Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: m5Ff9NqmmaMzm8jLQYIkO9gFFHKaq6avBGqLZg9XtAE=
Subject key identifier: 1E:D0:14:A5:E1:3A:B7:D6:4F:E2:8F:A5:CA:F8:B1:19:D4:4F:36:37
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 0197B745943BC63977C9BF7C712FB297C5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 02A1
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: 2CSCkt8z2MtTiRt9vy1xRhygvcIsrwXp2Z8nkgct4dw=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:94:3b:c6:39:77:c9:bf:7c:71:2f:b2:97:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=1ed014a5e13ab7d64fe28fa5caf8b119d44f3637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:f6:f0:f4:d9:4d:69:df:30:aa:00:0b:89:
09:5f:31:ec:91:ec:26:ef:93:08:83:2e:f8:45:39:
a1:10:22:2b:3a:9b:72:bb:d5:df:2a:e6:80:6f:db:
2f:73:21:56:35:73:ee:ce:b9:6c:32:c7:5d:f5:ed:
f9:a2:b7:a8:87:f6:0f:85:54:28:5b:8f:60:ca:a1:
38:24:14:27:ea:52:ca:06:ce:9e:e7:2a:42:b3:9d:
6d:a2:99:37:6c:6f:d6:78:f7:c9:ec:d8:3e:ce:0c:
e2:16:05:2e:b3:82:1e:3b:32:5f:63:91:ed:70:8f:
dc:f9:5d:e5:fd:33:e8:ea:5d:dd:44:f0:6f:9d:b3:
0d:fb:82:14:0b:a4:32:d0:7d:84:fc:ed:66:13:0e:
f1:ee:b9:a7:a2:4b:4c:48:09:12:4b:d0:15:9e:9e:
5c:9c:29:38:e3:77:0e:f9:0b:ad:3e:a3:af:1d:00:
0b:0a:29:27:34:2e:30:44:4e:ba:9c:b2:26:db:bf:
c1:3a:1d:15:22:6d:b5:89:9b:35:03:0b:13:e2:56:
40:82:c1:82:0f:e9:b0:92:87:91:44:94:b9:0a:ee:
d1:2f:39:89:fd:b9:b5:9e:e1:37:92:ab:10:52:b6:
9b:a3:0f:52:71:85:ff:7b:bd:ef:92:81:92:f7:60:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:14:A5:E1:3A:B7:D6:4F:E2:8F:A5:CA:F8:B1:19:D4:4F:36:37
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1f:46:c4:49:a5:e4:81:29:40:92:b8:b1:4d:e1:94:3c:b5:
83:4d:42:a0:57:dc:de:d8:86:44:c5:eb:c1:87:b3:32:41:0b:
62:11:c5:38:a4:48:de:b6:a8:d9:2f:cd:ce:06:a5:22:c2:b4:
75:35:a6:55:ea:3b:27:b7:c1:f1:b1:94:4d:7b:41:bd:93:4a:
78:3c:e5:35:93:69:18:4d:2d:b4:bf:8d:33:bf:ad:c4:b4:5a:
d6:0a:58:d8:aa:c3:09:5e:be:5f:d3:77:28:9a:dc:f7:55:74:
8f:8e:51:20:ef:18:b5:40:61:fb:47:9b:a1:b4:ec:87:fe:8f:
a3:4e:83:be:f0:66:ef:b6:1f:64:2b:07:76:d1:da:48:2e:8c:
61:12:05:8d:4c:10:d3:c5:9d:fb:0a:27:51:bc:65:45:d8:09:
f0:48:b7:a6:14:f3:6d:7f:78:94:d5:25:07:31:ad:8c:1d:94:
8d:a6:e2:66:a7:47:f0:4b:f8:27:2c:f5:fa:52:45:df:fb:02:
c2:16:d4:eb:17:fc:29:0d:26:c7:4d:0d:b0:79:18:db:55:44:
5b:f8:1d:6e:21:0f:5a:6a:06:53:65:fa:4f:08:e5:ce:14:7c:
c7:5d:32:de:0a:f4:91:63:65:23:3a:b9:d9:7f:a4:dd:76:3b:
21:66:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:30 2025 by rpki-client