Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier: jz95hCTZ7AzL577oAS+RvH89Zf6Ou6/qaQic2WTs040=
Subject key identifier: BA:D3:9D:9E:8D:53:7B:7F:36:01:F7:2F:D2:5A:73:EB:5E:69:AE:FB
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial: 0197B890456AFD17A4989B3C5A6EC6D62FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:02:32 +0000
Manifest this update: Sat 28 Jun 2025 22:02:32 +0000
Manifest next update: Sun 29 Jun 2025 22:02:32 +0000
Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: V8Ye6UTHYbZjwni8irPE2LeIq0EOuYCQvcei7MRh3PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:45:6a:fd:17:a4:98:9b:3c:5a:6e:c6:d6:2f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
Validity
Not Before: Jun 28 22:02:32 2025 GMT
Not After : Jun 29 22:02:32 2025 GMT
Subject: CN=bad39d9e8d537b7f3601f72fd25a73eb5e69aefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:73:f9:07:a6:b4:10:7c:f2:6d:db:06:4e:
b8:63:4e:00:bf:27:e0:b1:ea:6f:89:0b:a2:eb:76:
04:83:38:11:48:98:89:69:09:5d:13:48:29:c4:2a:
bf:ef:d4:c3:e1:8c:98:c3:2b:09:4b:a5:32:0e:c7:
e8:79:71:35:79:ae:2f:f2:ec:e0:8c:80:f9:32:13:
97:64:49:23:48:1f:01:4b:b3:10:a0:bc:d2:ce:d8:
b7:c9:0c:b7:f8:ba:25:5e:bc:35:11:fb:ed:77:9f:
ad:42:e7:06:d4:db:4c:7c:13:37:f8:5d:07:e9:54:
d9:29:48:9e:0d:54:16:65:da:73:04:d7:e5:1d:d5:
c5:aa:d8:fc:08:48:da:20:49:bf:2b:02:2f:e8:0d:
ad:dc:62:a2:ee:70:12:59:60:18:b9:e0:5b:67:d6:
29:bf:4d:5b:37:6c:cc:34:22:f1:51:34:e7:fe:8e:
78:90:35:c0:24:bf:0c:40:3d:36:90:5f:4e:d4:f0:
8a:58:b9:fe:67:7e:35:ca:88:3f:e2:71:63:78:37:
ef:05:77:76:4a:bf:5e:68:63:95:b3:a9:7e:4e:14:
ce:ea:8e:35:fc:e6:21:78:0c:aa:44:7d:9a:56:88:
84:52:10:d9:68:7c:25:ac:1a:e3:58:0b:ec:8f:ad:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D3:9D:9E:8D:53:7B:7F:36:01:F7:2F:D2:5A:73:EB:5E:69:AE:FB
X509v3 Authority Key Identifier:
keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0e:2f:7a:36:b2:d7:49:30:87:33:0d:dd:b4:c1:76:9d:81:
7a:22:ce:66:fc:a1:c2:50:1a:b7:ac:9e:d0:fd:74:3f:e6:8d:
e4:28:b7:fb:f6:89:7c:ec:ef:24:c9:6f:70:1a:c8:bf:e2:78:
6f:18:14:58:26:62:70:64:34:26:32:11:df:63:f2:f6:af:79:
a6:c8:4f:54:9a:77:c7:94:e1:75:a9:f3:4c:b3:23:d4:68:63:
0a:7b:90:d7:e9:53:25:ed:21:5c:f9:f8:9c:db:25:75:80:7b:
4e:89:3c:4f:31:30:0d:bf:be:88:c0:db:e0:e5:86:ec:d3:3b:
bc:97:f0:c9:47:6a:f2:9b:7a:6c:ab:14:fb:36:03:15:d9:3e:
94:da:0b:33:7f:ec:fd:32:da:96:3f:21:c6:58:59:4f:a4:40:
a6:aa:40:e7:b1:7a:0b:d1:50:39:07:e7:9d:01:02:01:41:78:
94:ec:52:b5:48:ed:39:0e:1f:ea:73:99:98:63:2d:55:78:1c:
62:64:3f:2b:a9:aa:ea:3b:74:0a:33:42:8a:07:8e:c1:d6:8b:
ed:8f:8e:ea:b4:96:4c:27:1a:7a:e0:24:78:db:6e:35:cc:3b:
47:c6:81:3f:39:ae:0c:f6:d0:56:26:0f:51:33:d1:e6:08:70:
02:38:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:27:58 2025 by rpki-client