Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: /d+X/jEMnTadIvAT/TFlG06J10X2Pn8m+xxPVlywTiU=
Subject key identifier: 2D:76:CB:60:1A:BB:71:5F:27:0E:9C:85:1B:BA:F3:4E:B6:BA:25:7E
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 0197B77C10137BFAA36A0B58D9383DFCB330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 148F
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: Y5O/wxQhiVBO3qsqyoIXbFBqc5wwVb6V4a3ZYTdInE8=)
2: n6mO0jwfMCGtBTJz4z0BBFhaaaw.roa (hash: depvn6FAlXY00NO5eAYz1KXbUInLhBp+Jz+PGCqafeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:10:13:7b:fa:a3:6a:0b:58:d9:38:3d:fc:b3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=2d76cb601abb715f270e9c851bbaf34eb6ba257e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:8a:e7:f9:fb:7c:44:1f:3d:47:0e:c0:3d:
6a:93:bf:8f:51:cb:7c:74:98:a0:f6:66:bb:f9:51:
7d:52:6d:7b:87:a3:c6:61:37:b1:47:6e:7e:ba:b0:
70:fd:fe:8f:5a:52:02:cd:88:45:2b:31:2f:ef:39:
ba:ca:76:b8:62:6b:97:3a:01:6b:c6:36:19:8c:e6:
77:91:8c:f3:7c:cd:b3:bb:f6:52:b1:27:af:90:0d:
79:6f:cd:6f:53:f0:a2:47:28:a5:ea:5e:6e:d1:b8:
2e:e0:46:92:4a:a6:b3:9c:93:dc:33:19:9d:06:77:
53:06:e1:0b:25:c6:ae:28:23:f8:1d:64:e6:c1:6a:
40:03:85:b9:09:cc:17:75:24:63:4c:71:b4:ca:64:
f2:c0:a5:d5:17:76:02:c3:02:0d:b5:ab:bf:a0:7b:
b2:ba:03:87:18:1c:2c:90:2c:88:47:32:c9:28:04:
b2:ca:28:4e:ee:1e:e9:ef:04:30:8e:f5:e5:f4:09:
54:96:4c:7a:f1:38:d1:c4:44:f3:ee:07:a3:e6:79:
1c:77:84:b3:20:87:65:ff:31:1d:ff:67:09:f4:7e:
a7:b4:17:31:48:dd:a1:c8:78:c8:b4:86:82:f1:4a:
b3:9d:eb:63:ad:aa:6b:81:5a:cc:96:c1:90:ab:08:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:CB:60:1A:BB:71:5F:27:0E:9C:85:1B:BA:F3:4E:B6:BA:25:7E
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d2:76:f7:af:c8:a8:c0:ac:fe:5a:63:17:83:0c:25:20:86:
04:e2:86:37:c5:9f:10:bc:31:22:60:dc:35:74:a4:68:57:3c:
4f:2b:fa:db:76:88:6c:8f:f4:8c:b3:81:68:6d:62:2f:88:ec:
dc:93:92:ca:30:00:9e:d7:7c:46:f8:d8:66:3e:13:0d:10:38:
25:08:d5:e2:49:37:71:90:07:f6:c9:ac:dd:40:74:66:b9:77:
83:b2:ef:bc:1f:4a:90:1d:68:4e:c7:bd:80:e8:10:c2:71:7c:
86:ee:9e:d0:bc:c2:26:05:13:44:50:98:64:4e:74:cc:4f:9e:
2b:87:40:64:27:d2:28:c7:68:a1:23:db:40:af:bc:53:77:48:
25:fc:dd:10:53:21:07:89:ca:3f:af:fe:2f:f2:8b:27:5e:24:
14:1e:f7:26:e0:f6:fd:36:c3:4c:e4:ac:92:81:68:82:eb:26:
b0:cb:77:5a:b2:15:71:5a:59:77:8b:2e:28:b9:39:1d:72:9b:
9c:ec:ff:af:eb:fd:bd:2d:42:57:33:59:43:52:ed:92:dc:96:
1f:b2:47:76:19:4a:4a:c4:74:94:08:23:9d:e8:77:34:05:69:
ac:5b:47:30:2d:fb:7a:01:13:f9:3a:9f:ab:87:5e:58:d8:d1:
c6:a4:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:52 2025 by rpki-client