Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: eY+F/I1etInat3DEW8KF9WDjBAiTqhIOAhFLt6wSXZY=
Subject key identifier: 0E:4D:31:95:C3:98:D4:D5:DF:13:88:E2:A9:50:C3:13:B8:11:D0:ED
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 01977609E822D4CE1BBE8DDB6C2C8BFE4F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 0549
Signing time: Mon 16 Jun 2025 00:00:50 +0000
Manifest this update: Mon 16 Jun 2025 00:00:50 +0000
Manifest next update: Tue 17 Jun 2025 00:00:50 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: 7+XiQw54kMrjn5R3u6/BofR+qdX+YZ3/UMLslQ3R6p4=)
2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:e8:22:d4:ce:1b:be:8d:db:6c:2c:8b:fe:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Jun 16 00:00:50 2025 GMT
Not After : Jun 17 00:00:50 2025 GMT
Subject: CN=0e4d3195c398d4d5df1388e2a950c313b811d0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:54:ba:2e:93:78:19:16:20:d6:10:24:75:
01:db:8a:eb:bb:09:8b:5e:a4:de:79:c5:09:ec:0f:
e4:85:aa:3a:2d:01:33:fa:d5:ba:a9:19:37:d8:a1:
1e:4f:3c:c8:22:bf:42:67:20:8b:66:c6:ff:f9:11:
3c:48:c6:4e:50:a5:8e:da:d6:23:1d:f0:45:62:b6:
c5:df:32:6c:61:40:75:63:a6:af:50:9f:79:0c:52:
cf:c6:b9:99:a7:04:83:0b:b7:e2:ba:10:57:45:8f:
64:27:08:a7:f7:39:52:ca:71:fe:0d:db:3c:03:75:
33:05:99:b4:5a:5e:81:64:24:7f:3c:e1:4e:b7:2b:
ea:8a:ee:5c:51:c6:45:00:32:17:d8:5f:7d:a5:94:
a5:56:0c:f1:5b:a5:de:08:9c:89:f8:63:d0:ad:06:
fb:3c:f4:00:39:e7:cb:89:eb:ab:3f:d8:33:e2:e7:
51:d8:f3:63:58:38:76:13:28:fd:f6:5e:de:e7:b7:
87:fd:8d:2d:c0:71:78:e4:5d:35:d1:7a:23:45:1c:
e9:c3:f8:6a:60:b6:ef:6b:89:8b:8d:b8:0a:c1:c2:
d5:a9:27:6c:a0:a8:05:ce:2c:73:d9:15:8d:f7:0a:
7f:68:df:f7:e3:dd:a3:72:4f:7a:1a:41:47:4c:bf:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4D:31:95:C3:98:D4:D5:DF:13:88:E2:A9:50:C3:13:B8:11:D0:ED
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:51:92:bf:d3:25:85:16:44:f8:c9:2e:ff:cb:9f:78:bd:7a:
08:f8:be:97:bc:b8:67:45:1b:77:b8:b7:0f:eb:dd:17:71:18:
93:0c:f7:35:0e:a7:c1:91:c9:b3:12:f9:5c:7d:45:d7:6e:d8:
d1:a1:b6:90:e4:e2:ed:d3:b3:09:fd:4e:c4:39:ce:7d:db:7b:
02:ef:6f:6f:ef:28:f1:e2:26:61:7a:dc:2f:35:fe:26:ce:65:
c8:1a:a6:6e:fb:42:52:19:03:76:23:d7:6e:2e:49:5a:ac:c5:
61:05:41:0d:74:4e:ae:cb:03:5f:7e:68:e6:07:08:2c:cb:c8:
37:e5:50:8b:18:d7:23:69:51:10:f8:62:7b:86:ea:6a:fc:71:
8f:d8:b5:b4:45:07:6f:f4:9a:29:94:56:ec:59:44:41:62:7e:
4c:a9:2a:18:b0:26:a8:70:8b:4f:4a:fa:50:07:67:44:35:75:
33:5b:07:3d:48:05:08:b8:a2:44:b3:24:7b:67:d8:fc:62:25:
3c:f6:5c:48:74:ed:09:d9:99:b0:b7:fe:cb:5c:22:39:64:6a:
25:a4:df:e0:c0:9c:61:f0:a1:47:aa:44:af:d0:b4:60:61:1b:
4e:54:39:7e:d7:15:9d:85:8d:f7:a9:bc:9d:48:5a:98:fa:d8:
53:85:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:17:33 2025 by rpki-client