Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: 1V3vBTiwU4q9zK6egPEohHSXQncNg/vcOgWV5w4ic7o=
Subject key identifier: EF:F4:DB:E7:56:C5:1E:10:8D:3C:AE:3D:A9:4E:27:EC:57:F9:99:C4
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 01976BBD58B5F59BC831721051A012389B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:01:00 +0000
Manifest this update: Sat 14 Jun 2025 00:01:00 +0000
Manifest next update: Sun 15 Jun 2025 00:01:00 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: aAwfGiMlpFkRgYXrpWRBRyTm+bGaFzuyy/9w4TmuFHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:58:b5:f5:9b:c8:31:72:10:51:a0:12:38:9b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Jun 14 00:01:00 2025 GMT
Not After : Jun 15 00:01:00 2025 GMT
Subject: CN=eff4dbe756c51e108d3cae3da94e27ec57f999c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:88:93:df:5a:59:29:da:bc:08:8d:4c:30:
3d:68:89:43:c0:3b:fc:df:44:bd:4d:6c:03:81:8b:
fd:bc:96:98:b5:9d:64:25:6b:85:c2:a6:ee:54:b5:
26:a7:ce:b8:ef:46:22:7d:53:71:f3:b8:50:3d:ee:
a5:99:aa:1d:9c:01:6f:d8:e5:60:7c:a4:43:a7:b5:
b1:89:85:69:1a:95:41:14:2b:b2:6e:80:7c:e1:93:
54:a6:36:ed:81:5e:a5:2e:a0:86:78:e5:8a:d0:da:
9d:55:f1:e2:3b:3f:d6:2e:65:a3:8d:0b:69:60:67:
c5:6a:69:30:ec:ac:4c:6e:8f:89:a6:1a:70:25:96:
d1:49:9c:2d:77:b2:c1:26:6c:c6:0e:01:68:82:d7:
e7:10:bc:ce:d6:db:d2:18:77:ef:67:1b:3c:dd:6e:
55:3d:5e:b8:a0:7b:52:9e:a8:ac:c1:aa:dd:d8:26:
ba:c3:9b:b0:60:b1:0c:8a:55:11:29:ef:5b:9d:85:
cd:83:b0:a9:7d:1f:a2:ed:4c:9b:c0:0f:07:bb:55:
b1:ca:e7:f3:40:03:ab:62:32:e3:e2:09:fd:6b:32:
2f:45:9c:7f:e7:d0:12:eb:c3:21:d2:db:af:44:9e:
77:d2:c1:dc:c2:a9:ea:28:1d:09:4f:a8:a2:f1:bb:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F4:DB:E7:56:C5:1E:10:8D:3C:AE:3D:A9:4E:27:EC:57:F9:99:C4
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:75:2d:54:2b:a4:56:d7:2f:10:2c:f3:b7:93:cb:7b:85:e0:
6a:c0:8d:25:ba:dc:fd:41:9f:54:a2:51:46:76:29:ca:97:c2:
da:f7:1c:ae:ee:ef:26:b4:03:69:03:7c:de:ff:b4:e0:7e:7a:
14:ef:7f:4a:2a:c0:56:1f:d1:90:d9:a9:b2:fc:69:e9:37:e2:
7f:0a:fc:c8:6b:2c:60:33:97:a9:63:5d:62:e5:40:8f:45:b4:
b4:22:65:eb:fe:0e:84:05:d9:31:0e:4a:80:5f:d1:43:27:30:
f5:ce:b2:66:33:db:1b:94:c7:90:be:0c:31:a0:37:33:76:dd:
27:34:26:00:f3:cb:f5:2d:c7:2b:59:27:36:27:88:58:80:81:
44:cf:41:0a:ad:bb:04:83:8a:1f:70:b3:86:35:fc:f9:71:86:
6a:f2:57:08:3f:82:3d:f4:17:06:9c:b8:ef:b3:a4:0f:f3:84:
2e:4f:e2:ae:71:50:ef:a3:46:4f:17:3e:24:2d:82:4d:6c:b1:
e4:87:7c:58:38:a4:07:e4:28:13:6f:1b:bf:80:11:63:36:62:
e8:49:5d:06:c6:a7:4e:c1:e0:49:17:5e:d8:dc:f4:6e:92:87:
74:5f:82:ad:e2:3d:70:09:ea:4c:14:93:d1:aa:6b:b7:48:d0:
92:bc:90:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:48 2025 by rpki-client