Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: VBo6JZ9CGR44EDi4F697X3cOHCApyUrKuIQrQVFmt24=
Subject key identifier: 60:2D:C3:52:BE:73:83:47:88:0A:D0:D8:E0:83:64:23:50:AC:DC:9D
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 019786FD732CF48EA08AC00766106EE6E6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 0291
Signing time: Thu 19 Jun 2025 07:00:46 +0000
Manifest this update: Thu 19 Jun 2025 07:00:46 +0000
Manifest next update: Fri 20 Jun 2025 07:00:46 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: rmUtNyQLsTF1DfqbLvfBGO9xY6Pv1YoGuAHxaPKnpMU=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:fd:73:2c:f4:8e:a0:8a:c0:07:66:10:6e:e6:e6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Jun 19 07:00:46 2025 GMT
Not After : Jun 20 07:00:46 2025 GMT
Subject: CN=602dc352be738347880ad0d8e083642350acdc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:cc:9f:1d:d9:33:33:9b:ca:a8:10:70:39:
f9:02:70:86:0e:71:54:2a:b0:4e:b2:74:10:12:98:
d9:50:0d:a6:85:57:65:c7:15:2a:25:df:e1:81:f3:
77:ff:e5:70:c9:a8:df:d5:1f:df:1a:ac:e8:2f:46:
7b:29:3d:50:7c:c1:9d:03:d7:de:3e:7c:c3:68:e5:
48:c7:a4:e1:38:5f:dd:ea:7a:5d:78:d2:a7:8b:4d:
27:68:d1:48:23:db:83:50:e6:b1:77:bb:7c:b5:7d:
0e:31:f0:6c:ad:19:98:fc:bb:86:c9:08:3c:a8:90:
a7:0f:9c:50:85:5a:05:e4:c6:da:5e:c9:4f:c7:4e:
b2:44:ad:98:2e:c1:1c:8d:d5:94:e3:ab:53:68:38:
34:c4:ac:f8:49:94:9e:27:cc:e7:46:f2:ff:90:b8:
a3:5d:5b:8d:7a:ff:24:b9:ea:5f:73:90:6d:e0:fb:
d0:84:5a:71:c0:b0:a7:cb:64:49:b2:13:18:5f:a2:
e6:f6:41:f9:98:f8:c6:44:af:f4:88:45:4e:81:d1:
d5:54:72:b1:c5:5d:a2:1c:7a:a6:f8:77:1a:c7:4a:
21:95:7a:f0:93:4c:10:f7:ee:21:6f:2a:90:31:e8:
58:89:c3:11:2f:92:b1:d6:f8:1b:24:fe:f2:e2:f3:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2D:C3:52:BE:73:83:47:88:0A:D0:D8:E0:83:64:23:50:AC:DC:9D
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:af:c4:72:8b:b1:14:50:1d:d7:72:2c:41:bd:57:39:94:d0:
56:7d:96:f4:4d:93:fb:ce:bc:21:39:fb:13:25:77:ae:33:59:
c8:90:41:1d:87:8d:fa:cc:a4:f1:ba:68:73:c3:a1:a4:3c:3d:
da:95:09:07:fc:f3:8a:b9:0a:92:8d:d1:86:04:4c:65:ea:ae:
3d:06:7f:34:fd:74:cf:7e:e7:37:df:f4:8c:e4:57:26:78:06:
ed:3b:5c:a6:2e:fe:f5:dc:56:6e:bb:ad:1c:ec:4f:c3:da:ab:
63:fe:44:9d:13:53:29:17:0f:f6:06:be:45:9c:5b:11:b4:f7:
b5:59:cb:47:8f:cd:67:1d:82:34:66:74:d5:ee:56:51:65:13:
a1:33:2a:ef:5a:14:00:68:7e:91:56:4a:09:b9:ee:cb:2a:61:
4e:ff:d3:3b:f8:ee:cc:05:d2:bc:f6:93:b0:23:e4:8f:a0:c8:
75:c7:17:1b:b4:7c:69:86:b4:11:c4:d0:07:25:a4:75:7b:41:
e2:5c:1f:93:f7:29:bb:9e:80:7c:66:6d:cb:e6:52:3a:97:61:
52:bf:b1:ac:78:3e:f7:5e:64:47:bb:30:5d:9b:5f:3f:73:e8:
52:21:4b:a7:2b:59:05:a8:15:ba:6b:51:31:30:03:d3:58:36:
fe:82:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:54:21 2025 by rpki-client