Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: BZOvDRE/im8QmJ37ztHCqpNl6QYqgV2pAWKd3PTeMxQ=
Subject key identifier: 5F:E7:88:92:8C:4C:D2:3F:1F:2C:55:FA:68:57:17:B1:2D:FB:8D:FB
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 019770AC40882183393E2F956B9509967EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 23:00:26 +0000
Manifest this update: Sat 14 Jun 2025 23:00:26 +0000
Manifest next update: Sun 15 Jun 2025 23:00:26 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: 0GAPT+5Fh5UIaDbBPOBVhBMQYwCG9+sHHkIfhe7ONE8=)
2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:40:88:21:83:39:3e:2f:95:6b:95:09:96:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Jun 14 23:00:26 2025 GMT
Not After : Jun 15 23:00:26 2025 GMT
Subject: CN=5fe788928c4cd23f1f2c55fa685717b12dfb8dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:83:bf:15:5e:ae:fe:ea:2b:c1:ec:33:ef:
06:aa:13:01:e1:bd:29:e3:e6:06:57:d8:2d:df:4b:
24:ab:81:32:73:bb:53:e9:0c:10:f6:ad:73:5b:e7:
58:7f:20:c1:cd:c7:67:c7:0b:e6:5b:7b:40:59:be:
f4:9d:cc:36:d9:58:cb:14:10:48:ad:fb:88:b3:89:
51:c6:77:5f:f6:7b:85:78:c0:39:ca:f6:5b:3b:63:
bb:13:40:14:2a:47:e1:39:ba:c2:e1:ac:c5:70:24:
5f:20:3b:23:f9:aa:94:55:ba:2d:12:60:3d:0d:8b:
aa:d8:d6:5c:4b:fb:3d:6c:33:cf:2c:7d:3f:03:11:
16:d0:b1:6c:26:3f:e1:c7:f6:90:9e:62:eb:82:6b:
52:02:8b:45:0b:f5:2d:5a:25:c6:ee:b6:ea:2f:48:
f4:1b:f8:a3:eb:f3:d7:c2:7f:66:46:9a:fa:f2:d7:
cd:4b:79:0b:7d:d0:0b:c8:83:dc:7d:2d:14:b5:ab:
34:a2:18:ad:7b:64:58:71:8f:79:95:e5:32:df:cd:
48:fd:7d:83:5c:2c:e7:f5:b0:84:a0:44:56:67:42:
ca:57:66:a9:30:70:f0:69:4f:33:81:3b:f2:16:08:
c8:63:a0:ce:69:2a:23:38:c4:47:1c:3c:40:40:05:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E7:88:92:8C:4C:D2:3F:1F:2C:55:FA:68:57:17:B1:2D:FB:8D:FB
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:38:64:85:25:61:4f:39:68:be:40:23:50:5a:47:39:e3:ee:
fe:ea:3c:ab:0d:7b:cc:e6:cc:60:8e:2a:fc:b8:26:1f:cd:9c:
69:52:ec:79:01:bd:8d:6d:a7:06:97:f2:49:b5:15:56:dd:89:
bb:80:9b:ca:5f:12:2c:94:ad:3f:e6:2e:ff:31:97:ad:80:4f:
25:c6:98:7d:41:f3:1f:87:cc:04:39:05:cb:39:d9:1f:ce:df:
57:54:03:e8:27:54:59:7b:b5:6d:f8:2f:a7:f8:82:aa:83:f7:
5e:3c:73:9a:33:02:66:37:d8:cc:58:e7:a5:ee:94:2d:6d:f9:
77:7e:a5:b6:61:9e:d9:3b:63:f0:0a:b0:ac:db:a8:ae:31:bc:
90:ef:f2:c0:39:5c:5f:a4:89:e0:69:c7:95:cf:9e:49:ec:f6:
9e:87:93:2f:9e:b8:b1:90:3d:02:fb:30:32:c8:63:dc:51:bb:
6f:1c:00:71:51:f4:ff:2b:c8:29:eb:14:50:17:8b:d1:51:cf:
2b:7a:58:51:45:91:2f:f4:48:5f:65:93:a9:93:e2:bf:4d:a9:
6c:de:c9:ee:ee:5e:aa:7b:1b:0e:f8:91:8f:cc:21:b3:4a:ca:
0e:a1:ac:dc:ba:8f:1c:c2:e7:9e:4c:fd:25:5b:0e:53:77:a0:
b1:69:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:06:10 2025 by rpki-client