Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
File: 0SO41GITRmfsap0eFU5cfwWWZiw.mft (raw, json)
Hash identifier: 7Gj6hL095dG8xjMFjZ+z9AsasooTc40SQh2Xj2tV8sc=
Subject key identifier: 75:85:D3:93:7B:E2:A0:CD:94:2D:58:D5:22:56:7E:6B:F7:70:C9:5E
Authority key identifier: D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
Certificate issuer: /CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Certificate serial: 01976F9A2BA94550CA1C62021EB8CDF0C7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 18:01:04 +0000
Manifest this update: Sat 14 Jun 2025 18:01:04 +0000
Manifest next update: Sun 15 Jun 2025 18:01:04 +0000
Files and hashes: 1: 0SO41GITRmfsap0eFU5cfwWWZiw.crl (hash: kNxAybdegvDBcUJoEbE1y0W/sfgQdICT9gseeSDi5Z0=)
2: ydYjDF75mH7bfqoCwNzPOqna2dk.roa (hash: sywFQUytXwSuvYG2++Bqw/RDZKafPOlycszuwNNtgdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:2b:a9:45:50:ca:1c:62:02:1e:b8:cd:f0:c7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d123b8d462134667ec6a9d1e154e5c7f0596662c
Validity
Not Before: Jun 14 18:01:04 2025 GMT
Not After : Jun 15 18:01:04 2025 GMT
Subject: CN=7585d3937be2a0cd942d58d522567e6bf770c95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:8e:a4:2d:7e:21:a5:10:4b:e8:62:ac:b0:
c7:4f:48:3d:e4:eb:48:f6:5c:03:0e:77:50:a5:ae:
ac:4e:6f:aa:77:b9:a8:0c:bb:83:39:3e:bb:a5:54:
f8:6f:6b:ce:d6:0f:af:85:1e:3a:16:f4:d0:c2:f1:
17:39:90:a9:39:08:57:02:64:8e:12:a7:c9:b1:4c:
1d:37:0f:f3:4d:99:7e:61:ba:17:fe:4d:c8:2e:61:
9b:e8:fb:cc:88:26:cd:82:c8:82:b7:80:59:f6:30:
3a:a5:90:54:d9:0d:a2:70:00:08:ec:ca:d1:a8:81:
12:2c:05:5c:17:5d:cf:75:d6:2a:7b:50:98:5e:92:
bc:c6:fa:54:dc:3c:5b:9f:fb:3e:a5:bd:cf:61:0d:
2b:0a:f5:ef:79:b5:6c:cc:b1:36:10:be:81:ec:aa:
37:25:b0:71:db:3c:a4:79:a9:19:42:97:77:06:3b:
22:f2:6b:14:0b:d9:85:67:5c:f4:0c:6c:98:2f:8b:
12:25:af:92:68:d7:69:ce:0d:b2:5f:7d:ba:a6:0d:
08:53:52:14:9a:cc:a7:05:70:97:59:41:ae:fd:4f:
eb:cf:de:ad:09:cc:fe:e6:0c:71:ce:b6:ea:ad:06:
21:9b:0a:38:41:f3:90:e5:7f:35:f6:6b:e4:89:fc:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:85:D3:93:7B:E2:A0:CD:94:2D:58:D5:22:56:7E:6B:F7:70:C9:5E
X509v3 Authority Key Identifier:
keyid:D1:23:B8:D4:62:13:46:67:EC:6A:9D:1E:15:4E:5C:7F:05:96:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SO41GITRmfsap0eFU5cfwWWZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0d903f-1831-4d03-aab4-81af7c657e05/1/0SO41GITRmfsap0eFU5cfwWWZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ef:f3:54:73:6c:f8:34:82:c0:d8:f1:bc:18:55:cf:c8:90:
0a:bf:51:d5:63:b3:99:84:f2:0b:58:4d:c5:5a:7b:1f:d5:36:
5e:0d:48:aa:11:a8:76:2f:38:ca:ac:5b:b1:f8:0c:78:e3:df:
ca:75:70:ef:1f:8a:23:56:52:94:35:9b:12:8f:34:93:6b:69:
23:78:f9:93:f1:8e:50:45:3a:1e:c5:bf:83:ef:44:3d:84:61:
e3:42:87:29:9a:17:da:20:4e:97:1a:9d:c1:80:35:52:df:90:
63:f6:68:11:18:f0:b8:6e:0f:86:c9:52:83:2f:98:d6:f0:ce:
e5:8d:eb:27:4c:59:cb:ab:93:b9:eb:40:14:9f:9c:4b:2e:27:
dd:f2:97:02:19:e4:27:63:4a:7c:3b:51:47:36:4f:4e:a7:45:
d6:35:d4:1b:88:e9:8a:4f:d5:99:16:34:68:f9:b9:e7:d3:80:
16:16:cb:e0:79:91:27:f7:32:22:cd:48:99:10:05:50:f3:58:
7e:40:47:f4:2e:f1:ce:f5:70:9f:27:84:fe:a6:41:ce:0a:dc:
3a:d1:2f:38:e4:2b:d5:cb:7d:ba:5b:57:b7:a2:44:4b:62:ab:
44:99:aa:c9:0f:c8:7e:8e:15:96:e4:e8:be:a8:ad:66:9e:9a:
c3:a9:5f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:53:40 2025 by rpki-client