
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File: 36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier: ZI/dc24t6oEWLyD8jPigXiRZw5F5iJz0CEo5CD3YE/8=
Subject key identifier: E5:97:F4:4F:A8:09:22:73:75:F8:AC:25:25:28:4C:FE:93:43:A2:3A
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer: /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial: 0197B9D8EC41C0DAE152E7024878057F9CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number: 0CAC
Signing time: Sun 29 Jun 2025 04:01:30 +0000
Manifest this update: Sun 29 Jun 2025 04:01:30 +0000
Manifest next update: Mon 30 Jun 2025 04:01:30 +0000
Files and hashes: 1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: ISWVkRC1+9rg8qLP/TuUgw9dUfi3zWvMiLTmurtusFs=)
2: Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (hash: hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:ec:41:c0:da:e1:52:e7:02:48:78:05:7f:9c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Validity
Not Before: Jun 29 04:01:30 2025 GMT
Not After : Jun 30 04:01:30 2025 GMT
Subject: CN=e597f44fa809227375f8ac2525284cfe9343a23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:dc:cf:4c:1c:08:30:f8:c7:9e:d9:9e:1f:
46:f4:60:96:da:57:c0:b6:5a:b3:7d:a6:4d:66:f8:
8a:5c:fa:f5:b6:0e:96:25:5e:b3:37:87:55:3a:58:
60:3e:bb:49:11:03:8a:2a:da:15:64:b2:be:0d:7c:
c6:4f:5b:2a:7c:62:09:1c:42:61:8c:0f:f8:af:bb:
83:96:09:34:81:64:ba:2b:54:b0:d0:50:4c:b2:63:
80:b3:fe:f9:80:b9:74:90:5c:84:a3:a4:fc:ce:4b:
b9:bb:bc:2b:5f:5a:67:88:a3:9f:80:a4:bf:1c:a9:
36:9d:01:ad:ef:56:d2:36:10:76:fa:a3:f0:96:09:
ab:34:2b:36:17:b4:33:5c:6b:2b:96:66:b6:95:f1:
93:dc:34:44:0e:72:8b:23:64:8c:28:7b:7f:15:cb:
d1:1c:66:9a:d6:96:92:89:c0:d5:43:88:6a:19:92:
2e:1b:26:f8:e0:30:fd:cf:6c:64:8d:4d:df:b8:26:
7f:42:36:c6:1a:f8:18:a5:62:dc:d7:92:24:19:d7:
79:5c:52:da:2d:60:f1:c9:e6:6d:d4:36:85:06:6b:
c2:28:9a:87:8f:9f:77:86:c4:a7:06:ad:bf:de:d2:
54:7b:c2:1f:91:a2:ee:00:1a:ea:fd:21:2d:54:66:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:97:F4:4F:A8:09:22:73:75:F8:AC:25:25:28:4C:FE:93:43:A2:3A
X509v3 Authority Key Identifier:
keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:83:80:b6:88:99:64:03:21:21:be:54:8d:ad:c0:1b:5c:87:
28:0b:23:9b:4f:24:77:03:2e:04:4b:c4:78:24:66:f8:89:9f:
3c:a0:8c:2b:cc:36:00:df:2b:da:17:a4:25:7d:8b:ef:20:c2:
a6:1e:51:ac:3e:5d:08:eb:e1:a4:97:7c:22:8e:0c:e5:5e:29:
37:a5:21:c7:e5:96:8b:75:8b:da:17:34:5d:40:c0:fd:70:b0:
72:3a:a0:44:c6:9c:bd:a4:c6:a7:55:0b:3f:56:ab:48:87:b6:
65:37:34:9d:44:cc:c9:ab:14:12:ec:84:49:a6:ae:b4:4f:d6:
b1:a2:d3:bc:f1:ca:9a:3a:82:29:3a:ba:95:da:35:e8:db:04:
f6:c3:eb:00:ce:29:b0:15:d7:50:b9:62:97:68:f6:a6:a7:8c:
d4:d7:8a:8c:6c:a1:04:5c:89:bc:ce:ae:b7:3e:a3:1d:9c:fe:
1f:68:76:33:59:94:cd:90:eb:e1:28:3a:b8:f2:31:94:fd:d6:
b1:8e:6e:30:65:43:cc:88:3c:a0:54:28:7e:37:46:cb:98:b5:
05:c8:29:a2:68:98:e0:b5:c0:45:b3:38:d9:89:7c:4e:b7:5a:
e6:1a:2f:39:48:13:15:35:4f:ee:4e:11:6a:31:1d:40:05:52:
74:74:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:29 2025 by rpki-client