Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
File: rNbwonJnY07OGVnN2gPOvc5Yp70.mft (raw, json)
Hash identifier: /5fO5jvvpJXEblJ7f8ukadcNkwfdSNzvShnt09Q1oZ0=
Subject key identifier: F2:C9:A7:20:B0:04:86:7D:A7:A6:CD:A9:07:7D:85:FA:73:E4:3A:27
Authority key identifier: AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
Certificate issuer: /CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Certificate serial: 0197B9D922D26F1B60139256C206713057C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
Manifest number: 3D
Signing time: Sun 29 Jun 2025 04:01:44 +0000
Manifest this update: Sun 29 Jun 2025 04:01:44 +0000
Manifest next update: Mon 30 Jun 2025 04:01:44 +0000
Files and hashes: 1: rNbwonJnY07OGVnN2gPOvc5Yp70.crl (hash: K62cWYsq+69CbJnWC5kvWAP7cNh1ITLfhy7eP3aT7u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:22:d2:6f:1b:60:13:92:56:c2:06:71:30:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Validity
Not Before: Jun 29 04:01:44 2025 GMT
Not After : Jun 30 04:01:44 2025 GMT
Subject: CN=f2c9a720b004867da7a6cda9077d85fa73e43a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:78:f5:c9:d9:4e:4f:e2:53:9d:13:1c:62:
c6:9b:8c:cc:bc:b3:07:a5:79:50:d3:f0:53:07:09:
b8:6a:05:45:df:55:6f:d3:1d:34:d1:8d:6b:ad:b1:
fa:64:40:fb:57:b7:65:b7:ad:dd:ea:a2:3e:fa:af:
38:35:ac:89:7e:1d:ed:d0:d6:97:5f:bf:e7:2c:32:
96:d5:c4:14:27:14:e6:2a:ec:fc:28:c1:7e:33:0c:
10:b7:c8:8b:36:39:55:a7:7e:74:ac:a3:1c:c8:95:
2a:c5:12:0e:30:de:36:cc:0b:1b:42:ea:10:30:14:
3b:a9:98:1c:3b:77:90:62:ce:a7:93:e1:eb:e3:45:
26:06:f6:da:2d:58:6b:45:35:78:1b:30:d4:2f:dc:
16:6a:7d:0a:98:2b:45:91:70:ad:cd:bf:89:04:a3:
21:f0:ea:86:45:68:b0:f8:35:13:1a:a9:64:a8:39:
d3:36:ec:5a:d3:d6:35:ca:d8:80:0b:f1:9d:55:25:
41:3f:c6:20:75:b9:d0:c7:22:eb:0b:80:6a:4b:fd:
a1:0d:5b:9e:c0:e9:61:a2:ff:4c:6d:b8:09:b7:bc:
80:eb:c4:b6:8b:da:74:16:10:63:c6:df:78:54:f0:
02:b5:fd:71:3d:26:f7:65:2c:bb:a9:17:06:59:cd:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C9:A7:20:B0:04:86:7D:A7:A6:CD:A9:07:7D:85:FA:73:E4:3A:27
X509v3 Authority Key Identifier:
keyid:AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dc:b1:dd:6d:f0:36:17:10:f2:2e:68:f1:69:a8:54:51:05:
21:48:8a:5b:c4:0f:0d:d4:d0:67:99:6e:05:1e:1f:41:78:66:
0c:ac:4f:ee:4d:c1:32:a9:a9:68:98:20:56:ab:7a:60:e7:71:
48:1f:30:1f:d3:1d:e8:e6:ab:f3:71:59:e1:7d:13:76:77:86:
2f:c2:38:aa:db:c1:0b:44:b7:88:d5:97:9d:9a:2d:2c:53:fc:
95:53:04:c7:d8:e2:4f:f7:91:3e:af:4f:a4:ad:b9:f9:20:b2:
c4:2c:79:5e:19:d0:7c:37:86:ba:f2:ea:d5:18:24:18:06:3b:
f7:9d:ee:87:7d:85:a3:02:a8:d2:78:7b:8e:eb:b3:fb:66:ca:
f5:47:bb:a3:79:98:58:46:bb:52:88:aa:54:70:28:69:8b:f6:
79:79:c6:dd:3f:70:ba:57:20:95:99:89:7d:05:7b:e4:71:22:
bb:62:14:73:a5:1a:6e:0f:55:f4:17:01:d6:67:5a:ff:51:59:
76:1a:36:fb:b6:bb:8f:c4:19:a7:e8:87:e1:01:ef:0f:00:53:
7f:ca:01:91:d9:4a:e2:d5:fe:f0:7f:74:b3:98:b5:bf:38:2a:
1d:da:33:73:90:ee:21:d4:9e:88:b8:b7:90:4b:31:ef:56:0e:
03:52:af:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:41:07 2025 by rpki-client