Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: FJsiUCxY1fHCB+e3Yr/6Qne4ddkqIA0cjf9K2iUFNjA=
Subject key identifier: 9B:78:B5:F9:9E:3B:4F:03:5E:F5:9D:B4:18:9E:18:F1:5E:AC:A7:6C
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 0197B6D761DF2D85AC7D0D01842D0FD49EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0A48
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: ekTnjpgHtu22YnMBzpiwJYUuYBulHT3a8dIGU7CiFDc=)
2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:61:df:2d:85:ac:7d:0d:01:84:2d:0f:d4:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=9b78b5f99e3b4f035ef59db4189e18f15eaca76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:b5:f6:b5:82:4d:d7:f9:6d:5a:c3:b4:76:
42:8b:3b:c6:0f:14:45:99:02:41:82:9b:02:e8:0c:
99:4f:42:20:66:a5:8f:ea:a5:2b:13:68:4b:e9:a2:
4d:43:c3:3c:7a:5e:4f:a6:2b:46:52:db:a6:54:a5:
18:75:cd:dc:87:6a:5d:38:4b:5b:9f:b7:cd:a3:79:
ac:6c:4d:fa:35:3d:2f:37:b2:1e:05:32:2c:f1:2a:
60:62:4a:b2:a5:57:54:6d:73:19:f2:05:ed:db:35:
95:5e:07:31:85:d9:32:87:16:b8:1d:a1:6d:b3:06:
cd:41:4b:96:08:9f:57:92:f3:40:0f:39:13:f2:74:
7e:a9:80:42:f0:c5:ac:8c:85:2f:33:a3:4c:3d:74:
14:84:b2:53:90:9f:ef:f8:8f:13:55:f5:fa:53:51:
a8:3c:ec:4d:a7:49:2d:5c:78:70:5e:8d:c3:3a:52:
65:7a:ad:05:66:1f:45:22:16:fc:91:e7:f9:69:9b:
45:c0:ac:c2:f1:ba:6e:98:0b:04:25:15:e7:c2:04:
a5:1b:37:2a:34:88:1c:97:2d:eb:49:e2:d5:1b:ee:
1c:e3:75:9e:66:ca:bd:65:7e:2b:ec:8f:e7:c2:4f:
af:79:9f:83:be:b2:0a:33:60:3a:10:f6:26:7d:50:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:B5:F9:9E:3B:4F:03:5E:F5:9D:B4:18:9E:18:F1:5E:AC:A7:6C
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:41:b9:e1:df:56:7c:b7:9c:01:97:58:fa:c6:a3:6f:72:27:
59:8b:c1:1e:dc:e0:81:a0:e9:6f:99:47:4a:99:1e:80:fd:0f:
17:ab:1d:d1:1d:fb:9a:9a:69:98:77:62:da:e0:30:8c:d3:25:
9e:6c:d6:e3:e2:9d:27:e7:d1:c8:48:97:ce:ac:30:f2:25:0c:
7c:b3:e8:78:1e:50:cc:f7:e6:ea:5c:e8:c7:4a:ce:77:56:9b:
93:44:32:77:93:88:77:e4:d5:7e:29:49:98:68:d5:d8:99:c0:
37:3b:93:3f:b7:6c:f4:64:b9:f3:cb:a4:e2:b7:94:83:48:c5:
a6:c5:dc:29:c0:9d:11:0e:80:7d:12:f6:ca:89:3e:8f:ab:c8:
2d:ac:2d:bb:1e:d8:9f:d9:18:97:8d:f9:ec:9a:d1:6a:5c:72:
c4:1d:d4:4f:d3:3d:8a:89:27:de:02:9f:a4:6e:06:c6:10:3d:
b3:7a:2f:7e:41:e3:85:f8:e2:39:2a:d0:00:77:d2:3c:23:b9:
5d:98:c0:20:12:3d:7a:86:44:f1:56:87:74:5d:2d:cd:34:f9:
69:c3:91:04:fe:17:1c:68:80:81:fc:56:c3:ca:05:6b:37:83:
98:60:b9:1c:93:06:b5:84:ee:2c:a8:e4:ec:2b:dc:2d:97:ac:
89:09:94:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:39 2025 by rpki-client