Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: 2kctdJgerUrP/XtxF6lsjOlyInd3xQKJmRBgbIl1I3k=
Subject key identifier: FF:94:53:72:E4:AF:8B:E7:C3:28:D5:9E:BC:2D:A3:C7:98:3F:0C:A8
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 0197711A723C66ECE02F4CC686E9267E6043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 1229
Signing time: Sun 15 Jun 2025 01:00:47 +0000
Manifest this update: Sun 15 Jun 2025 01:00:47 +0000
Manifest next update: Mon 16 Jun 2025 01:00:47 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: R6co+12dNUVeP+VKCsKZTJ53hD5qs7nrLzLWse/X0EE=)
2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:72:3c:66:ec:e0:2f:4c:c6:86:e9:26:7e:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Jun 15 01:00:47 2025 GMT
Not After : Jun 16 01:00:47 2025 GMT
Subject: CN=ff945372e4af8be7c328d59ebc2da3c7983f0ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:6f:6d:e7:df:c3:7c:19:2b:09:7a:9e:6b:
8f:3c:65:c1:99:f1:41:25:65:41:4e:d1:64:6d:5c:
20:d6:5a:1f:48:17:09:a6:87:3f:25:1c:93:ea:e2:
e8:26:1c:fd:a8:1c:e0:e2:df:e1:82:ba:25:8c:13:
37:0b:8f:6c:c6:73:5b:76:7b:77:34:41:bc:fc:7b:
2e:62:8d:15:c6:bb:af:85:59:9e:10:19:47:4e:88:
af:07:0c:5a:a8:95:bd:2f:e5:69:49:58:52:4d:ba:
70:32:e8:6f:79:fd:92:c0:31:e0:16:41:26:fd:f5:
ee:30:5e:9d:76:eb:34:ef:c8:19:ad:6a:55:b7:0a:
05:aa:00:bd:5b:ba:8a:8a:4f:9c:6e:7c:3a:21:a5:
bf:64:99:b9:aa:d9:4b:85:f5:d7:e5:b0:d2:af:b2:
a7:1a:af:63:93:4a:8f:66:ea:09:f0:e8:d4:fd:19:
5e:cc:a2:09:2d:e6:ce:77:eb:c6:35:c1:17:94:6a:
77:8a:fe:cc:cb:ad:ff:78:dc:4b:fb:ca:b0:5f:4e:
90:a2:9d:37:26:c8:b3:06:a2:79:00:22:bd:c6:29:
71:23:50:c0:1b:db:74:73:dc:8b:fc:5b:15:62:51:
9a:ee:38:de:8b:25:a5:98:70:74:fd:79:66:7e:bc:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:94:53:72:E4:AF:8B:E7:C3:28:D5:9E:BC:2D:A3:C7:98:3F:0C:A8
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fd:b4:b0:b3:48:17:c9:bb:d5:77:e0:42:74:12:36:e8:a5:
02:97:52:50:e7:6f:92:91:7e:18:0d:24:6c:fe:f7:bb:0f:c9:
15:4a:d8:b2:1c:e5:b1:f6:c3:af:40:6e:97:87:6c:3e:48:60:
50:1d:1b:80:9b:28:1a:24:37:fa:8b:fa:ab:e9:45:fb:00:ed:
49:69:aa:83:21:8a:5d:d6:67:55:8a:ac:16:fe:ff:c7:96:5c:
e0:2b:d2:89:3a:f6:db:04:af:ef:b0:60:87:8b:37:2b:c6:3c:
b6:43:6c:7a:0f:7f:e2:b9:66:bd:68:35:b8:3c:a6:1b:32:32:
4f:87:a8:a6:c1:5b:91:bc:2d:77:f6:10:8a:c3:7b:a3:04:20:
f0:db:d7:9b:b0:22:eb:65:89:98:a2:77:92:09:06:e1:9c:5a:
39:b6:cb:fc:54:88:52:7b:45:62:6a:6d:1c:71:5a:00:ca:69:
2a:bc:8d:60:18:a4:23:e3:ab:77:b4:63:d0:ce:53:13:d9:f9:
6a:4c:88:92:5e:66:47:fb:60:90:df:39:44:33:8c:8b:cf:b4:
d5:66:e2:c2:90:df:2b:e1:f6:f7:45:a8:1d:0c:82:f1:d1:b0:
85:93:4f:1e:2f:97:ac:0f:8c:81:35:14:f6:65:0d:01:ce:d6:
00:e4:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:34:35 2025 by rpki-client