:df:45:f9:a9:be:ba:c8:58:87:12:
e6:7c:d7:83:c2:ed:57:67:8e:87:b7:ba:c3:5f:ec:
b6:38:4e:07:42:78:79:c7:2b:88:ec:c9:06:bf:5d:
6e:44:0d:74:99:fb:f3:96:03:2f:76:3c:4c:b7:ff:
c0:7c:80:e0:30:f3:92:30:14:ee:20:91:e9:09:55:
2d:0f:bc:09:73:9e:08:31:7b:62:b6:d4:2b:47:74:
7a:e6:04:39:4e:cc:03:9b:72:e3:b9:23:06:95:ba:
df:ba:9c:62:07:d4:07:ad:ba:b9:b1:db:af:f5:53:
e5:3e:9f:35:89:96:a5:98:bd:e9:b6:c1:fb:28:c9:
8e:31:01:4c:6f:f3:c2:2b:3a:66:e2:e3:04:92:08:
70:3f:41:21:af:cc:a0:38:1a:80:41:69:61:c6:e3:
cc:7d:b2:a9:94:1e:8d:7a:47:64:06:19:4a:0c:a0:
82:38:5d:8c:65:78:51:3d:18:bd:03:10:12:31:04:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5D:D0:51:1D:53:91:5C:0C:2A:9D:65:F8:4B:14:EB:63:69:9D:B3
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:58:07:64:81:61:44:f2:9c:bb:82:a4:12:92:6b:1b:bd:
b4:a7:97:b4:64:b1:74:87:c2:f7:8a:25:5e:8d:d9:25:3f:ad:
7d:67:ee:73:d7:49:d9:f8:92:a1:32:92:9e:fa:60:65:32:d9:
89:83:64:ce:0c:27:06:f5:56:df:18:c4:48:5a:5b:7d:1c:4c:
e3:02:5e:35:81:be:ce:fa:90:97:e4:37:af:e9:61:cb:47:53:
48:e7:76:98:d1:b3:c5:c6:56:c5:c9:37:15:23:7f:29:38:ea:
b2:6e:92:7e:e3:d1:79:49:6d:87:b3:86:ff:0c:6a:42:ac:fd:
c9:74:4c:d3:ca:e4:bb:a2:55:b7:0c:2f:f4:33:06:92:9a:a8:
cd:9d:6c:fa:9c:6d:1d:18:e1:93:ac:4e:e3:47:02:88:82:4b:
fe:1e:96:89:ad:b8:01:8f:62:49:11:f8:50:f2:ac:a4:30:02:
5b:28:0f:5b:97:d5:15:ff:f5:ea:15:59:db:42:77:77:43:c0:
b0:f7:4d:79:38:81:6a:0b:ae:a6:24:b4:a0:0d:1d:48:98:5e:
d3:19:1e:92:56:94:6f:24:4d:98:60:00:b6:d2:03:38:4f:8a:
25:ac:1d:4a:4d:69:4c:a7:b8:bb:1d:e0:91:92:50:05:28:9a:
ef:0a:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:33:43 2025 by rpki-client