Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
File: k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json)
Hash identifier: ERMKe8hic73B0mp4XmC+/KLLcDLtYY7yK4c8wYkw59w=
Subject key identifier: 30:41:15:A0:AD:8E:E1:25:8A:1B:3C:47:CA:D4:AE:DE:37:19:F1:F6
Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
Certificate issuer: /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Certificate serial: 0197C9F11A442712AADFD2E46DF5E6C53FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
Manifest number: 08E0
Signing time: Wed 02 Jul 2025 07:01:50 +0000
Manifest this update: Wed 02 Jul 2025 07:01:50 +0000
Manifest next update: Thu 03 Jul 2025 07:01:50 +0000
Files and hashes: 1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: uWnhnXosNeRR+hR8EQdMEHNsWy1sxM6D40uYnrWQ8h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:1a:44:27:12:aa:df:d2:e4:6d:f5:e6:c5:3f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Validity
Not Before: Jul 2 07:01:50 2025 GMT
Not After : Jul 3 07:01:50 2025 GMT
Subject: CN=304115a0ad8ee1258a1b3c47cad4aede3719f1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:1e:63:54:c5:2b:93:6d:f6:87:ec:f5:86:
a9:9c:70:27:45:dd:71:c4:0b:b4:61:5f:fe:9c:05:
e7:84:38:d5:43:da:6d:d6:f8:de:c9:fb:3c:ac:a9:
5c:07:37:7c:26:04:24:69:cf:d7:64:58:8d:10:81:
84:bb:ce:1d:26:8d:69:f8:6b:49:db:72:57:50:b2:
bd:54:bd:f9:09:5d:e8:ea:b7:0e:77:5b:da:d2:00:
e1:8e:04:e8:c2:ad:75:0a:36:12:18:3c:98:1d:87:
d0:09:4b:32:0d:b2:1f:37:b2:da:ac:8e:4f:4a:99:
e8:f0:ab:d5:3f:89:ea:28:21:82:63:87:02:5d:80:
36:13:b3:cb:20:ff:00:b9:1f:17:bf:1e:fe:bf:86:
55:52:e6:c7:e2:5e:41:da:39:64:dc:b0:f7:e6:e1:
d8:40:92:2d:f1:af:5f:89:a2:4d:c6:28:de:55:81:
09:11:d8:37:c1:8a:bd:13:43:b2:eb:aa:c2:09:d2:
b5:2c:ad:c8:47:15:26:fd:e9:58:d1:98:26:6e:12:
53:53:fe:d2:e5:8a:e2:27:5c:5a:27:14:55:09:36:
4c:8b:c7:7e:92:fd:f6:24:da:ac:cb:3c:95:87:cb:
da:aa:18:50:c8:40:a4:86:27:ba:04:78:cb:44:7f:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:41:15:A0:AD:8E:E1:25:8A:1B:3C:47:CA:D4:AE:DE:37:19:F1:F6
X509v3 Authority Key Identifier:
keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:75:70:ae:b9:34:a1:e9:d6:24:bc:4f:97:1f:40:9c:7a:50:
39:53:b6:3c:6f:ba:f0:14:ce:08:72:34:ad:a3:25:e9:82:d4:
93:27:64:5c:2d:38:32:2e:de:bf:42:71:19:a2:60:a3:66:f0:
42:51:bc:52:ce:ba:07:07:cc:4e:0c:f8:01:f7:a7:90:dd:8a:
16:dc:3c:29:2d:e4:1b:21:14:74:d1:91:f7:6f:4e:9b:48:97:
9f:2b:5f:4d:6f:fe:2d:e7:2b:08:73:d4:e0:a2:9f:17:39:b7:
2a:47:e7:6f:61:26:08:6e:df:20:c8:8c:40:58:bb:bc:7d:14:
96:19:04:ed:f0:40:d3:7d:71:e0:e6:ad:8c:07:6d:97:0a:93:
c7:01:dd:3e:49:3f:b2:77:34:75:d7:5a:15:dc:d0:cd:70:2c:
66:53:c5:b3:a9:d1:e8:76:37:09:1e:3d:bb:7b:9e:6f:b7:e9:
75:ba:b8:e2:60:d4:a6:76:e5:8a:24:47:fe:f9:52:a5:76:77:
a3:54:ef:af:de:0d:e0:6f:83:71:58:b6:d3:da:4f:41:af:be:
76:09:db:c1:a6:05:b7:c7:87:44:f8:43:0c:a2:8a:df:c7:f6:
a2:25:c7:25:9b:2b:7b:4f:2c:5d:6b:2a:9d:1a:d8:1a:ab:63:
c5:fb:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:19:06 2025 by rpki-client