Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: 4BTJWnN84icseP1Zq1hjQyfhDb8t0dSCR0uxLp9q9Zw=
Subject key identifier: F8:F8:78:29:AB:3C:E1:E6:6E:A1:70:B0:FF:A2:80:8A:66:EE:6C:51
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 0197B6A0ED5AB07CF13517305433C25DE2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 09C1
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: Bpbxud/U4iO5N2fnsn6mYnGUyZ6D7UQTl4RR9HMHMZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ed:5a:b0:7c:f1:35:17:30:54:33:c2:5d:e2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=f8f87829ab3ce1e66ea170b0ffa2808a66ee6c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:47:d4:7f:87:2d:5c:1d:18:f0:3a:9b:eb:
31:3a:bc:29:1a:d0:12:9e:54:dc:80:d7:c4:1f:e2:
c2:7e:c4:ed:6e:87:80:92:91:60:66:0c:5c:7d:53:
ce:da:b3:34:41:78:9a:16:18:81:be:07:58:64:a1:
fe:ce:e5:5d:70:e9:21:d4:0c:bd:96:3b:c5:5a:05:
76:db:8a:6f:82:d0:19:4b:54:69:ff:8d:52:90:87:
33:07:8f:59:01:56:81:a0:c7:13:f0:f4:bb:1c:75:
c3:95:6a:b9:dd:ac:9e:27:c7:4c:ea:84:d8:a3:64:
24:a2:11:1d:61:d3:63:e3:1d:ac:f8:d1:6c:c5:a6:
bb:52:fc:f3:e1:2e:4d:01:c1:9f:a6:ef:91:41:f9:
e3:ed:4f:90:a6:ac:4b:6c:b9:c4:17:0f:85:91:c3:
0c:1d:17:83:b4:4b:6b:cd:a6:a8:fb:e4:e1:b6:ff:
44:4a:76:06:1b:fa:62:25:43:6d:9e:3c:35:fb:8b:
12:d0:3d:c2:41:cf:d0:ee:55:24:ae:2c:3b:ce:d1:
d1:4e:7b:7c:7c:f5:05:6f:1a:17:2e:05:83:e3:c1:
a5:da:bf:05:87:60:3c:8a:78:87:3b:fc:84:88:b4:
89:15:03:56:17:4d:cf:77:76:15:6b:ce:9a:9f:bc:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F8:78:29:AB:3C:E1:E6:6E:A1:70:B0:FF:A2:80:8A:66:EE:6C:51
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:37:19:8b:7e:c6:2e:55:fb:83:43:93:75:7c:fc:a8:1b:e7:
11:c3:77:77:5f:cb:f8:c6:79:52:c7:00:8f:68:a7:0f:34:f5:
38:47:45:fe:11:19:9f:40:d8:dd:14:d2:90:ae:a0:b0:ad:be:
6e:81:97:09:c9:8d:a9:06:27:02:19:05:d5:ce:ee:73:c6:f7:
9f:97:e0:b7:05:72:b3:4e:41:43:4f:bb:82:58:bb:37:1a:a1:
78:da:ea:ae:5a:fa:b0:36:ae:22:d2:95:ae:b4:0e:73:7f:f7:
fd:dd:d3:50:17:03:7d:87:f6:65:43:2b:e1:11:7d:b3:c6:5a:
71:0c:67:d4:55:58:bc:0a:5e:67:58:ce:0f:47:ff:5a:2e:d6:
ac:16:d1:8d:f0:d1:c3:e2:62:9f:42:21:17:3e:f2:a8:6c:e6:
7b:47:a7:69:8b:6b:28:75:83:6e:33:ce:8f:c2:f9:5e:8b:13:
87:0b:68:ec:ef:0d:10:38:f7:b4:14:9f:e0:9c:41:f3:dc:42:
2d:04:3f:57:41:a6:71:13:22:c7:7c:bb:df:59:e7:68:7c:28:
8b:8c:ac:e0:77:a6:34:03:9a:20:11:76:71:7c:3a:22:fd:44:
3e:3e:ad:e3:44:aa:36:52:34:82:5f:b2:c4:90:da:96:8e:53:
9e:b8:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:53 2025 by rpki-client