Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: adTZ/5z45bxnN2rm228gJgLZJ+j9Ol6P18UfalEGa98=
Subject key identifier: C8:A5:0A:A8:55:0E:41:9A:7A:1F:AF:45:01:6F:47:16:67:55:71:A2
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 0197B745A3B6546FDD38FF8290B4E65D6566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 04A7
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: 4pQZrpvFU0Srf2nbu7ywAwFSYG5rdwQ/hPTjqgY9OdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a3:b6:54:6f:dd:38:ff:82:90:b4:e6:5d:65:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=c8a50aa8550e419a7a1faf45016f4716675571a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:b4:54:b5:d0:d0:c3:be:b7:2c:19:a2:47:
21:72:ce:6b:f8:b3:13:24:c4:1e:9a:4d:4c:1a:1a:
3f:ac:a8:12:8f:9a:cf:a6:fa:93:2a:bc:44:31:10:
b9:85:87:bd:9c:7c:c8:12:cd:bc:cf:e2:95:fa:3b:
eb:d8:e6:e4:00:80:78:ef:4d:ba:d4:c2:c1:8a:2b:
a6:08:d2:4b:48:b1:1e:8d:ee:11:8e:2d:88:a5:a5:
90:bc:bf:38:bd:0c:b7:f9:c5:e1:ed:93:90:28:b1:
41:f0:73:b3:e0:62:fa:cd:e6:3f:24:26:98:8a:31:
8d:0c:00:05:59:5e:97:9a:56:3b:95:16:3b:35:14:
30:12:11:bd:dd:b9:05:3e:26:ad:58:8b:00:ce:9f:
d7:a2:9c:de:cd:96:d3:1c:b3:59:41:12:73:06:84:
db:90:7a:db:3f:3f:84:80:a7:f2:88:b3:00:88:c9:
5d:67:96:b8:6e:64:39:33:d4:69:e5:89:88:10:ae:
03:a3:26:cb:39:61:f7:2b:c5:8f:ef:63:31:17:0e:
29:fc:76:06:09:1d:3f:f7:1b:8c:99:dc:a0:4a:3c:
0b:4c:3b:24:e2:21:43:44:d1:c2:6c:58:19:43:9b:
be:3a:05:d7:1e:39:01:55:62:63:e1:30:e3:b3:64:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A5:0A:A8:55:0E:41:9A:7A:1F:AF:45:01:6F:47:16:67:55:71:A2
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8d:f5:12:2d:b0:65:ed:17:53:11:7b:90:19:d7:1f:81:1e:
4c:51:b9:91:dc:c0:b7:d1:ad:58:4b:f0:78:21:34:c9:05:0b:
eb:d3:ef:cf:13:7f:da:33:2e:44:7b:35:df:04:87:e7:c3:43:
98:14:a3:6c:bc:fa:cb:1c:71:e6:28:9f:fa:95:0d:3f:ad:0e:
67:38:05:58:d1:53:3c:8e:4e:0d:1e:34:b9:a6:e5:11:03:c6:
cf:76:4d:51:34:18:ee:b6:6b:84:c0:de:f8:89:be:e1:44:e6:
74:52:5b:67:be:35:bf:e8:1f:a0:4f:4b:cb:94:18:92:3d:6b:
00:c8:4f:39:f7:90:5a:a1:ef:01:ae:ef:0a:cf:b4:ed:15:21:
1d:25:0f:95:e9:ab:73:0d:41:4f:9b:b2:7a:2c:06:bd:96:fc:
48:eb:ca:00:c5:4f:16:93:e7:39:3f:e8:3d:17:a8:ab:79:de:
c3:83:bc:a7:c9:6f:be:ce:e2:54:fd:51:47:37:e1:97:d7:2a:
67:6d:c8:c5:a8:7b:dd:c8:b6:47:2a:36:03:ae:9d:5d:ff:9d:
95:18:fe:8e:46:4f:86:1a:28:d9:22:98:70:a9:c7:4d:ea:ec:
21:37:e4:c6:db:b5:6d:2b:dc:e5:ab:82:6e:43:f2:9f:8b:de:
61:cf:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:56 2025 by rpki-client