Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: eGLsKp7QYUEiBGIaYXhoPQ7zMwokhnh3htXfdw1BWzU=
Subject key identifier: 1A:F3:6D:B4:52:3C:E3:8E:66:6D:A6:35:9D:85:54:3B:91:47:3E:C1
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 019768F32B7991221CF97874D90789E5D450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 02DB
Signing time: Fri 13 Jun 2025 11:00:56 +0000
Manifest this update: Fri 13 Jun 2025 11:00:56 +0000
Manifest next update: Sat 14 Jun 2025 11:00:56 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: 88yVOMg6WBfN94OzKzH/dFEnTcXNfZgPg8tZup7Ard0=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:2b:79:91:22:1c:f9:78:74:d9:07:89:e5:d4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Jun 13 11:00:56 2025 GMT
Not After : Jun 14 11:00:56 2025 GMT
Subject: CN=1af36db4523ce38e666da6359d85543b91473ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:3b:9d:e7:67:ae:9d:07:e8:75:f8:2d:a7:
3d:63:43:5a:f6:81:67:92:76:20:c9:ae:42:4f:37:
bb:8b:d8:ae:17:f4:b2:a8:06:c8:2d:24:b6:e0:24:
9a:4c:84:8a:8f:6d:b1:7f:9e:18:d8:80:3d:89:bb:
fc:71:1f:b8:6e:d7:b4:f1:61:c8:b0:e4:32:3d:08:
e6:23:89:7a:11:54:e9:86:f4:ad:a8:fd:02:38:3f:
23:64:81:b1:f8:40:8c:e3:8c:72:55:07:5e:b6:f9:
52:d1:66:4c:c6:64:2e:39:57:52:48:3b:2e:97:b2:
16:79:79:dc:b9:df:0a:3c:81:5c:31:00:20:1c:af:
80:0f:0a:13:ed:83:4d:f8:14:23:6f:9f:c9:76:a1:
31:fd:6f:df:e0:bb:7a:0d:6c:3d:28:2d:b7:7a:b2:
35:94:b5:d8:24:c6:a9:db:75:2a:df:8e:22:be:62:
0a:f0:b8:ff:6a:3f:9a:f2:58:92:45:c7:6f:94:ae:
51:0f:82:24:f7:9b:70:a9:a5:57:3e:6a:21:05:c4:
69:ab:6f:f4:bf:ee:92:4d:60:fa:92:95:d3:3f:88:
d8:2e:c3:2c:66:b2:9b:88:e7:4e:24:9e:8e:86:2b:
a8:44:dc:08:9f:7d:5c:b3:bb:df:b3:58:65:93:97:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:6D:B4:52:3C:E3:8E:66:6D:A6:35:9D:85:54:3B:91:47:3E:C1
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8b:45:0a:d6:98:a7:66:03:19:99:41:ff:4f:ed:df:34:cc:
43:cb:1d:28:02:07:b3:d4:84:50:3f:6c:dd:6c:d6:93:ce:95:
7d:a1:c0:48:87:44:76:fa:fe:19:49:5d:75:21:2a:9a:08:df:
af:c2:9a:d3:57:af:ac:11:5b:e3:ab:8e:8a:94:98:6b:ee:71:
49:d0:3f:79:00:13:1c:d9:a0:fe:48:e7:e6:f1:bf:9b:9d:ed:
ba:a5:08:e2:0f:d8:b5:87:7b:7f:77:6d:11:66:95:44:a9:2f:
dc:43:09:fe:3b:4a:d2:af:a5:14:90:ca:c8:b8:c6:af:0c:b1:
0d:c7:6a:10:34:5e:6b:a2:dc:ef:18:c7:c9:b2:47:88:6f:df:
27:28:74:38:65:4c:cc:1e:26:90:9e:89:5f:66:8b:73:95:46:
e4:ba:fa:48:e9:54:c8:dc:8f:a9:15:4a:af:c4:c4:d0:66:25:
82:e7:72:42:73:b9:9a:02:f6:85:78:e9:c7:fa:a9:11:40:21:
cb:73:8a:9a:26:f1:47:03:86:5c:99:5b:c8:e4:d4:49:f1:37:
ba:14:6d:cb:2d:ea:5e:16:84:25:76:ef:72:ee:96:bc:2c:93:
2a:2d:4a:65:fc:57:36:b8:e6:d9:52:a0:c1:d8:08:86:a6:aa:
be:70:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:01 2025 by rpki-client