Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: wRDDaJdT9cqfBJ4AgN2AcZHFtQ6zCi5e3iqiYzIbuKQ=
Subject key identifier: 73:49:04:F9:99:3C:67:C8:8B:17:12:2C:42:81:A7:11:30:BE:21:AA
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019849D3B38EE329EFDE0A6C3D1D5884F3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 1592
Signing time: Sun 27 Jul 2025 03:01:07 +0000
Manifest this update: Sun 27 Jul 2025 03:01:07 +0000
Manifest next update: Mon 28 Jul 2025 03:01:07 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: 239ZYm+lc/HYshUZx5QXBT/T+Fmwnp85cgD26e3+BwU=)
2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:b3:8e:e3:29:ef:de:0a:6c:3d:1d:58:84:f3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Jul 27 03:01:07 2025 GMT
Not After : Jul 28 03:01:07 2025 GMT
Subject: CN=734904f9993c67c88b17122c4281a71130be21aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5f:21:6f:e9:fb:a0:d5:10:6c:f4:41:89:86:
06:53:f4:3e:32:bd:63:ca:80:0b:ec:67:14:22:39:
d2:ce:be:f0:95:cb:33:9b:a9:8d:d0:d0:cb:b0:d5:
01:39:fb:f0:c2:8f:39:5d:b1:6b:cb:7f:2b:42:da:
b2:93:22:94:28:5a:1e:88:44:da:4e:bc:92:a8:e5:
05:8b:3c:cc:66:f7:1a:bd:9c:d0:70:39:ba:85:39:
20:3d:e0:ff:25:67:de:cd:d2:30:93:7a:d5:bb:17:
38:23:f8:49:2d:a7:a8:a4:f3:9f:35:9d:6c:ad:f0:
34:d7:fb:a4:ad:e7:bb:89:b9:3a:2c:57:ca:d4:68:
94:9b:4b:65:9d:28:c6:42:6b:93:27:73:61:ce:06:
22:32:3c:e8:6c:35:c3:87:c3:08:12:c9:d5:0c:49:
4a:1f:7f:69:1c:47:f4:ee:ec:e0:cf:2f:74:d2:81:
3c:1e:3f:71:dc:da:15:c2:48:79:b5:31:bc:a0:0c:
06:16:83:81:bb:c8:68:be:11:81:22:45:2b:df:f2:
b6:04:77:27:89:d6:73:96:d7:9b:21:78:76:a9:71:
3b:cd:5d:72:77:75:2c:6a:21:5e:1a:c3:b3:18:82:
64:38:14:04:d5:b3:49:c6:3a:c0:db:22:f6:22:9c:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:04:F9:99:3C:67:C8:8B:17:12:2C:42:81:A7:11:30:BE:21:AA
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9c:ff:9c:fc:ba:81:4d:b0:80:0a:d4:4a:0d:77:d6:d6:f1:
10:f2:92:fe:ef:ac:2a:44:a2:9d:b5:bd:57:48:90:fc:f9:e4:
3d:c3:77:9f:8b:f6:bd:05:2d:07:dc:8b:c6:ab:b4:13:2e:49:
c6:19:8a:ac:7f:60:8d:59:0c:14:33:04:b6:e8:39:7c:2b:5b:
49:e0:91:75:ba:76:9c:ba:64:15:2a:19:57:9f:a0:73:0f:fd:
9b:d6:9c:fc:4e:b8:b4:a1:58:ab:21:bc:0c:4b:16:74:df:16:
fe:78:74:1d:94:16:0f:92:ff:d7:1b:fc:78:f0:d8:18:1e:d7:
6a:30:ef:7f:0e:e2:61:34:cf:df:8e:99:cc:fc:b9:61:60:9d:
e0:58:c6:e9:a1:8f:69:73:e0:db:a5:91:bf:ee:06:60:11:b2:
f5:8c:12:78:1a:c9:35:6f:6d:14:26:b1:23:10:82:98:7a:83:
d6:14:59:37:51:02:b7:c5:3d:a3:e4:e9:1c:b1:97:d9:26:15:
91:ea:09:3f:05:f0:f3:7b:75:35:b2:5c:88:2e:52:a3:3d:ac:
99:d0:b8:ef:89:d5:cb:6f:d6:b0:6a:13:dc:26:18:23:50:af:
4e:0f:7a:6a:e6:f8:a0:d8:3f:8b:f8:ce:3f:27:d2:11:2b:c4:
ef:39:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:13 2025 by rpki-client