Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: dYmhiBYUJOkBmm2T9aOMy3/0Dic7sfxTdYMSuaHEjDA=
Subject key identifier: 37:74:39:84:CF:55:C4:9B:C4:CC:C9:D4:A5:32:BF:37:12:46:AA:55
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 0197B70E5B38A30D2CC16E2B2B4FF24FC8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 144A
Signing time: Sat 28 Jun 2025 15:01:00 +0000
Manifest this update: Sat 28 Jun 2025 15:01:00 +0000
Manifest next update: Sun 29 Jun 2025 15:01:00 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: 9qSxx5WUgqslNRG9yrMO6cciyIvzOQDAQDBXzY648HA=)
2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5b:38:a3:0d:2c:c1:6e:2b:2b:4f:f2:4f:c8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Jun 28 15:01:00 2025 GMT
Not After : Jun 29 15:01:00 2025 GMT
Subject: CN=37743984cf55c49bc4ccc9d4a532bf371246aa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:10:84:f7:4b:a7:d7:50:96:c1:79:d2:3c:
e9:5e:b8:ec:23:b3:bf:f5:cd:9b:4a:7e:97:da:49:
2f:5e:8a:22:2c:22:4c:21:7d:54:d1:28:11:9c:e8:
c1:cf:ee:cd:79:a6:e3:3c:7f:36:c8:47:1c:db:1a:
df:3a:d6:d6:e6:eb:71:8b:32:35:0f:b2:4b:8c:8a:
52:28:52:64:5d:5a:c4:c8:fb:94:57:9f:5c:28:c4:
34:f1:ea:fb:b2:1e:8d:22:25:55:93:7e:01:e5:72:
44:c2:da:69:64:92:d9:53:82:71:4b:50:d5:4b:3d:
57:87:b4:71:5f:61:e2:a0:fe:98:7d:10:bf:a0:7d:
bc:02:ee:8e:3f:93:12:b9:f1:13:45:fa:c5:36:c9:
ec:ec:64:3d:34:8b:09:3c:a7:f0:19:af:e9:a3:0a:
8e:c8:18:fd:fa:9b:e4:b1:8f:bd:95:1a:17:eb:b7:
8c:b3:21:04:7d:14:51:18:f9:24:14:d8:72:61:93:
80:6a:98:3f:c4:ac:1c:ff:9d:9e:49:6b:2f:54:e3:
7b:55:19:76:c7:b7:b4:11:25:5a:dc:96:e0:34:9e:
99:c3:09:2c:30:20:96:4e:67:b7:a0:62:af:82:34:
8b:8a:d3:3c:2c:94:1c:df:06:bd:69:2a:37:34:2c:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:74:39:84:CF:55:C4:9B:C4:CC:C9:D4:A5:32:BF:37:12:46:AA:55
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d8:90:2e:f5:c4:70:e4:b0:79:24:5d:71:5f:cf:30:19:e8:
08:a4:06:fa:b4:f8:5d:24:1e:fc:82:5c:a6:43:2d:64:d3:01:
32:79:56:cc:cc:a0:c7:21:d0:e6:5d:db:a3:44:74:24:e6:c4:
bd:95:bf:5b:05:d8:06:4b:a3:e1:71:33:89:7c:fc:f5:2a:94:
9f:84:66:51:07:fc:89:36:d3:e9:21:05:17:f0:52:67:6f:e3:
2e:12:64:d8:5c:ab:fe:18:3a:74:c5:fe:f3:36:ba:eb:69:39:
c6:08:92:ec:1f:12:a4:1b:25:6f:00:cb:fd:a3:2d:4d:0b:6e:
04:96:58:dc:fb:f6:ef:11:8a:6e:da:af:0b:2a:00:2f:5b:d5:
78:56:6e:ca:fb:0a:10:17:17:20:e8:2a:b4:a7:2b:72:8e:04:
a8:71:b2:0d:83:11:90:54:37:24:e6:36:d0:76:4a:7b:9b:9a:
8d:eb:96:00:a3:a7:09:cc:e9:e7:ee:7c:c4:8c:35:73:4a:ad:
b7:41:70:0b:56:72:ec:dc:10:fb:2a:34:62:83:79:d1:34:9a:
dd:2f:12:b2:1a:01:91:e3:4e:64:00:01:76:dc:e6:41:60:f9:
a1:bf:81:fd:32:57:dd:29:76:d9:0c:3f:67:cd:c3:5c:39:de:
c0:19:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:48 2025 by rpki-client