Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier: KL/3TqbNZqeN/UKrt7aXJQ10qz0U6SWFu1aBwpp030M=
Subject key identifier: C5:0E:B9:6C:7C:63:B0:06:F9:92:E8:54:82:1A:2B:69:C9:CD:9F:9E
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 019786FD348BCE4FD6DEAB8AC6EACA5CF591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 07:00:30 +0000
Manifest this update: Thu 19 Jun 2025 07:00:30 +0000
Manifest next update: Fri 20 Jun 2025 07:00:30 +0000
Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: swRK6qOEXXjRK9+uhaMpofwzHOQUQzLukuwgVIOlnKc=)
2: 2LgtOWneA5YvGT4_RnemdJk10ZI.roa (hash: i3ijgdJkTo+0tXZivrTiqDYQJFUVEZ40sKvM/03kC6k=)
3: BKyeRj9qftx8WGEdxVWFVc1273A.roa (hash: nhVWVpplcnh6PS/kPe42Tn4vpV4Cv/wcOxTwDykaiQM=)
4: NyrZFNY0uejKVVI5JPC7FPtdUjc.roa (hash: F1z0p2TvKAcesacsMKTiWmQh7lfOeilS7Yll9HRgTgE=)
5: ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa (hash: M3TtUoEAKZLP5h7xNaBXjv6fTWKL5P7QGAapCue/jYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:fd:34:8b:ce:4f:d6:de:ab:8a:c6:ea:ca:5c:f5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Jun 19 07:00:30 2025 GMT
Not After : Jun 20 07:00:30 2025 GMT
Subject: CN=c50eb96c7c63b006f992e854821a2b69c9cd9f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:c6:af:f6:1e:a1:1c:76:88:a9:4c:2c:66:
d3:28:48:40:2a:df:b0:44:98:2b:48:02:fb:2c:e9:
46:09:e1:45:44:68:d6:43:35:f0:fe:fa:5c:83:99:
41:e6:4b:23:3c:cc:48:70:e7:2a:8f:81:00:4c:50:
cf:a7:5c:39:22:67:41:d3:fd:6a:78:d1:3a:ad:d8:
2e:11:f1:0f:e3:f3:1a:38:91:1f:dd:15:1e:3c:98:
fa:40:bf:c4:cd:77:e9:a8:69:eb:77:a9:ae:78:7a:
61:23:84:6c:72:3e:6f:33:1b:a5:4d:75:5f:ca:88:
0c:c1:db:77:9d:a0:4f:0c:e7:dc:69:6d:45:29:05:
41:e3:d1:da:15:08:a1:4f:a6:14:88:a9:65:7a:d6:
d1:7b:71:4d:0f:d2:ae:ac:ae:a7:fd:b2:25:6b:06:
09:48:ad:24:55:f3:1b:a6:7d:f6:10:36:25:92:b1:
79:6f:a4:24:65:41:ad:06:f3:bd:53:4f:b2:f1:93:
42:f5:39:c6:f2:eb:f5:82:86:65:12:92:3a:b4:e2:
f8:ff:01:32:4a:dd:75:44:fb:6b:83:c5:cb:dc:aa:
77:21:2c:1e:ea:33:44:90:a8:56:5c:4f:92:36:a4:
48:57:ab:69:e0:83:77:7d:a4:8a:92:c0:61:af:14:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:B9:6C:7C:63:B0:06:F9:92:E8:54:82:1A:2B:69:C9:CD:9F:9E
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:85:be:bd:94:14:b6:5f:5f:11:29:fd:d2:6e:59:d5:99:0d:
96:d1:99:5c:6f:12:3c:f7:4a:f2:b4:68:7a:7d:37:b4:c2:64:
84:a8:b2:57:20:74:50:ee:1b:b3:28:57:70:13:9b:1c:94:bc:
00:ba:d7:a4:f6:13:65:38:be:68:0d:05:e8:75:8b:56:ca:2b:
0d:dd:f9:fb:66:77:79:4b:e6:70:e9:a0:94:a5:75:55:49:ab:
9d:2f:ce:b4:01:ab:1a:e9:4e:dd:c5:71:74:26:df:f1:97:77:
a3:66:98:07:ae:71:5d:9c:74:58:f7:ec:54:7f:1c:07:0a:7a:
99:7f:e1:fb:66:60:a8:a2:33:ea:40:ce:19:86:9e:96:91:f3:
18:07:8f:5d:a7:24:70:e9:09:12:98:19:cd:1d:52:8f:46:49:
54:3e:cb:82:a6:3e:60:99:d3:da:0d:72:c5:c5:92:34:79:55:
d3:cf:f6:65:d6:63:86:1a:50:a3:d9:d3:3f:bb:22:43:6d:4e:
77:f8:65:32:91:9c:f4:1a:59:19:27:1a:c6:55:e2:3e:ea:d4:
e9:cf:1a:06:a1:8a:30:9a:6a:46:5c:dc:fc:24:6d:08:24:33:
62:db:96:1d:3b:36:e9:a7:ec:63:f5:13:7e:bb:e1:de:ab:7d:
e8:d4:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:03:41 2025 by rpki-client