Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
File: 0gXOrys2rZ_lGQaehrlONtLsS94.mft (raw, json)
Hash identifier: B2P/DZLhPDE+4k67N4caW8U7Oi3e8UR1j+2NlFyP5yc=
Subject key identifier: 9D:C1:BE:C0:72:AD:60:9A:CC:1D:54:64:E5:BB:4D:B8:5F:F9:71:E4
Authority key identifier: D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
Certificate issuer: /CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Certificate serial: 019849D3432E73CC9880D7224B8FFC07089E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
Manifest number: 0931
Signing time: Sun 27 Jul 2025 03:00:38 +0000
Manifest this update: Sun 27 Jul 2025 03:00:38 +0000
Manifest next update: Mon 28 Jul 2025 03:00:38 +0000
Files and hashes: 1: 0gXOrys2rZ_lGQaehrlONtLsS94.crl (hash: cWditf2xuV4sXkUXz2PZNLLg3z+0uKdiAfsScHnQ90E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:43:2e:73:cc:98:80:d7:22:4b:8f:fc:07:08:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d205ceaf2b36ad9fe519069e86b94e36d2ec4bde
Validity
Not Before: Jul 27 03:00:38 2025 GMT
Not After : Jul 28 03:00:38 2025 GMT
Subject: CN=9dc1bec072ad609acc1d5464e5bb4db85ff971e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:34:27:f0:82:b6:05:b2:1f:80:5b:e4:f5:
10:21:46:82:1e:f2:ff:19:12:d5:eb:04:0e:5b:ee:
2a:a4:3c:8a:5e:22:36:c5:b0:fb:c4:4d:cd:6e:61:
d9:20:95:cd:d2:28:4b:76:90:2d:3d:1b:c9:37:3f:
8a:54:0c:56:1b:ad:00:a8:c0:99:b2:43:9f:0f:58:
07:a0:e9:cf:0c:75:c2:b3:92:57:28:7c:a5:59:90:
e2:96:d4:91:75:14:9f:32:87:03:13:18:67:07:ad:
e7:5b:76:f6:47:b6:bd:d9:fa:45:8a:f7:ce:9f:4b:
b1:de:8f:81:ba:ac:d4:d9:cf:8a:1f:da:25:c8:43:
27:07:20:ca:c2:d8:ae:3b:bb:82:34:45:fe:de:e2:
b5:d1:1c:f1:45:2a:9c:ec:52:a2:2b:5e:b3:fa:e7:
4e:39:34:b3:41:9c:4e:7d:d1:ff:4b:50:42:03:69:
af:a7:9f:10:81:dd:df:9a:f4:91:1d:67:3b:3c:f2:
35:b9:d5:77:cb:8f:c7:1f:14:74:4b:a5:0e:22:fc:
00:09:6b:0f:22:e1:22:f9:65:89:5b:5d:5d:32:37:
17:59:e1:af:66:79:ad:39:ff:7b:61:e3:c6:44:e3:
3d:b3:af:b3:59:0d:12:ab:c9:b6:76:c7:36:b7:68:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C1:BE:C0:72:AD:60:9A:CC:1D:54:64:E5:BB:4D:B8:5F:F9:71:E4
X509v3 Authority Key Identifier:
keyid:D2:05:CE:AF:2B:36:AD:9F:E5:19:06:9E:86:B9:4E:36:D2:EC:4B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gXOrys2rZ_lGQaehrlONtLsS94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7fa172-8e55-4711-8c75-18f8925c6665/1/0gXOrys2rZ_lGQaehrlONtLsS94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:69:b6:93:fe:78:eb:e5:76:2f:ce:69:18:27:5b:1d:0e:ce:
44:cf:1c:25:b5:f6:d6:60:d5:dc:0c:98:ac:41:8e:88:a1:26:
19:55:2e:45:36:30:04:e9:36:e2:6a:17:e3:56:a3:6a:03:0e:
33:b0:b1:22:10:fc:a3:0d:3f:cc:59:08:62:a7:c6:58:10:27:
87:fa:07:2d:c0:b5:19:2f:66:31:8f:59:bf:68:88:f1:df:5d:
cf:8f:5a:cd:48:6c:dc:61:98:b1:b8:1a:d9:32:69:b8:54:75:
b2:0e:5b:f9:4c:78:20:5e:46:28:a0:15:ce:70:7c:6e:c6:c4:
7a:c3:94:30:d2:f9:0e:a9:bc:d5:11:03:49:4a:da:eb:41:d4:
93:12:f2:9c:d8:e9:9e:56:5b:97:26:79:1a:3d:7b:8b:10:d6:
e2:a1:9b:54:63:5f:9a:9b:e8:ad:d8:e6:3e:5b:bb:e5:c1:c6:
ad:f9:40:55:c9:70:2e:97:95:8e:34:fd:df:30:f1:20:dc:46:
16:45:df:14:5f:ce:ea:a1:d0:df:cc:f1:4b:15:e6:e1:c1:41:
ad:31:6b:e2:ae:c9:0e:e3:38:50:b0:b0:ed:65:43:37:0a:bb:
47:d6:8b:62:2f:6e:99:9b:80:05:31:96:5f:4e:1f:77:2b:2a:
cf:ea:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:00:19 2025 by rpki-client