Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: rSnHprK4I2PUbB4mK5t5URqPXKekHjdcBNLgVXLhrcI=
Subject key identifier: 31:D1:63:F4:12:3A:72:97:1B:8C:79:14:D8:C4:32:82:2F:EC:7E:3F
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 0197B70F06B0E5533472303462CC995C7C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 0FF0
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: krJGReXrv5nbIGU2e620MgtB43SGRB1Hh8KW4T7iCTg=)
2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:06:b0:e5:53:34:72:30:34:62:cc:99:5c:7c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=31d163f4123a72971b8c7914d8c432822fec7e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:43:eb:40:39:05:f2:1b:8e:d5:95:b0:60:
2e:5c:0d:01:33:83:c5:aa:b7:da:eb:6c:51:c0:6d:
88:4d:d7:ff:22:e7:d5:19:90:87:69:03:e0:46:16:
a9:7c:65:2d:1b:59:79:48:20:8e:28:31:3e:8e:95:
9e:74:03:01:33:da:c1:d9:bc:bd:92:1b:36:05:29:
17:62:f1:82:a7:44:68:64:b0:c4:f2:89:6b:4e:3a:
17:98:80:48:4f:51:9b:e1:f4:80:02:64:ef:8b:e1:
e8:56:17:f5:df:d3:3f:8c:83:ec:e4:84:6b:ad:ba:
d9:f9:5f:20:2d:05:be:a5:8a:2a:4c:97:f2:90:bb:
04:38:97:b0:3e:6c:bf:aa:12:e4:54:8d:41:7f:e5:
18:89:59:d7:4f:5c:5f:0f:3b:71:e7:db:0c:a0:70:
db:c3:f8:90:78:9a:04:84:49:b3:0d:ea:a9:68:f3:
98:b2:5f:56:10:c1:59:4d:5e:53:87:c9:ac:88:e9:
52:67:49:a4:78:3a:39:2c:04:38:1a:e2:ed:45:fc:
55:d8:52:8a:0a:f5:3a:ea:c6:c0:56:fa:db:b4:f5:
be:75:bb:59:47:7b:52:aa:9b:6a:f4:b1:e6:b6:0e:
82:28:6f:be:80:38:99:09:41:ec:c6:1d:92:ff:9e:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:63:F4:12:3A:72:97:1B:8C:79:14:D8:C4:32:82:2F:EC:7E:3F
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d7:c1:69:44:01:54:5b:da:ad:74:fa:d4:7c:6a:f8:3c:63:
2a:b8:17:94:82:33:a1:64:f1:df:95:ea:e0:3f:64:b1:07:15:
b1:a2:9c:f4:1c:33:28:fd:53:5e:b1:7c:a6:7f:6b:85:dd:1d:
7b:7e:89:4e:a8:c7:f4:bf:82:af:d8:18:7f:cc:c0:6a:cd:ab:
f5:80:73:ef:74:dd:ec:46:89:36:5f:62:36:39:aa:6b:e6:90:
9f:43:5f:1b:16:61:0d:70:31:f1:41:a2:df:72:92:9f:b2:c3:
8f:a2:d1:39:38:a6:89:c4:dc:ea:58:2e:9d:65:95:51:9d:9c:
19:92:76:7a:1e:9d:a2:ac:11:20:27:96:43:26:ae:bf:b7:e9:
b5:d9:6e:00:7d:39:92:2c:62:9e:e6:f1:8d:45:ec:04:e6:20:
30:58:2c:68:58:99:0b:34:71:04:6d:44:0e:6e:b0:44:34:e9:
de:b8:01:d0:8d:2e:58:7c:8a:e6:43:43:36:cf:10:33:57:9e:
b4:17:6b:c2:d7:39:ee:fb:99:0d:25:29:86:73:b5:16:05:88:
4b:a6:69:2c:cb:0b:eb:92:3c:86:4f:5e:80:56:31:d0:c5:42:
52:c0:dc:88:f9:56:b1:cd:65:dd:5c:f6:77:40:eb:55:6c:f3:
c9:26:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:25 2025 by rpki-client