Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: z5AgzGw1V9fHkCJ7g3716HRjUFLs+bI5GqC9CtlouNw=
Subject key identifier: 6A:8B:16:68:12:8C:1D:3B:57:86:A2:D4:B6:DC:31:AD:44:D0:95:D8
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 01976997ADF5D670E97B31BD868E51CD2CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 14:00:37 +0000
Manifest this update: Fri 13 Jun 2025 14:00:37 +0000
Manifest next update: Sat 14 Jun 2025 14:00:37 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: u+1Ynz8s7+iJV7S5qmMu75L7ORQ55i3rzQkAFwiaxBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:ad:f5:d6:70:e9:7b:31:bd:86:8e:51:cd:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Jun 13 14:00:37 2025 GMT
Not After : Jun 14 14:00:37 2025 GMT
Subject: CN=6a8b1668128c1d3b5786a2d4b6dc31ad44d095d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:a1:13:cd:40:1d:e9:08:b8:fd:37:94:07:
d4:31:fe:52:8e:7d:67:80:f5:b7:6d:b2:78:9b:93:
3e:73:44:98:34:2c:58:43:5c:93:db:d9:c6:e8:3d:
7b:46:15:7b:90:e1:18:2a:11:9e:18:c9:03:5f:95:
61:72:da:79:b8:82:85:9b:68:dd:b7:18:40:8c:85:
33:b8:a7:6a:48:74:42:7c:c0:b6:e2:84:10:a7:10:
7b:ee:da:5a:e0:6b:77:6c:12:1a:28:5e:d8:eb:5c:
30:11:d9:d5:e6:6e:26:8f:42:09:0f:0e:3c:35:a7:
e9:58:43:c1:3b:04:01:ad:c5:37:72:04:0f:b6:33:
7c:b1:b8:a5:70:b3:ae:90:ab:3f:aa:c9:96:19:be:
12:49:8b:7d:92:4e:08:75:8c:51:68:3e:52:f6:ff:
d4:db:7b:40:4a:c6:e4:a8:d5:98:d5:7c:0c:86:19:
76:0f:b0:76:dd:8d:b8:10:a4:9f:24:7f:18:7d:1b:
f2:6c:09:a8:f5:39:67:60:4f:77:e2:ea:69:90:89:
35:a8:a3:c3:a6:7d:cb:cc:9e:94:15:d5:c0:95:52:
cf:4b:61:0a:6e:3a:6e:e0:bf:22:9c:12:34:c7:50:
ef:6d:fa:83:79:24:bc:5d:73:d5:ef:43:36:44:a0:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8B:16:68:12:8C:1D:3B:57:86:A2:D4:B6:DC:31:AD:44:D0:95:D8
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:71:57:65:da:e5:e2:e7:44:41:a1:11:1e:0b:d6:a5:de:59:
b9:80:97:e7:ae:5a:be:c7:06:f2:2e:52:ea:d0:ef:f5:79:87:
4b:ae:36:69:3e:65:1f:85:a3:11:1c:a8:cb:60:96:16:3b:16:
79:7d:eb:22:72:88:46:6c:96:79:88:6e:55:a4:da:f9:fa:db:
bb:44:f8:87:52:fc:c4:d8:90:6b:16:74:23:fe:a8:a5:11:74:
b4:4b:39:88:a4:f0:04:e2:9c:4a:ae:e6:e9:36:6a:6d:a4:26:
41:93:d4:ed:0b:35:96:cf:9f:02:cb:7d:27:2d:e6:fb:0b:b2:
77:61:a2:4e:1e:15:03:0c:74:76:ce:91:ca:e4:f7:ce:4c:aa:
cf:b6:5c:d5:bd:e8:b8:bc:4e:16:1f:4e:a1:2d:37:76:58:e5:
0e:b8:5a:5f:d8:be:a5:e6:11:ce:96:ec:53:6b:a1:d3:1d:9e:
ed:bd:b5:35:16:4a:c1:6d:db:0b:3d:49:ec:e9:50:6e:ab:ae:
e6:3a:02:99:e4:74:81:49:61:59:ab:f1:78:1e:44:4f:29:08:
3e:d2:b1:f9:50:cf:b0:52:94:6e:3b:c5:6a:fc:4f:01:36:9c:
d6:fe:bf:12:d9:3d:c5:91:92:87:b8:de:9b:24:26:88:b2:19:
5e:1b:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:53 2025 by rpki-client