Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier: Jf6yypfOZE7oXz/aIBvJ65HHIO1XyTteiaOFLRcb49k=
Subject key identifier: 5F:94:9C:C8:F9:5B:32:9A:59:DF:21:65:C8:A7:92:D4:65:F4:1E:86
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 01987BD25ED17123BB59D75FDD56FCFE4E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number: 1144
Signing time: Tue 05 Aug 2025 20:00:41 +0000
Manifest this update: Tue 05 Aug 2025 20:00:41 +0000
Manifest next update: Wed 06 Aug 2025 20:00:41 +0000
Files and hashes: 1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: oyNYh7Nw+4pl/WOTYcpfyeDIuTMSmUh9buoQEyEbO5I=)
2: SAF1KbjuvZdI9BSVM80ADIZ6zn0.roa (hash: wfp9L/QbKQTs8wDMXGcfyHh9p8y5+4/kclZuUrsUs5I=)
3: jOqd2wJBuE3wT3pRawlL9knhjV8.roa (hash: pvOd4te8ScnLLx0JwvYK3xwrNCWYubvf6Z+FLbM/DCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:5e:d1:71:23:bb:59:d7:5f:dd:56:fc:fe:4e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Aug 5 20:00:41 2025 GMT
Not After : Aug 6 20:00:41 2025 GMT
Subject: CN=5f949cc8f95b329a59df2165c8a792d465f41e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:90:6a:c7:fd:58:a6:9b:8b:3d:01:34:1d:
72:49:8c:32:e4:40:1c:8c:41:7e:6a:2b:30:8f:a8:
01:0a:46:ee:c8:f5:d5:57:6a:49:b9:f1:2e:ae:96:
50:1a:1b:9a:06:15:d6:e6:1e:33:f0:93:29:29:24:
16:66:28:f6:b3:79:29:7b:40:44:ee:9b:45:76:0e:
2f:e8:6a:21:21:d1:40:a9:9b:a6:1c:22:ca:23:6d:
ab:e6:56:94:4f:ca:c8:f1:1b:46:c6:21:72:de:34:
01:59:20:37:a0:cd:99:93:4b:3a:32:91:a8:72:42:
c6:f5:fd:94:8d:b4:08:ca:b3:62:5a:12:14:77:d0:
1b:86:8c:bf:35:65:cf:e2:57:ff:39:9d:49:02:b7:
97:c8:80:27:4a:06:4a:54:e0:a1:a3:01:64:b4:bb:
30:78:b5:f6:33:68:08:f5:12:ec:c6:aa:ce:d0:22:
b2:29:fc:ae:89:4e:9c:3f:4c:a5:c7:01:b7:72:90:
ad:ef:0e:0f:b3:59:56:da:80:85:44:be:4a:bd:9e:
f4:50:6c:50:27:bc:8f:2c:cf:58:58:82:6b:05:c3:
c5:f7:a4:87:58:8d:c8:e3:59:36:67:49:1c:0f:11:
c6:55:e4:23:7c:fa:b3:6c:67:de:7d:38:e6:7d:ff:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:9C:C8:F9:5B:32:9A:59:DF:21:65:C8:A7:92:D4:65:F4:1E:86
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ba:79:50:24:23:ef:96:ce:a3:f5:cf:03:b7:f6:49:aa:82:
d5:fe:94:ee:34:ff:d5:95:d0:1c:e1:d3:1f:78:cb:67:88:a4:
98:c2:6f:f5:57:ce:77:ca:0b:a7:d0:61:1a:a6:95:12:ea:94:
b6:68:19:2e:4e:0b:57:27:30:f6:9e:d6:ad:dc:e9:d6:4e:3c:
70:05:75:3e:16:b3:05:21:78:c8:ec:67:ef:62:5f:73:3e:d7:
97:7b:1e:f7:ae:3e:d6:9b:9c:2b:f5:0d:c6:b8:12:41:33:b0:
14:68:49:6b:b4:9a:4f:45:e8:5d:77:b2:27:71:78:5e:dc:21:
74:5b:44:e5:32:63:79:bc:63:72:b5:12:19:e2:f2:6f:61:f1:
4b:41:40:98:b6:bb:6b:ae:e5:0e:07:d7:c8:6e:dd:9a:71:e4:
d1:39:77:0c:fa:4d:69:a5:98:fe:d1:6f:19:8e:58:5d:d5:c8:
3c:2b:42:84:b5:71:cb:2a:ee:eb:41:a4:1e:f6:c4:36:ac:11:
07:90:e8:d0:ca:43:d6:34:b4:62:60:c7:b4:31:ba:e0:de:61:
fc:00:f0:08:95:89:ae:0b:aa:53:ce:d9:db:72:ec:0e:87:10:
56:97:db:7d:60:41:13:28:9e:48:e1:2b:3e:2d:12:d4:0e:50:
13:f3:45:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:06 2025 by rpki-client