Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier: dUfeUywWAjxGmiz1cpqDlZLv52R1iTS13K3gqn3wQro=
Subject key identifier: D2:E2:24:1A:10:63:BF:C0:AF:60:47:FD:D5:A1:BB:7F:20:25:55:DB
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 01976E508F55D26CE036AFC32881CA6A5C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number: 1450
Signing time: Sat 14 Jun 2025 12:01:02 +0000
Manifest this update: Sat 14 Jun 2025 12:01:02 +0000
Manifest next update: Sun 15 Jun 2025 12:01:02 +0000
Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: 66hfT2mIsSuP9RRe/0js1QxUw7palO3H05ueiPXGY/0=)
2: Eoa2DgYKZQhIPrEs2BVXe4pbre4.roa (hash: Lzu15VnANjg8WWEayf+Lga5VSNyXHu7NEi9f0IPI47U=)
3: N1PB4wkghMthA8l4GP9N1SzOEWE.roa (hash: 8LPlkWhxVtJM+jMtTkRPToXaYbmZ6b57zhGOgt0FEmU=)
4: V7B5ePYrHsO0XNRkMFSzpgb0L6o.roa (hash: mqOCLJjTNfcn+4Yc3m3WAArsC6xNXAO5dY/bAJctVR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:8f:55:d2:6c:e0:36:af:c3:28:81:ca:6a:5c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Jun 14 12:01:02 2025 GMT
Not After : Jun 15 12:01:02 2025 GMT
Subject: CN=d2e2241a1063bfc0af6047fdd5a1bb7f202555db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:90:e4:33:a3:c9:a3:91:2a:8f:b2:41:21:97:
38:53:9f:0d:01:a8:d8:4f:82:0f:09:f4:77:d4:2a:
93:44:6d:db:d0:a2:73:2b:47:d2:40:73:b5:e5:ea:
03:7c:0c:90:ca:5e:10:1d:3c:da:d7:3a:59:f3:8e:
f2:a9:a3:49:b6:39:b9:f5:d0:63:99:12:22:0b:7d:
4b:8f:d3:73:89:98:30:58:6c:29:df:5c:6d:02:00:
35:bd:09:b6:f9:39:76:f7:07:fe:42:37:a1:e2:6a:
54:ef:8b:4d:22:f9:a5:16:ff:02:06:1e:9c:f8:b7:
80:11:48:ac:18:b0:4d:b4:2b:e5:7c:b5:e9:01:bd:
71:d7:62:22:6c:fa:f0:9c:40:99:dc:70:6f:5f:56:
e6:b0:83:91:a2:04:30:ac:7f:90:f5:45:68:96:db:
77:8a:09:26:26:7b:bf:f1:67:8c:97:b8:b6:2b:dc:
fc:fb:a8:18:48:80:85:a1:37:af:1d:a3:9c:ab:ad:
82:0a:e9:f6:80:b4:c6:9f:98:24:d8:e4:1a:c5:e9:
09:e8:01:6d:4d:d4:bb:b8:ca:39:e5:7c:6f:17:77:
52:53:33:39:ef:3e:1e:0d:aa:95:94:db:60:7e:8c:
19:7c:64:f1:66:40:9f:30:2e:b7:f1:99:77:16:fe:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E2:24:1A:10:63:BF:C0:AF:60:47:FD:D5:A1:BB:7F:20:25:55:DB
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fd:dc:51:04:b4:53:bc:5c:61:bd:1c:76:cd:68:6f:29:61:
12:51:75:2c:f0:ee:d9:df:f4:42:61:34:47:d7:94:fa:c6:39:
b4:25:6a:84:74:b3:8d:a6:9c:d3:ed:7b:2f:ce:fd:1d:4a:8e:
3e:ec:65:8e:67:0c:2d:38:e0:65:48:1e:df:53:4b:b1:7d:57:
9b:0b:0e:fd:f9:14:3e:92:01:01:96:e8:17:a2:65:f8:ce:fd:
f7:eb:6e:f4:98:21:35:64:5d:ec:4c:20:ba:0c:35:b8:16:16:
73:e8:9d:8e:24:9a:a2:cf:2b:38:e5:ee:a4:54:a0:02:41:44:
23:d5:95:bb:a4:aa:ff:27:75:1d:d7:d6:f6:24:33:4f:c6:72:
36:7e:cf:34:b4:a0:4b:06:8b:e4:61:be:2f:d7:04:17:44:15:
cb:af:7e:a0:b8:81:26:82:0e:b7:f9:03:0d:1b:fb:6b:ec:c1:
b5:12:a5:cb:d5:fe:60:6b:39:2e:6f:a7:47:f1:57:5f:ad:c1:
e8:9f:e7:03:db:22:03:01:d1:5a:46:de:26:f9:9f:d8:63:c4:
53:38:7f:c0:a0:25:f8:3b:4f:ad:f8:57:af:72:83:0c:a4:73:
28:29:c7:44:cd:36:80:86:3b:12:cb:c9:9f:e2:8f:00:7a:5f:
03:cb:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:51 2025 by rpki-client