Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: EoNmugISFFNZLtQ73r9aD3zrfVyECmiQVDqfwJ0Lp0Q=
Subject key identifier: BA:CA:5A:5D:D8:E2:BB:45:EC:CD:3D:32:26:86:AB:EA:06:61:3F:5D
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 01976C625A80378C8A488E65A600136B82FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0D0A
Signing time: Sat 14 Jun 2025 03:01:14 +0000
Manifest this update: Sat 14 Jun 2025 03:01:14 +0000
Manifest next update: Sun 15 Jun 2025 03:01:14 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: i8nSAeiBYTEfb9mPKzRSnjFWJKvfyIgH+wI9aMOwK7U=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:5a:80:37:8c:8a:48:8e:65:a6:00:13:6b:82:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Jun 14 03:01:14 2025 GMT
Not After : Jun 15 03:01:14 2025 GMT
Subject: CN=baca5a5dd8e2bb45eccd3d322686abea06613f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:68:2a:0b:9d:5f:1e:3f:bf:4e:f4:7a:eb:28:
e6:69:01:a6:37:4b:c8:80:0f:8e:d0:be:7d:2e:66:
cb:1b:64:e3:ea:f2:63:98:18:8b:cb:02:ec:df:29:
e2:dc:64:e6:21:3a:8c:4e:70:d1:5c:55:e1:d8:10:
10:cd:1f:4a:fd:4b:91:f9:c4:f7:b4:14:de:7d:a6:
63:0a:96:6d:5d:08:b2:fd:46:c3:8e:c6:fb:c0:72:
2a:f1:15:4e:37:2e:cd:eb:2c:cf:df:ee:32:77:a4:
3d:bd:96:ed:06:56:e2:b9:f5:07:c7:4a:5b:ed:40:
f9:16:85:d4:c3:49:98:29:8b:5f:1a:60:1a:b3:08:
58:44:e2:cf:8d:ae:63:81:f3:62:08:61:1d:fd:12:
af:34:74:6a:7c:69:a4:1b:ac:7c:82:3e:f4:7b:0f:
5a:42:c7:84:87:d1:22:57:c5:30:59:7c:55:44:d0:
c7:14:f2:aa:cd:76:fc:f2:05:c9:f8:ac:ca:f7:30:
bf:63:67:3a:42:46:a3:fe:9a:8d:b9:7b:80:cf:2f:
d1:0f:e0:56:2f:1b:68:e5:89:19:ad:6a:0b:a7:58:
6f:42:6a:a6:98:ba:10:0a:b7:e6:22:20:9e:95:a5:
40:3e:26:53:57:2c:46:70:1c:d3:bc:c0:c9:39:f0:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:5A:5D:D8:E2:BB:45:EC:CD:3D:32:26:86:AB:EA:06:61:3F:5D
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:71:59:c5:91:ac:06:d5:0b:aa:b8:f1:da:3c:4a:26:cf:9c:
f9:48:a2:27:f5:91:c0:12:18:57:0b:8c:85:8f:52:70:b1:91:
fb:49:94:c3:9e:f7:1e:8a:5d:25:6d:98:4c:47:f1:29:1a:6d:
10:f3:eb:7e:b3:83:13:99:41:72:76:4a:c1:7a:eb:8f:12:f4:
2c:7f:b9:5d:e2:6f:b6:25:1a:9e:0e:ea:64:2c:50:b4:29:bb:
d1:70:5b:c6:9d:1a:63:74:36:9e:0f:a4:13:a3:d0:a7:04:fe:
ff:a9:36:2c:ef:70:24:5d:8f:84:6b:a1:82:af:cf:b5:e5:c8:
7c:b3:f2:d2:f0:59:b6:c2:fa:d3:ac:aa:ff:ef:37:0d:2f:3e:
84:09:19:02:1d:7c:d4:24:d3:7c:42:37:de:85:d8:38:0b:83:
d1:71:b2:4e:cd:28:6a:05:e8:0c:9f:3a:1c:8c:40:39:fb:7f:
1b:60:4e:a4:94:9d:24:30:e1:c8:99:c3:2f:f9:7b:c2:33:46:
1d:b0:b7:a6:22:f3:0d:88:3a:b3:6b:b3:7a:d2:07:43:c6:81:
b0:ef:b9:32:a6:ff:f8:71:1e:e4:85:32:d7:2f:73:20:2e:84:
df:70:40:59:09:24:3e:d3:5b:1e:50:0c:67:5c:27:7f:93:d3:
6a:84:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:01:46 2025 by rpki-client