Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File: 36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier: sCuMOi+OrhJVtW5fKBGrrMSBZPHBjf4ItKXsQLbIueU=
Subject key identifier: 2D:8A:94:1B:39:FE:1E:B2:46:65:70:9D:F1:B1:33:35:9A:9F:1D:4A
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer: /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial: 01984AAED9EAD5D8737713FAF0CFA411E145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number: 0CF7
Signing time: Sun 27 Jul 2025 07:00:29 +0000
Manifest this update: Sun 27 Jul 2025 07:00:29 +0000
Manifest next update: Mon 28 Jul 2025 07:00:29 +0000
Files and hashes: 1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: cOIp367D8izPRzy3jcYYYsAwpvqH6KC8IR4Zgm6nGho=)
2: Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (hash: hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d9:ea:d5:d8:73:77:13:fa:f0:cf:a4:11:e1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Validity
Not Before: Jul 27 07:00:29 2025 GMT
Not After : Jul 28 07:00:29 2025 GMT
Subject: CN=2d8a941b39fe1eb24665709df1b133359a9f1d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:da:08:e7:d5:ee:e9:de:a3:e4:39:a1:67:
fc:f4:c7:ac:83:c4:dc:d0:4c:b4:b0:5c:23:3c:ce:
14:e4:b2:69:fb:cc:92:f7:71:39:84:38:f1:f1:2a:
6e:98:10:6e:0f:56:49:ff:61:99:d2:12:58:79:f3:
7b:94:38:37:24:1f:22:fe:3a:de:4c:e1:af:ef:3f:
7d:00:36:77:f3:4d:d2:29:d0:1b:fa:85:e2:71:5b:
22:2e:66:c7:1b:df:6e:22:9a:cf:d9:99:6f:95:02:
bd:af:ac:36:b6:8e:5f:57:f1:c4:c8:4c:1a:c9:f3:
f7:a1:05:bf:1e:b7:71:6b:1d:53:01:10:ee:18:2e:
c3:5b:6f:fd:3e:e6:64:15:cd:48:c8:dd:c1:ae:74:
8f:d9:89:e0:1e:50:88:d3:ff:68:b2:8a:16:fc:88:
cb:0a:4e:98:6e:1e:89:6e:7b:1b:2d:08:28:6e:8f:
ee:6a:17:41:fe:0c:a2:91:38:23:21:c5:72:ca:04:
fd:ba:03:6b:ab:38:f7:e9:1d:db:71:b8:5d:c0:20:
5d:8b:e5:49:ee:04:53:b5:be:4d:06:3d:67:7b:f1:
ea:9d:eb:66:4f:ae:6c:3f:f2:f4:c8:58:84:03:c5:
ab:e4:72:dc:08:46:88:6c:08:93:53:d0:7f:f1:11:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8A:94:1B:39:FE:1E:B2:46:65:70:9D:F1:B1:33:35:9A:9F:1D:4A
X509v3 Authority Key Identifier:
keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7b:1e:be:5d:39:f4:d3:81:e8:48:05:7c:04:1b:60:1d:ae:
77:e7:6f:ba:e6:17:a3:b7:f5:54:8d:24:c3:30:f2:32:ab:25:
b9:13:a6:58:8a:ce:37:79:45:03:03:07:29:c1:1c:91:71:fb:
27:22:d7:11:76:23:13:c7:2c:9d:3d:2e:98:fe:bb:09:00:6a:
ad:91:f3:c2:c6:04:ac:30:5e:84:d3:91:56:36:89:9a:76:84:
92:bf:f7:d3:09:8a:b0:ab:a6:35:62:17:0c:3d:b3:3a:6e:02:
30:a1:34:b7:02:05:86:71:d8:a2:17:0e:57:a6:37:99:9d:bd:
85:1e:0d:b7:28:d3:66:63:b9:ab:25:2d:df:0c:08:8c:9a:b1:
b8:ef:06:bf:33:41:17:f6:2e:c4:1f:79:03:73:bf:e1:97:9a:
08:bd:13:44:09:7a:ca:8d:23:f8:65:35:4a:91:83:bb:b1:6c:
c9:6d:3a:24:91:f7:a6:b2:2c:ca:7d:69:45:68:f0:a1:58:39:
23:a8:5d:c2:3c:9b:63:b9:28:ca:37:35:ed:29:0a:17:4e:77:
e2:2d:46:b8:9f:00:17:66:da:6f:c3:7c:65:79:c1:60:7f:22:
46:96:2c:54:3a:5f:3d:23:63:88:b6:f0:c0:f1:86:90:da:4c:
11:d2:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:40:53 2025 by rpki-client