Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: fvfGH6Mt5mf0+ja5lUpY31o/OnCC1Lc4GzmyKXDsKro=
Subject key identifier: 94:B9:9D:A2:A0:F5:F2:15:D0:FE:57:25:01:F7:32:F4:20:FA:F1:99
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 0197BA7D2FFC16C7E7113904858664B1BACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 0958
Signing time: Sun 29 Jun 2025 07:00:55 +0000
Manifest this update: Sun 29 Jun 2025 07:00:55 +0000
Manifest next update: Mon 30 Jun 2025 07:00:55 +0000
Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: tEYurhSIrRWwzqFAKM8UMPaurhtBtAhEtdelYtEsK7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:2f:fc:16:c7:e7:11:39:04:85:86:64:b1:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Jun 29 07:00:55 2025 GMT
Not After : Jun 30 07:00:55 2025 GMT
Subject: CN=94b99da2a0f5f215d0fe572501f732f420faf199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:27:16:5e:c0:b7:bd:16:76:72:ab:bc:ef:
06:2e:70:87:21:55:28:86:4a:34:5d:bf:67:86:ef:
60:7b:93:59:cf:f6:88:6f:74:fe:ca:ca:c4:e7:be:
b8:5d:e9:3b:4e:7b:c2:d2:8e:9a:08:52:f8:85:66:
af:fc:54:d1:d1:25:ea:4c:80:04:87:12:86:c8:ac:
91:33:e3:b6:83:f4:a3:39:cb:ba:99:f0:a9:48:f5:
9b:c5:9b:0b:0b:a6:5c:2e:5b:6d:d8:1a:85:c0:4b:
69:0b:b8:d3:5a:71:bd:e4:17:d4:a8:03:4f:7a:61:
fe:9e:83:75:fe:8f:da:19:33:ae:7b:d3:0b:fd:49:
11:cc:05:b5:62:24:0c:3c:25:55:cc:f5:65:1e:91:
11:9e:a1:98:47:00:ff:c2:1a:a1:c7:8a:e7:17:10:
55:83:52:99:df:9f:f1:c7:12:48:01:5a:0a:2c:8e:
60:b5:02:51:d2:8b:18:a8:56:c1:f6:c7:cc:44:df:
2e:c8:8f:ae:de:7f:ff:11:5a:4b:82:0b:f9:b8:f1:
28:66:76:ef:b9:3d:47:bb:8f:75:0e:2b:58:e9:60:
92:24:31:7f:fa:d7:71:43:93:9b:f5:3c:c6:4a:b7:
4e:f9:36:9a:dc:a8:f2:e9:b3:70:02:19:25:be:ea:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B9:9D:A2:A0:F5:F2:15:D0:FE:57:25:01:F7:32:F4:20:FA:F1:99
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ff:73:65:9c:37:8d:bc:87:da:aa:0d:3f:b5:15:0c:20:83:
ab:f9:6b:15:55:4d:71:76:04:aa:cd:59:f6:5b:70:82:28:d9:
f4:8a:75:f5:03:61:8f:3b:3a:fd:f4:11:c5:64:99:c0:03:b4:
de:82:92:dd:6b:b4:c0:16:43:15:3c:64:99:a5:8e:45:46:50:
65:38:3e:16:b6:c7:fd:fd:a2:1b:d2:46:62:34:9b:6f:6d:1f:
1c:52:33:bd:f1:42:f2:7b:56:28:b2:dd:98:b3:85:3f:25:0a:
b5:42:1e:cb:59:3a:b6:87:cc:7a:7c:9f:07:65:7e:8d:25:fd:
f3:67:cb:c9:68:52:b4:b5:a9:39:4b:74:38:86:73:cc:7f:fc:
53:b7:14:65:49:87:e5:ba:01:ad:08:f7:f6:04:c4:b2:62:6c:
dc:3c:0f:cb:39:38:ac:b7:4a:52:2a:ba:e0:06:e2:0e:0a:05:
c9:f8:db:4c:61:6d:6f:bc:72:7f:60:ee:3e:6c:3f:bc:fb:38:
a1:d3:9e:b3:ab:be:19:a7:32:09:8e:29:87:82:bf:19:b0:09:
a2:12:3a:e8:02:db:43:16:67:ae:4a:8b:da:1a:aa:d1:2d:aa:
00:75:63:da:49:b7:eb:e2:fa:b3:4d:96:cd:e6:85:f7:59:25:
31:85:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:31:59 2025 by rpki-client