Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: /dfFlehhjs3o5L81Uqouw14ofDDBUzN528/fz++v2zo=
Subject key identifier: 88:0B:49:04:CD:3A:0D:0F:72:83:97:67:07:2D:0A:08:D0:D4:18:93
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 0197B6A0F618A58BE77D02F79112EC151D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: SHyKkx4A8AwIQxRA6pHopEGVhL8UlajqmSZHqktz1vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f6:18:a5:8b:e7:7d:02:f7:91:12:ec:15:1d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=880b4904cd3a0d0f72839767072d0a08d0d41893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:c6:91:98:c9:eb:53:d6:72:e3:a7:1b:bd:
7e:b5:bf:0a:51:4d:7c:d5:9b:10:21:a7:af:66:c1:
95:27:fa:38:0e:29:9d:29:c3:f6:ce:f5:86:3f:2f:
58:cd:df:b0:06:e4:3e:dd:9b:8a:69:c9:ae:6b:2e:
48:27:0e:7e:ee:eb:27:b0:c8:65:06:36:5b:bc:6e:
6f:ca:f0:6c:dc:f5:31:10:97:0b:5e:c9:37:4b:7a:
15:9b:91:14:08:0f:a1:b2:c8:f6:0d:68:62:78:40:
08:53:19:50:7f:db:60:c9:08:83:08:9f:1d:2b:e9:
fe:88:33:e8:ea:4a:d5:f2:b7:68:66:76:a5:cb:34:
f4:da:d3:79:2b:98:c6:f3:ef:ba:aa:9f:39:f1:aa:
aa:11:b6:d5:bd:8d:71:f5:79:0c:4a:a9:be:7e:1c:
66:11:d0:b5:80:9d:8d:5b:c6:1c:09:09:71:da:50:
21:89:32:81:76:00:78:d5:44:90:9a:fc:81:45:cf:
c1:fc:b3:ed:0d:38:d6:ce:55:a8:1a:db:91:6d:5d:
d3:2a:83:ed:cd:df:dd:8a:2e:4b:dc:28:1c:25:ca:
02:aa:f6:4e:4e:8e:eb:17:c8:28:e8:7e:65:a8:29:
dd:79:1e:c1:8e:c9:58:29:bc:68:c7:3f:4a:40:41:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0B:49:04:CD:3A:0D:0F:72:83:97:67:07:2D:0A:08:D0:D4:18:93
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e4:46:99:2c:a4:39:08:df:81:d6:ba:07:e1:23:06:19:ec:
8e:83:c6:7f:3b:9a:0d:ee:d5:47:05:8c:48:7d:3f:91:da:4f:
f7:ae:c3:31:d3:5a:b8:93:36:b1:61:0a:1c:f9:02:d6:9c:a9:
78:7f:11:85:f2:f8:b1:36:dc:b7:b1:dd:92:da:4c:38:5c:c1:
23:e8:16:da:54:e3:4d:ba:f1:d9:66:f2:c7:74:de:4a:a4:34:
e8:1f:70:ab:4d:82:b0:01:e3:d4:a8:5b:83:7a:0f:81:2c:9b:
f0:74:19:c0:d2:8f:88:30:57:2a:f6:35:64:62:bf:e1:1d:79:
7c:c0:65:57:c1:e5:fb:45:84:4b:48:72:6e:41:c1:93:68:56:
64:d2:6c:3e:13:77:ed:5f:f4:18:c7:2a:21:64:92:9d:b1:b3:
0b:47:b1:7c:89:02:05:de:f6:7d:9f:af:6e:b7:a9:be:43:3c:
b8:28:4f:34:da:a3:79:fc:4f:26:35:6f:47:bf:e8:80:05:71:
ca:b6:cf:40:83:40:33:23:eb:d3:f0:41:11:ab:d2:f2:ee:1b:
27:c8:ac:35:40:d0:65:79:1b:c0:c7:65:3a:5b:0f:78:4b:b3:
c8:8e:cd:53:07:3d:aa:cf:bb:1d:84:93:aa:af:f9:90:1b:d4:
74:43:85:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:31 2025 by rpki-client