Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: 4EdtFL17zckwJo4V6/ED5eNPyiHca1H5EAgFgc1SY6s=
Subject key identifier: A7:9D:1F:C9:19:F4:36:C5:A5:F3:A6:D3:68:D5:75:18:6B:19:EB:71
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 019845887E3CAB83A3ECE27F0A7274DB9F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 09A0
Signing time: Sat 26 Jul 2025 07:00:29 +0000
Manifest this update: Sat 26 Jul 2025 07:00:29 +0000
Manifest next update: Sun 27 Jul 2025 07:00:29 +0000
Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: 6DlnEUXjUm/pHpE/cVBQ8HKcjm5rc9DNKwjHRBL9cDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:7e:3c:ab:83:a3:ec:e2:7f:0a:72:74:db:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Jul 26 07:00:29 2025 GMT
Not After : Jul 27 07:00:29 2025 GMT
Subject: CN=a79d1fc919f436c5a5f3a6d368d575186b19eb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:48:50:ab:70:08:42:18:3e:67:9c:38:a7:
6f:74:3d:fd:5e:e6:52:1d:86:60:fb:b0:4f:cf:72:
71:53:c8:63:d2:c7:97:8c:73:1e:aa:62:b3:70:74:
96:47:d8:9d:d2:74:eb:43:61:b5:be:d3:22:14:bf:
c1:9c:9f:b9:1f:86:fb:7e:ef:35:19:03:89:4c:0f:
44:fa:5a:31:5b:2b:cc:bd:41:79:71:06:9b:e9:65:
c3:e2:34:fc:ff:81:8e:2c:88:bf:7e:f6:2b:d4:06:
8b:cb:c4:cb:4c:c6:9a:49:c8:59:69:44:32:b5:47:
c2:83:d5:d7:14:92:c3:3c:16:28:aa:b8:1d:48:3a:
15:35:db:fc:58:ac:9f:82:8e:c1:40:47:b3:73:a7:
7b:40:04:19:13:f8:6f:a6:26:9c:94:c1:99:ec:d9:
8b:10:bb:15:9f:37:6c:0d:d9:5e:c0:59:ba:7a:35:
4e:78:e8:19:5a:84:57:f9:54:a0:f8:7a:6c:b3:a6:
e0:a4:4d:07:86:df:20:58:09:93:76:98:6a:c6:ca:
52:a5:69:5c:49:f7:c5:11:9b:e2:9f:76:58:2b:fa:
4b:58:73:6e:c3:fb:d6:d9:25:35:94:59:cd:e0:5b:
72:67:f4:ee:f2:b3:ba:42:75:84:f5:cd:0d:33:61:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9D:1F:C9:19:F4:36:C5:A5:F3:A6:D3:68:D5:75:18:6B:19:EB:71
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b0:51:60:94:25:65:70:94:09:22:79:f9:54:ed:5e:fa:a7:
31:79:0d:a7:a2:eb:9b:52:8b:bb:7b:ba:39:a2:bd:be:ef:7a:
a3:7b:8c:ee:19:cc:f7:63:d8:53:e6:4b:b7:b0:76:db:cc:6d:
d4:23:52:09:fa:6f:4f:a9:b0:87:e1:97:a2:c9:d9:c1:b6:97:
6c:4c:7d:76:91:40:14:4d:86:c9:bf:92:3d:19:8e:ec:60:1a:
fd:2e:0f:bd:3f:c5:fe:2e:14:97:c8:1a:b6:5a:a7:2b:5c:3f:
cd:a8:3e:d5:a0:cd:2a:27:89:ef:9a:a1:8e:de:2b:0b:9d:dc:
63:8e:21:70:59:ca:98:c6:68:de:aa:e4:31:87:88:21:14:c1:
bc:c3:01:18:32:de:db:13:f7:5a:ef:28:5e:08:a4:bb:85:b0:
5a:78:c9:58:ce:e1:e9:aa:64:b2:fa:e3:df:56:1a:88:f7:6b:
06:d4:fc:0a:ec:34:67:3c:38:ae:d8:74:75:1a:18:f8:13:18:
8b:7e:cc:ba:ab:15:37:32:f5:30:11:30:4d:19:e7:3d:50:0b:
87:32:33:9a:ef:87:27:49:12:53:a8:d3:11:77:dc:b5:ec:95:
4e:12:0b:52:e8:51:6a:49:b8:06:64:06:2b:52:de:cb:87:5a:
7e:6e:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:55:12 2025 by rpki-client