Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: mvuJ6jynws9IqVqEp7qw8qJ9AJgbvFYHNTpa2FDzySU=
Subject key identifier: E7:D1:94:6E:3E:46:69:3A:D9:65:B1:9D:58:43:91:CB:A8:75:54:30
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 01976BF45D34B02FF9C8A934D798941AF220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 0213
Signing time: Sat 14 Jun 2025 01:01:06 +0000
Manifest this update: Sat 14 Jun 2025 01:01:06 +0000
Manifest next update: Sun 15 Jun 2025 01:01:06 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: fr+v5TXyZoxT2/wLKEd/exGBkp6m3aM5Yaa5Sa7SSiY=)
2: vwZ3qyY8j7AihfGsWYtA6mwINxQ.roa (hash: VBbCuPYUO8ASQ+6MrnY57WOdr+3+R3PhClJszE/T/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:5d:34:b0:2f:f9:c8:a9:34:d7:98:94:1a:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Jun 14 01:01:06 2025 GMT
Not After : Jun 15 01:01:06 2025 GMT
Subject: CN=e7d1946e3e46693ad965b19d584391cba8755430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:12:e8:fb:98:60:4f:53:3c:10:d4:58:9f:
b9:85:62:da:e6:37:d3:33:3f:ec:f5:45:74:e2:8f:
61:07:85:e2:2c:d6:e9:8d:99:7d:32:3f:d3:ec:07:
56:20:b8:30:88:34:73:5b:ad:ad:41:cd:cc:09:78:
d5:03:f7:c4:15:e2:a4:7a:b8:6d:1e:ed:59:0e:0f:
e2:20:38:dc:4b:68:7f:c3:32:2c:1b:24:91:78:4a:
7e:63:dc:02:57:e4:02:7c:9b:46:45:1e:3b:71:bf:
97:c3:1e:5f:4a:b3:dc:b3:61:4c:00:07:ed:0a:82:
14:09:70:d2:93:d1:ef:2c:46:65:b3:06:56:d1:af:
76:6f:dc:8e:f8:e8:0d:df:3a:97:b8:ad:41:4c:77:
f6:7f:21:bd:c7:1d:e8:cf:dc:4b:d2:26:c4:c0:0c:
69:ba:05:53:65:e1:1f:a5:24:0e:74:a3:d0:72:34:
f9:b6:90:09:f1:22:2d:36:8e:12:c9:a4:69:ff:aa:
61:8e:30:6c:14:d6:78:1c:48:50:5c:6b:ed:35:e2:
f9:e9:57:6b:55:6d:59:d7:5d:c5:0b:46:90:c2:a9:
35:67:a6:39:97:f7:1c:b3:e1:e3:8b:b0:1c:66:63:
aa:71:50:56:34:d5:06:49:1f:df:e6:df:2f:df:57:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D1:94:6E:3E:46:69:3A:D9:65:B1:9D:58:43:91:CB:A8:75:54:30
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a9:1a:40:b6:e3:3c:fe:2a:c0:3c:ff:21:08:24:b6:b9:e6:
12:eb:d7:02:99:79:68:d2:6e:09:db:2f:3b:e4:ad:0a:3f:4b:
c7:09:d9:3b:b8:2c:8a:55:b8:a9:a6:dd:f5:64:53:73:be:1c:
35:ec:4f:8d:4e:8c:60:82:35:c2:9a:8a:3e:4d:e6:d0:b0:e4:
b2:23:6a:70:9e:61:58:e2:3c:57:a9:e8:6c:cc:9c:a4:dc:96:
9f:8e:2b:86:7c:44:a9:f2:03:6b:36:3e:39:2b:78:1a:2f:ae:
ac:63:d3:52:48:3e:cf:ce:03:4d:d8:ca:46:49:7f:d0:e9:c7:
b9:47:7c:83:67:c0:f6:96:92:3e:97:f6:c6:be:17:6e:27:f2:
fa:b4:5b:c3:ef:d0:e4:3d:cb:fc:d2:d8:ad:ee:68:fa:cb:a4:
39:b8:45:8e:b1:2c:39:d6:9d:a6:f5:8d:45:86:46:76:69:64:
01:78:3b:43:94:7e:85:03:5c:13:a7:3d:73:c6:6f:24:34:af:
d7:46:d2:cc:a8:f4:1c:59:80:31:9e:2c:2c:2e:e6:40:cb:f1:
50:c4:57:dd:51:d0:ba:44:11:23:d5:e3:ac:7f:de:50:6e:a0:
34:ec:c6:75:ee:3d:43:58:c7:bd:68:98:dc:6b:3b:28:a0:3e:
83:43:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:37 2025 by rpki-client