Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
File: 0vcAvspCZT5kq0NaLwpPPZpQFLA.mft (raw, json)
Hash identifier: C7kIoG0weuVWp/dKT8eZLevlx1vpWN0/tYyp8HTg19U=
Subject key identifier: 9F:F0:D6:E4:D4:38:13:62:A5:93:C4:0A:F9:FB:B4:57:57:74:4E:F0
Authority key identifier: D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
Certificate issuer: /CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Certificate serial: 0197B6A0818FEE6B03D82E2DDB659B64FD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
Manifest number: 15AF
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: 0vcAvspCZT5kq0NaLwpPPZpQFLA.crl (hash: HYyAPxDdjE7gGwLf6DyjFtvcm8xxLsy3CHEOwylG2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:81:8f:ee:6b:03:d8:2e:2d:db:65:9b:64:fd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f700beca42653e64ab435a2f0a4f3d9a5014b0
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=9ff0d6e4d4381362a593c40af9fbb45757744ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:7b:b3:0b:3f:97:e2:ed:dd:df:17:a2:20:
f3:d8:58:6a:0d:47:63:3b:bd:9f:00:b4:e3:b9:63:
00:ce:bd:9b:45:4b:37:de:e1:87:5e:bc:aa:06:8f:
f5:9a:e6:d4:21:1f:46:c3:67:3d:f7:31:0d:37:cd:
89:0d:0e:5f:45:cd:d1:79:7a:63:fa:a5:61:dd:3d:
4b:24:3f:39:86:bf:71:35:09:75:9d:94:27:ea:1a:
e3:80:77:34:d7:5e:ff:c1:07:ae:c5:af:94:f7:4e:
e8:f4:89:74:9d:d8:82:45:1a:83:ce:2e:4f:97:68:
11:68:c7:62:c6:60:d1:68:e3:3e:cb:cd:b6:db:87:
a4:25:ab:bb:bf:ea:a6:52:2e:fd:bd:0e:44:70:9e:
fd:1d:5d:cf:f3:8b:07:e7:30:f2:a1:ee:75:48:b4:
67:17:31:95:e0:af:b6:b6:68:e9:d4:46:e6:78:fa:
1c:39:78:02:7e:92:f5:4d:76:91:ce:03:5f:b1:cd:
a7:eb:0c:c0:f3:ac:bb:81:de:cd:b2:84:bd:6d:ce:
ec:b7:63:f7:19:84:fb:9e:37:eb:81:db:37:4a:e4:
d8:11:6e:b4:21:17:ca:44:f1:2d:ec:99:9d:09:c2:
52:99:07:db:c6:d0:84:0f:72:be:13:40:44:1f:e9:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:D6:E4:D4:38:13:62:A5:93:C4:0A:F9:FB:B4:57:57:74:4E:F0
X509v3 Authority Key Identifier:
keyid:D2:F7:00:BE:CA:42:65:3E:64:AB:43:5A:2F:0A:4F:3D:9A:50:14:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vcAvspCZT5kq0NaLwpPPZpQFLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/07512a-12c8-4895-b32f-75c7ba1c073f/1/0vcAvspCZT5kq0NaLwpPPZpQFLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:46:aa:a0:ac:88:47:e9:8e:1a:b6:78:37:cb:10:94:9b:78:
9d:e9:ef:80:1c:f5:3e:67:3b:56:79:f7:5b:2f:92:f6:ab:87:
3b:d5:f9:e9:c5:58:a5:ea:04:11:d4:15:bc:74:67:6f:25:43:
40:4b:49:97:8f:73:c3:46:67:75:43:56:16:25:c6:23:6a:05:
97:e9:ee:f5:12:e6:c4:22:ed:a1:51:bc:ad:16:26:3f:cd:2d:
ed:34:12:52:01:d4:2f:2b:81:46:c4:f4:fc:36:41:d1:43:87:
b0:63:1e:66:74:bc:95:d1:09:6b:8a:2d:7e:3c:eb:19:90:5d:
3c:ea:a6:04:30:19:e5:35:66:05:c3:8c:66:a8:55:a9:ae:1a:
4b:61:c6:23:26:89:b7:a7:0c:b6:5d:23:b1:fa:7a:28:90:e1:
ae:30:71:53:aa:14:a1:6c:72:43:31:33:db:21:03:a1:b2:81:
af:26:e3:97:e9:08:a3:b9:ac:60:68:36:5d:a3:c3:40:74:5e:
32:bd:03:b4:ff:38:fd:a1:2c:62:e1:b4:6c:93:4f:60:e2:2f:
fa:1f:43:5a:6a:4d:2a:7b:d6:b1:ee:0e:c9:5b:47:e9:08:96:
08:73:6d:8a:27:0e:3f:04:6e:57:f4:a0:78:95:59:42:61:e0:
e2:a4:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:10 2025 by rpki-client