Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
File: 0kvL9emk_kMp8iPBFFBykFOPnMI.mft (raw, json)
Hash identifier: GbQQOWpYxGnsv/kyiAlhSFWVzMJ7r/NLCGmDFNi+rUM=
Subject key identifier: 0D:C4:34:8D:9B:B2:AD:CC:40:41:25:F1:2C:0E:FC:EC:D8:6C:28:15
Authority key identifier: D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
Certificate issuer: /CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Certificate serial: 01984966BC9A0E5FB655D64802F346851CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
Manifest number: 114C
Signing time: Sun 27 Jul 2025 01:02:06 +0000
Manifest this update: Sun 27 Jul 2025 01:02:06 +0000
Manifest next update: Mon 28 Jul 2025 01:02:06 +0000
Files and hashes: 1: 0kvL9emk_kMp8iPBFFBykFOPnMI.crl (hash: +2UgLXGdYDlfxFtj3jIaJF6GSQZkZMY2u7T2zdfM2HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:bc:9a:0e:5f:b6:55:d6:48:02:f3:46:85:1c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Validity
Not Before: Jul 27 01:02:06 2025 GMT
Not After : Jul 28 01:02:06 2025 GMT
Subject: CN=0dc4348d9bb2adcc404125f12c0efcecd86c2815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:82:9c:c3:e7:78:ec:2a:93:9c:04:70:8e:
34:eb:02:4a:53:94:73:f4:12:22:eb:e2:16:31:2d:
99:91:10:88:0d:ac:42:9a:e3:39:98:3d:68:7f:a0:
7d:76:5f:da:2f:46:d6:82:1a:c1:56:1c:e4:e4:c0:
8a:69:b9:68:24:60:0c:5c:85:95:84:f5:0e:58:7c:
3c:b0:4c:cd:92:9a:76:66:df:39:df:36:11:4e:79:
67:b5:e6:66:bb:a4:2b:39:71:0d:a2:a3:f4:c2:6f:
5d:7e:9b:e1:23:b8:fb:4d:cd:be:89:5f:0a:b7:9e:
b4:7a:2b:88:56:64:3b:73:84:ba:f7:47:cb:cb:00:
b0:fd:8a:1e:e0:be:3a:b9:11:2c:fa:32:7c:6a:ab:
1e:3b:a6:78:11:dd:89:19:af:db:16:00:93:d3:85:
4c:da:5a:35:d6:24:c1:3f:47:77:e5:a7:37:4b:ff:
05:88:d4:00:14:73:94:cc:9b:54:b9:01:a0:7e:4b:
a6:cc:c6:97:20:77:27:6d:01:78:bc:b1:3c:04:a4:
5b:92:ac:5c:be:f7:07:51:f2:df:cb:c6:bd:24:1d:
bb:24:89:a1:a7:44:87:62:0a:16:e2:e7:11:ac:bd:
87:53:3f:7f:78:59:71:5e:d8:9e:c2:0e:09:44:6b:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C4:34:8D:9B:B2:AD:CC:40:41:25:F1:2C:0E:FC:EC:D8:6C:28:15
X509v3 Authority Key Identifier:
keyid:D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6b:be:df:39:ba:f7:e4:af:8d:8b:c7:b4:1e:d5:2a:e9:d9:
d7:7c:7e:35:36:e6:61:ba:71:86:af:81:bb:08:ef:05:f0:d5:
9b:60:8a:43:e4:cb:29:d7:a5:22:4a:5d:1f:6d:0a:64:17:88:
3c:14:2d:d8:53:8d:50:1d:38:4d:00:f1:09:31:76:13:c8:cf:
99:0e:b1:df:01:a7:7c:7f:ba:7f:b8:94:22:22:c6:a4:d8:97:
a0:c6:1f:d0:0a:a7:c8:a4:77:e6:a2:75:0a:3b:ad:a2:f4:75:
5d:f2:ce:bb:fc:f1:f4:50:32:4c:75:e0:f0:d8:65:b1:b9:e1:
52:fb:79:62:11:b9:d0:65:e4:de:fc:e6:48:24:eb:57:6e:5a:
55:63:41:5a:b0:f0:da:57:3c:77:6e:02:cc:6a:ec:50:39:b9:
8d:0b:f4:e5:af:f1:44:7f:fc:2e:2a:b3:ae:21:f9:34:96:72:
da:db:ed:a1:df:9e:8c:03:ae:47:e2:06:c4:89:1a:bc:8b:aa:
20:56:fb:5e:13:b8:1e:da:08:69:eb:30:e3:24:e3:75:ff:ef:
4e:58:d9:fa:4e:d9:a2:d1:47:a2:4c:0a:0b:df:fa:fc:15:38:
a0:ad:4c:c4:33:89:13:3a:26:0b:a8:86:76:09:83:4d:88:ab:
2b:de:34:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:23 2025 by rpki-client