Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier: gyfePQI5ZB3z3rQdSmmIVoQeRp3mYm9oKfL0tzWip8A=
Subject key identifier: D3:6D:7C:1F:CE:BA:ED:78:F1:DF:52:F4:77:18:FE:70:09:CF:31:67
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 0197B70EAF43CDB4A9514054610BFC1304A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number: 0D03
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: AO8/TfCNmtYnv/uyh6pUAID5/rKjUVEdO2/0frkcUlM=)
2: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (hash: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:af:43:cd:b4:a9:51:40:54:61:0b:fc:13:04:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=d36d7c1fcebaed78f1df52f47718fe7009cf3167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:2e:c6:6c:4c:0b:d5:c6:b7:31:8d:9a:e3:
b6:94:1e:b4:f1:cf:c6:85:f4:f9:d5:d8:ef:f3:67:
aa:65:4a:f3:bf:69:43:51:0e:d9:37:de:44:99:e0:
2b:42:a1:f8:5a:2d:69:1f:13:aa:b0:e3:39:5c:5e:
2d:25:07:a4:1b:b1:2a:9b:4e:5c:4c:e3:f9:d1:e8:
cd:cb:0a:d8:76:c9:d3:38:02:04:03:c1:aa:cd:e6:
57:42:d1:d0:fa:ac:de:83:89:d4:a7:45:c0:61:42:
a1:78:92:02:aa:8c:a4:e2:fc:22:9a:5c:57:ca:2e:
df:0f:a4:b1:00:17:2e:b7:5c:71:1d:b2:3c:19:bf:
94:d0:81:44:88:41:8a:dc:3a:db:67:0a:92:2c:eb:
e0:a9:13:ad:d1:43:ef:37:cc:d7:71:94:a6:60:86:
89:8c:53:46:68:cb:b9:5a:78:89:fd:23:68:30:b9:
c8:18:2a:f8:79:8d:fc:9a:32:72:4e:8f:95:72:8c:
73:0b:35:af:c2:c5:0d:6f:2d:65:c4:cb:b1:b9:db:
23:7f:bb:29:2a:b0:06:28:b6:81:5d:25:ac:00:28:
22:28:65:30:bd:1a:0f:66:c9:90:a4:79:83:ec:ac:
6b:62:43:10:d8:8e:4b:8f:80:95:76:41:a2:3c:a8:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:7C:1F:CE:BA:ED:78:F1:DF:52:F4:77:18:FE:70:09:CF:31:67
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:08:56:f2:70:58:e6:f6:df:a3:f6:56:13:6e:1a:17:c8:ca:
50:cb:54:64:f9:74:33:ef:89:b2:42:d1:80:db:c6:29:4f:23:
be:3c:81:57:88:ce:c4:51:d1:5d:eb:d4:a2:50:3d:39:da:00:
18:3a:69:82:88:bc:71:f5:0f:a4:fe:c0:fb:6e:a1:dd:f4:29:
35:f7:72:01:bb:44:3f:39:f9:fd:e0:43:7b:25:bf:9f:56:6f:
8f:80:49:a3:3c:8b:d9:6f:1b:88:b0:0f:98:10:17:c2:e2:f0:
05:65:6e:9f:32:b8:1f:f0:96:46:8e:84:5b:dd:27:5c:a2:68:
d0:2c:83:02:ec:7f:ed:41:4f:8e:f2:a4:6a:6b:be:50:ca:9a:
ac:a8:2e:e0:13:ff:aa:f7:5a:df:bc:2a:be:97:21:2b:c5:c1:
53:12:c2:17:58:e0:68:34:df:33:5a:fc:88:29:6d:26:91:02:
0c:1b:1a:81:04:8d:3a:5b:63:1f:05:15:94:67:ed:b4:01:32:
9c:cc:0d:d1:e1:2b:45:82:de:d7:ab:0e:d5:2a:89:78:7c:d6:
54:f3:8a:49:43:b7:d5:08:5a:14:fb:df:88:6a:5a:b3:e0:be:
30:c7:64:1d:b4:a1:22:59:4b:fe:6a:23:6a:5c:df:4d:cb:51:
c9:b2:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:41 2025 by rpki-client