Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier: eNXhqBNFOryX2UVhILKHFAQ3iwoVZ46+s7C/bns+bhA=
Subject key identifier: 81:C0:F0:85:0E:A8:6B:9D:4C:EF:D0:EB:7B:7D:04:A4:58:E8:8E:65
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial: 0197B77CD4014116C95E70397B3DD9A47490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: L3qWfQy1u4EjCvPcPownPBi80yn7etn5lVgmDQ6le0I=)
2: nJUcoCNc07cyfYEUlMwbz1g_DaE.roa (hash: Ib/IQqjAiE9xz41/z9I1UMYPE1ywAN0ig2dufXZbgBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d4:01:41:16:c9:5e:70:39:7b:3d:d9:a4:74:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=81c0f0850ea86b9d4cefd0eb7b7d04a458e88e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:96:05:14:d3:68:8e:c6:8f:39:fd:68:ed:
e5:77:fa:e5:6e:ea:d9:7f:2e:b8:91:57:69:f0:5f:
d2:15:92:e6:69:60:81:fb:95:6b:0c:9b:14:d2:31:
b6:c7:c2:af:62:06:26:70:c2:d5:d0:d7:f1:b0:01:
7c:ad:c3:4e:3a:b8:78:0b:7c:1d:5f:54:9b:9e:b8:
79:e4:b5:6a:26:63:c3:14:5c:71:89:ab:f7:93:d0:
c1:23:fa:77:6b:db:b5:56:de:fa:ce:d1:0c:bd:46:
f7:a3:e9:93:d5:a0:02:80:cf:46:4d:36:f6:47:ed:
51:25:13:09:5c:0e:df:bd:78:cb:07:0f:c3:78:94:
03:d0:2c:f7:47:c1:38:64:78:1a:39:48:68:68:5c:
16:a3:98:f6:fc:bd:20:b8:aa:b2:f1:df:f0:c7:98:
ff:01:e4:f7:bc:13:ed:cf:80:2f:fa:a8:58:b2:78:
99:ec:41:e0:0e:fc:a2:0e:55:54:3e:79:28:8b:5f:
28:42:52:c9:ed:64:50:64:e4:f4:81:32:60:18:e9:
16:69:54:47:f6:51:93:09:c3:14:4f:ed:65:83:15:
11:19:25:a9:c5:e2:e5:d1:8b:d9:1c:89:17:5e:f6:
32:64:be:cc:5e:0d:df:b9:47:6c:20:5b:29:c1:18:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C0:F0:85:0E:A8:6B:9D:4C:EF:D0:EB:7B:7D:04:A4:58:E8:8E:65
X509v3 Authority Key Identifier:
keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:62:67:60:27:11:f3:fb:1f:97:62:87:a4:47:f0:3f:00:26:
10:4f:7a:82:c2:52:1f:e3:04:b4:5d:bb:49:21:58:e1:ff:df:
0d:a9:11:cf:f3:d9:c6:64:94:99:7c:b6:84:8c:f9:b7:19:8f:
ee:3d:fc:5c:26:0c:29:87:f2:38:6b:e9:35:b0:6f:d0:88:1a:
7d:95:d4:b0:bb:9f:fc:c0:3d:21:8f:c7:cb:7e:b6:ab:57:28:
56:f7:d7:2d:89:f2:d9:d5:db:ea:e9:a7:7c:bf:62:db:a8:58:
75:19:16:7b:2f:d9:6c:66:d5:f9:a3:e9:e4:52:13:0a:e5:3b:
c7:f3:55:a3:56:fd:1e:11:dd:5e:57:6b:6c:c3:43:8b:c4:dc:
73:eb:8d:fc:16:79:88:76:f8:80:d2:41:2f:c9:d6:10:69:4c:
10:5a:36:68:5a:28:52:7e:fd:2e:d4:d4:49:59:41:93:9e:09:
bd:b7:6a:33:a0:24:af:c7:ad:07:9a:10:5e:b7:a1:bc:1f:ef:
5a:8f:15:6b:0c:d6:f2:43:df:8d:f6:8a:de:aa:cb:6a:7d:07:
da:d2:fd:c6:80:a0:71:fa:2a:d3:78:b0:b7:51:77:4c:be:0a:
17:39:69:25:e3:e8:70:f6:14:e0:dc:d9:d1:78:0a:73:5b:ae:
70:a5:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:48 2025 by rpki-client