Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: DZ8nBYeAT7D7Tbjtpno69Qr/dCs4rClPbpDwQjTyw3g=
Subject key identifier: A6:F6:71:7D:EA:52:D5:F0:94:F3:99:F7:B2:F6:4B:63:8C:59:B9:01
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 0197B6D7B991E8214BC1A95BAEF290FEF07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 033C
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: Ic8Lk8DEWPyIhha1hCirXOYuAwogTnnktrzCJE3i1ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b9:91:e8:21:4b:c1:a9:5b:ae:f2:90:fe:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=a6f6717dea52d5f094f399f7b2f64b638c59b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:4b:5c:83:af:6e:f7:0f:47:7f:28:83:d1:
d7:c3:d3:3e:cc:da:38:5f:66:04:dc:ae:ea:dc:2a:
04:60:3e:0d:88:37:d5:e7:da:38:2c:c5:fb:11:82:
02:b7:98:e4:c9:db:08:66:e2:eb:9d:6a:81:32:d2:
3a:f1:d9:bf:ec:c0:17:48:c6:3a:08:e8:eb:ec:fe:
da:c3:d6:24:71:3c:bb:8c:69:dd:1d:ff:6e:0c:87:
6f:e8:2a:33:03:3d:7a:0d:01:81:d0:3b:e6:ca:b2:
b6:4d:1d:47:21:d2:3d:1e:db:35:8c:d7:d0:c9:2d:
20:fa:37:7d:a0:60:aa:54:da:e2:db:44:d9:de:67:
79:50:38:03:ad:24:32:59:1d:85:82:4e:42:84:18:
a2:0c:b5:62:ec:ce:a9:00:e1:3c:e3:e9:cc:aa:1c:
2c:80:22:18:aa:aa:19:7d:e0:74:f8:07:ae:db:c2:
6d:68:f5:08:8e:e8:90:4b:94:ec:54:23:73:f9:45:
10:33:2c:0d:28:e8:ae:09:93:41:ae:b9:0a:bf:f0:
00:e2:fa:ec:06:ec:d1:14:2c:c3:61:b3:eb:4c:a8:
c3:8f:0d:a8:66:7e:08:95:93:0f:1b:ed:66:e2:9a:
17:d3:31:ea:05:50:d2:3f:27:f2:b6:9b:f0:69:ce:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F6:71:7D:EA:52:D5:F0:94:F3:99:F7:B2:F6:4B:63:8C:59:B9:01
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4d:84:65:5d:07:0b:24:96:06:d5:86:c4:d4:7b:d2:59:2f:
90:a0:83:cd:fe:87:ad:d6:f9:2f:06:b5:38:d0:fd:3a:49:ae:
39:a8:bb:18:06:66:bb:d2:e3:8e:89:ad:3e:ab:d3:5a:e5:77:
2d:94:48:3e:a0:2c:e1:49:a9:4d:08:3c:ee:12:eb:71:53:4f:
19:d4:b3:2a:a6:e7:dc:c3:92:f9:a9:2d:db:e3:b9:7d:66:c0:
7e:a2:79:11:73:c4:1e:32:b0:e8:f7:94:e6:7e:cd:db:4d:8f:
93:80:c8:b0:1b:68:04:b2:48:9d:94:8b:8a:9e:4b:1d:77:e0:
5b:d5:bc:35:93:44:9f:72:9b:5b:50:63:98:d6:5a:c7:e7:40:
62:cc:6e:6e:15:bd:db:40:ee:3d:dd:86:e9:95:44:65:46:04:
08:18:d0:cf:ce:6a:a4:43:50:17:70:3f:72:18:14:b5:3f:e7:
40:86:42:e2:a4:20:80:c1:94:bb:d5:b9:ba:9a:0e:19:ab:6b:
8b:41:4a:3d:b2:1f:3d:71:00:a8:ff:bf:32:3f:85:09:39:45:
cd:0a:06:dd:22:e1:46:4d:99:2d:98:61:72:dc:f5:d6:13:50:
6a:4b:e2:7b:e8:b0:ad:e8:7f:a9:2c:5f:8c:8c:d5:32:17:4f:
29:c8:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:53 2025 by rpki-client