Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: EpKNfTWmHKtJx9zC5f7s740yLWOIfenWkQPs6+zpdUg=
Subject key identifier: 04:42:28:B7:FF:D1:EC:74:87:8A:01:8A:0B:7F:0B:94:0A:03:2F:86
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 0197B70F039E22A2180BEB7A9906DF4530E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 0818
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: 7wqPs8tF0Df+zaozNIH3Mgx3hswgqBCEEqxGn0g4q50=)
2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:03:9e:22:a2:18:0b:eb:7a:99:06:df:45:30:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=044228b7ffd1ec74878a018a0b7f0b940a032f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:1a:9f:1c:33:b3:da:ea:9c:f9:73:9e:e7:
5e:bc:ff:4c:4e:af:5c:7a:5f:31:b8:23:33:66:aa:
25:5a:64:d3:3d:c3:fc:b8:c1:90:bd:a5:b2:53:0c:
a5:62:35:8a:15:eb:b8:64:38:7e:aa:c6:0c:9c:61:
42:19:4a:63:ed:19:77:e4:24:93:1a:5a:27:67:93:
25:b4:5e:4f:d5:1c:64:23:7d:c7:90:22:18:47:7e:
f5:93:3f:dd:a3:5a:ba:8c:0c:82:06:05:15:a4:11:
8f:65:71:f9:8a:53:ea:68:81:56:e0:9c:a4:8b:64:
16:a9:f7:0c:f9:a8:1b:5c:38:f8:40:a8:5f:52:e3:
05:a2:19:41:12:4d:39:07:71:75:c9:49:f7:29:ff:
80:ec:ea:1b:a4:5c:af:05:3b:d5:b8:f8:94:b1:4b:
26:74:78:fe:9c:1c:a1:55:8c:e9:1b:8c:a2:c5:50:
a8:d4:dc:2b:8a:11:43:7b:95:1c:cd:44:c5:94:35:
47:44:d2:fb:ea:67:d7:08:d9:ae:04:93:22:a7:5d:
f9:3d:23:ad:fa:01:19:77:0f:9d:8b:c6:ef:24:cd:
8f:93:df:4f:87:9e:71:a3:b8:d1:86:c7:c0:59:98:
87:b7:87:90:13:c4:df:54:78:08:10:51:2d:b5:b4:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:42:28:B7:FF:D1:EC:74:87:8A:01:8A:0B:7F:0B:94:0A:03:2F:86
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f9:b5:3b:f5:13:94:a6:40:75:c7:b7:20:d2:57:5a:ce:44:
04:e5:32:3b:3f:6b:b2:e5:38:ca:15:65:b5:4b:c7:b9:a9:44:
0e:55:18:0c:87:12:6e:7f:07:de:d9:9d:79:23:79:cd:be:dc:
a0:ca:de:53:b5:d3:5e:ca:d4:b4:ad:99:f0:d4:50:7b:1d:c6:
4c:b6:c0:e4:5f:2a:75:f3:63:68:21:24:e5:ad:be:6b:a1:bf:
d6:86:c5:86:81:1c:27:bf:a2:0c:82:67:70:4a:00:da:d0:42:
f6:aa:8c:0b:8a:84:7b:d6:51:ab:15:b9:71:a9:d8:7e:fb:2b:
73:44:8a:21:a9:43:14:fc:ba:f5:b3:6c:34:2b:d2:bb:76:0c:
07:9e:5b:ca:01:33:20:37:c0:1a:b5:71:88:2e:f1:0d:b8:52:
24:cf:b2:b3:de:ec:6f:70:5c:e9:cf:b2:c8:31:54:cd:46:68:
3e:38:61:f0:cd:ae:4e:fa:d0:4f:15:cd:06:cc:f3:21:60:d2:
97:4c:32:3f:8e:4d:cd:e3:b3:8e:88:bc:d5:74:82:0c:d4:4b:
ec:02:b2:d7:7c:cf:41:95:71:8b:36:68:37:7e:2c:66:30:08:
b2:30:ce:7f:64:dc:ea:b9:f6:de:40:6e:e2:ef:4a:fc:73:eb:
17:d4:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:20 2025 by rpki-client