Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: lZ8jP7+s//V4cb9ZLst+qHVjdz5seZjtNYtgo9aGVBc=
Subject key identifier: 3B:8B:C1:49:89:1E:48:E4:32:1E:55:09:F1:8A:8A:C6:03:E8:8B:73
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 0197696164174D2D8889B4E2F2117CF39D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 1123
Signing time: Fri 13 Jun 2025 13:01:19 +0000
Manifest this update: Fri 13 Jun 2025 13:01:19 +0000
Manifest next update: Sat 14 Jun 2025 13:01:19 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: WWsJGJje2nEJCYSUP5nkvNjgt+bMknJaAbL2uITyZzg=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:64:17:4d:2d:88:89:b4:e2:f2:11:7c:f3:9d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Jun 13 13:01:19 2025 GMT
Not After : Jun 14 13:01:19 2025 GMT
Subject: CN=3b8bc149891e48e4321e5509f18a8ac603e88b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:b7:59:fd:64:f1:a0:c3:6f:de:cb:68:79:
c4:84:6f:b0:9f:31:b5:9f:cc:a3:7b:14:00:84:b7:
20:37:46:83:b0:42:1d:db:7c:bd:d2:11:16:f0:5d:
ef:73:9c:4e:b0:f5:a8:d8:83:e7:ca:19:69:9c:69:
ef:9b:e0:95:7a:03:6f:76:66:c4:41:8d:be:53:42:
7a:eb:b9:08:30:e1:71:93:07:56:4c:4d:62:9c:c2:
50:a6:28:2a:87:48:43:e2:e8:70:e8:f0:a5:c9:e3:
33:a5:5a:a8:e2:61:bc:17:da:41:92:df:ba:20:b5:
57:1f:38:45:38:2c:e1:d5:a3:24:b4:56:51:fe:a4:
e3:8e:53:b6:60:d5:ef:ee:01:48:26:34:62:83:2d:
cb:4d:6c:45:84:b5:14:b7:1f:e0:aa:df:10:b4:9f:
79:93:47:95:d1:56:f5:3e:89:08:0a:60:c0:e8:f7:
45:e7:de:e1:05:57:86:b4:fd:6b:24:7b:87:69:d9:
f6:1d:13:e7:c7:89:0e:ff:0b:1b:79:2c:24:8e:f8:
ad:fa:b3:49:fc:78:c9:4d:53:02:53:40:0c:70:88:
da:8e:de:31:0c:68:e2:ca:84:93:47:ab:ac:3a:c8:
98:88:6f:4e:dd:dc:12:63:6d:01:84:d5:fb:8d:36:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:C1:49:89:1E:48:E4:32:1E:55:09:F1:8A:8A:C6:03:E8:8B:73
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4e:8f:e0:d7:0a:00:f9:95:f5:46:ea:17:5c:cf:c6:7e:f2:
38:c1:d8:d8:7a:3a:c2:6b:39:22:00:2b:e6:7a:42:05:b2:c0:
6e:66:25:eb:b5:33:d3:80:be:3c:5f:ef:d3:65:63:25:2b:8a:
da:61:df:9f:86:3c:19:bb:12:9d:c8:89:fe:16:68:a5:cf:d3:
03:71:52:c2:69:1f:a6:bc:2b:e0:00:fe:4b:75:30:fa:dc:a5:
8f:84:b9:f6:1e:db:51:c3:fd:4d:a6:4d:c5:48:81:40:74:b3:
c4:41:04:33:49:18:c5:e2:48:29:cb:33:b6:45:ae:a3:d8:5c:
43:96:64:bc:b0:f3:f9:da:ab:77:c4:da:b9:6e:69:5d:58:12:
85:52:7b:f6:b4:67:85:eb:51:21:b4:d9:26:39:9d:c2:67:d0:
27:a2:fa:59:47:fa:f4:c2:78:cd:38:0e:90:76:d7:68:1e:a5:
c2:29:f0:50:e5:1c:54:94:51:49:17:4c:5c:81:d9:c6:76:b9:
9e:95:fe:61:be:47:f3:84:84:e9:a3:7c:87:ec:9d:e4:a6:24:
35:44:d6:29:db:fb:8a:40:72:ce:0c:13:88:c6:aa:91:25:ad:
7c:2c:85:0c:6c:a1:be:6b:60:51:71:6c:06:27:c5:9a:5a:40:
e7:9c:76:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:06 2025 by rpki-client