Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: ykRY7INAYA3+7pA3/QM0RBU0bkLuDGw1EU2VcOrFmoo=
Subject key identifier: 33:17:D0:D8:51:C6:EA:49:74:5E:DC:DD:0E:28:FB:5A:3F:B8:C6:C0
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019781A040094FF31973DCE4564B83CB2445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1085
Signing time: Wed 18 Jun 2025 06:00:52 +0000
Manifest this update: Wed 18 Jun 2025 06:00:52 +0000
Manifest next update: Thu 19 Jun 2025 06:00:52 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: 6+BQS2tG24OrpyAIdDxvICVuVGl0DgbqZUgUhEeRyUU=)
2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:a0:40:09:4f:f3:19:73:dc:e4:56:4b:83:cb:24:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Jun 18 06:00:52 2025 GMT
Not After : Jun 19 06:00:52 2025 GMT
Subject: CN=3317d0d851c6ea49745edcdd0e28fb5a3fb8c6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:ef:e8:7d:3b:c8:d4:39:b1:c7:1e:8f:b9:
98:1a:0f:c7:b4:b6:56:4d:75:b7:f7:a4:6b:50:72:
de:a8:43:84:6c:b2:46:5b:86:56:1d:4b:90:9f:31:
bb:cd:5a:a5:6b:37:bf:6d:91:d5:64:36:f8:46:da:
b7:0b:6e:89:d0:3a:67:d4:3c:7c:fe:e2:41:f5:3d:
9b:0a:4b:25:bd:fa:bc:ea:d0:9c:59:1c:2d:36:69:
c5:43:d3:39:b3:48:34:a4:05:e9:87:17:2a:f7:bf:
10:7d:3b:91:21:a1:ce:6a:01:1e:c2:75:94:c6:06:
41:a5:88:74:b5:e7:d5:a7:d8:29:01:29:1c:25:4c:
c0:b8:cc:fd:5c:3a:86:01:0e:43:86:9d:81:bf:0e:
9c:02:15:89:22:d9:d1:d0:7e:07:97:f3:22:6b:97:
9c:2b:22:f2:11:27:22:dc:f1:ce:59:3c:84:f6:d8:
45:3a:13:2b:5e:5c:98:1a:99:75:64:83:c9:ab:2c:
9b:84:de:bd:33:1b:eb:e8:64:c6:be:05:53:e5:33:
cc:51:16:d2:f2:62:4f:ab:e1:a8:12:f4:1b:97:df:
73:b0:d8:c1:5a:0c:5a:5e:38:66:44:8b:0f:d7:6a:
f9:c1:94:ae:9c:2c:27:8a:6f:4c:f7:d3:eb:dd:ce:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:D0:D8:51:C6:EA:49:74:5E:DC:DD:0E:28:FB:5A:3F:B8:C6:C0
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4b:25:fe:58:69:26:9e:ea:b5:00:70:2e:b0:53:68:4e:65:
27:49:66:9a:e7:28:64:46:e8:68:63:26:60:46:4d:70:12:69:
b2:32:3b:14:b2:3a:51:c1:34:26:ac:e8:e9:75:e6:e4:ee:7c:
b5:1a:c7:57:cc:19:e8:06:6e:52:9c:7b:71:7f:67:fd:f1:40:
e9:28:fb:4c:66:51:d0:48:da:a4:83:c0:99:66:18:26:ba:96:
f6:9a:5e:46:36:a1:7b:6d:1c:c5:a7:e9:1b:0d:72:0a:d4:de:
52:d3:de:46:2c:08:62:59:23:8f:ad:1d:c8:90:53:30:cc:14:
8e:a5:5d:6c:37:89:9e:fc:32:82:7f:e1:05:09:c6:a1:b5:d7:
13:f8:40:93:f2:be:68:c3:f7:1d:2d:3c:e2:75:03:a3:53:97:
09:49:65:c0:fc:b2:db:d3:76:0d:b9:cb:f3:66:69:4f:55:00:
1e:4e:9f:3e:92:46:ad:53:bf:c3:8e:12:c2:0f:39:ff:49:73:
ce:8f:67:46:7e:52:d1:81:63:ca:c0:b9:10:2f:40:e3:a0:10:
94:d9:8e:18:a3:16:7f:68:69:ac:d0:66:af:6e:29:82:92:af:
04:23:9a:e4:b9:4a:40:ab:00:65:b9:74:17:6a:51:df:5c:74:
64:c5:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:51:40 2025 by rpki-client