Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: YVQ1mwoPZYdNU+aw9UctqmjFRYtxbvdeDU+PIjq6bv0=
Subject key identifier: F5:EA:7A:F8:2B:DC:EB:4D:F9:41:19:1C:4D:3D:EA:8E:44:33:96:32
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 01978EEE2937371AE068D246B93DED3F2D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 09A5
Signing time: Fri 20 Jun 2025 20:01:02 +0000
Manifest this update: Fri 20 Jun 2025 20:01:02 +0000
Manifest next update: Sat 21 Jun 2025 20:01:02 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: s7SPUDHxLDlOjnsuDna1UK+ZnaESX4Aqoq6iODpJ2ig=)
2: PdXLVimBA8zILWLashg1LUqBqm8.roa (hash: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:ee:29:37:37:1a:e0:68:d2:46:b9:3d:ed:3f:2d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Jun 20 20:01:02 2025 GMT
Not After : Jun 21 20:01:02 2025 GMT
Subject: CN=f5ea7af82bdceb4df941191c4d3dea8e44339632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:e8:30:d6:a5:e6:93:8c:b4:f6:70:ca:da:
8b:29:09:d2:99:92:90:a0:2b:1d:b3:aa:c8:01:c3:
07:ea:59:68:e3:84:e6:2e:9a:41:23:03:a9:17:e3:
98:1c:82:fe:0d:9c:38:6d:13:06:ca:56:ba:37:c4:
96:2f:00:c6:21:b2:4e:bc:b8:2e:98:89:77:3e:c3:
51:df:5e:91:a6:24:12:31:b5:47:aa:1e:f5:34:10:
83:4b:1b:15:92:16:e4:63:3e:03:5b:3d:b1:cd:eb:
4d:99:e9:f4:e1:e1:f8:ed:8a:a6:7d:d8:9b:35:00:
d1:fc:15:29:19:c0:c1:a3:28:3f:4e:45:8e:7e:02:
90:b7:23:47:39:b4:3f:8c:8b:56:3c:cf:0a:aa:64:
b6:63:f8:31:df:cc:2c:0c:8b:d7:10:56:67:48:da:
2f:52:56:5c:5e:2c:2b:b2:33:76:2e:11:69:53:69:
2f:7f:be:9c:82:02:ae:34:2a:17:75:ee:7e:bb:c9:
8e:a7:dd:25:0a:25:97:92:de:38:35:a5:c6:96:2e:
d9:4b:2a:df:67:5f:d5:e4:c5:7b:33:59:47:6c:c1:
c0:90:c9:7b:ca:5b:ea:fe:a4:b4:87:23:4a:47:6a:
ab:26:42:7b:f0:7b:03:b5:a1:ec:4e:7b:f4:1d:63:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EA:7A:F8:2B:DC:EB:4D:F9:41:19:1C:4D:3D:EA:8E:44:33:96:32
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f6:3b:99:cd:65:6d:76:ea:99:43:e3:49:28:03:05:de:cb:
f9:59:a5:cb:a2:0d:10:63:21:a0:97:94:4e:02:2e:10:d5:19:
2c:f3:17:d4:a3:b1:db:10:80:37:df:2e:b7:e6:ae:37:80:33:
7f:9f:07:8f:aa:3d:3e:f0:7f:80:29:13:aa:e2:ef:75:11:6e:
3b:db:81:c7:49:ab:3e:10:bf:4a:62:10:e8:6a:ea:38:38:d4:
d8:8c:d5:72:b2:22:dc:35:36:f7:78:ae:cd:05:ab:98:78:d0:
bb:e5:62:09:a5:6d:55:a2:b4:2a:06:a6:0a:76:0b:4b:6b:e7:
d6:26:8f:1e:a1:db:d0:f4:94:d4:16:39:5a:e6:68:b9:3c:be:
81:5e:d7:6a:88:43:0d:9e:4e:47:59:2f:6e:e3:6f:49:96:c9:
07:c1:93:79:d2:d2:7d:e4:4c:04:f0:9c:86:77:74:85:7f:0f:
e1:b0:1c:60:e7:6d:c0:80:bf:29:21:8e:d4:28:57:8f:ea:3e:
de:89:f8:41:00:47:74:fd:34:36:43:e5:de:4a:a1:b5:81:52:
c4:ef:01:92:2d:9a:c5:34:80:a0:4d:9a:ee:b5:29:68:ab:5b:
e7:6e:e9:c2:42:c0:86:56:a7:18:58:04:c3:0b:c5:7a:c0:df:
c0:23:17:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:01:26 2025 by rpki-client