Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: U8sKXhj2K6oIAfLK3tf3+VDiNOrWpmV0v9as0AbdYP4=
Subject key identifier: 59:A4:E2:46:0A:30:C4:A0:7B:1A:E5:11:9D:EB:D7:3C:DB:E3:E2:D2
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 0197B5FBFD05FB0A35D6AA785276666D3908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 10:01:19 +0000
Manifest this update: Sat 28 Jun 2025 10:01:19 +0000
Manifest next update: Sun 29 Jun 2025 10:01:19 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: x9AinxqBDPo7iq4lYek0PLZ95Ci8xcveYDNwz3nKBLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:fd:05:fb:0a:35:d6:aa:78:52:76:66:6d:39:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Jun 28 10:01:19 2025 GMT
Not After : Jun 29 10:01:19 2025 GMT
Subject: CN=59a4e2460a30c4a07b1ae5119debd73cdbe3e2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:c3:61:4b:53:ad:40:66:d3:0c:df:ea:49:
5c:28:24:12:bd:5f:38:67:31:0a:5c:4e:87:15:4f:
79:d8:e2:73:75:7c:d8:ff:64:40:d5:ad:79:92:17:
76:0a:d3:09:4f:72:1d:5a:5a:d7:89:a1:0a:ef:a3:
ad:55:ea:77:e1:34:a8:85:c0:57:39:62:77:63:79:
dc:f9:b3:7e:97:26:20:e9:47:57:6a:e4:81:fa:58:
a2:8d:b3:5b:be:27:37:ad:c1:7a:7e:df:7e:ee:7d:
a4:19:69:32:5e:5f:30:f0:fb:ad:36:18:8a:39:92:
7a:4f:b3:77:48:e5:58:a3:6d:7f:09:3b:07:0e:e8:
2e:c3:a5:40:d7:ee:22:aa:c8:b4:8f:9b:28:54:96:
a6:e7:07:39:62:46:7f:55:0a:6b:5c:be:61:92:ee:
d3:5b:37:81:64:35:c8:80:1e:d0:e2:6a:78:aa:28:
f9:6f:77:61:25:32:65:dd:f0:16:76:40:4e:e7:80:
a8:7d:79:30:88:0c:30:62:c4:af:55:97:9e:56:8b:
1f:59:35:37:8b:a4:d4:86:c9:6a:49:8a:31:9e:2c:
87:be:62:07:f2:03:32:94:25:18:05:54:28:99:4d:
3e:17:54:a5:20:f3:e1:7e:9c:83:24:10:1e:9b:6e:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A4:E2:46:0A:30:C4:A0:7B:1A:E5:11:9D:EB:D7:3C:DB:E3:E2:D2
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:00:38:97:c7:40:c5:8b:8f:3f:89:4e:c4:90:15:85:b1:8f:
f3:a7:ea:ea:ea:30:58:55:02:72:2c:b9:63:f2:28:a4:fb:f0:
d9:44:4a:6c:cc:35:fb:0e:5b:b1:60:c2:93:2e:62:3b:a6:b5:
3d:43:d8:d1:09:46:9d:bd:e3:2b:63:90:f1:43:30:b2:31:1d:
a5:d8:82:59:a7:3b:aa:59:d1:0c:c8:af:c2:54:d0:db:f2:73:
06:a1:b4:12:5f:3a:31:49:76:ca:c2:7f:e0:b9:39:3e:2d:a7:
a1:b3:0b:92:7d:3e:81:eb:d1:8e:4d:2a:b5:00:f8:00:10:f6:
d5:bc:5a:a9:e6:9d:b0:75:55:97:32:44:65:70:a4:ea:11:eb:
99:85:27:0e:73:c8:d8:a6:66:88:bf:88:28:05:14:69:a7:47:
bf:45:d8:21:9b:4d:1b:b1:06:c9:56:17:94:bf:01:a7:eb:43:
fc:a1:e5:bd:03:c5:31:c9:3d:d1:6b:66:f9:82:49:50:1a:f2:
0b:2b:e0:fd:59:d7:d5:8d:f1:9f:30:79:ae:35:8b:1e:27:3d:
6d:22:2e:87:be:fe:27:aa:b8:7c:7a:f4:b7:6c:61:84:15:c1:
7b:9c:01:3c:b7:b0:4b:27:2b:47:63:6b:74:b7:66:11:8c:1b:
f3:05:18:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:02 2025 by rpki-client