Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
File: rNbwonJnY07OGVnN2gPOvc5Yp70.mft (raw, json)
Hash identifier: zfn4zhyW1tnBD9QjSeO+aK8WVT5WkI2ZLiN+f1xdWic=
Subject key identifier: 95:9A:04:D4:5E:9A:CF:70:AC:0A:3E:53:0F:22:7A:8C:65:7C:58:C6
Authority key identifier: AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
Certificate issuer: /CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Certificate serial: 01974DB2AB32289A3E50D6DA506583113DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
Manifest number: 05
Signing time: Sun 08 Jun 2025 04:00:44 +0000
Manifest this update: Sun 08 Jun 2025 04:00:44 +0000
Manifest next update: Mon 09 Jun 2025 04:00:44 +0000
Files and hashes: 1: rNbwonJnY07OGVnN2gPOvc5Yp70.crl (hash: 2C+j9VnTAgvvrSOZngtDjMJoiSnbmjUBUA89EMtEdg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:ab:32:28:9a:3e:50:d6:da:50:65:83:11:3d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Validity
Not Before: Jun 8 04:00:44 2025 GMT
Not After : Jun 9 04:00:44 2025 GMT
Subject: CN=959a04d45e9acf70ac0a3e530f227a8c657c58c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:30:81:f5:6d:e2:65:a7:e7:17:a8:8f:8e:
1c:e9:d5:d4:3f:f9:8a:56:82:3e:c6:e6:24:88:38:
c8:0f:41:e4:b4:3f:38:e7:1f:ab:3a:41:19:ad:77:
69:e7:a3:87:0c:30:0e:a2:3a:ae:33:e5:67:96:48:
bc:6d:f9:c7:2a:f8:f2:88:76:b3:1b:eb:d5:6a:62:
a6:66:15:cf:f0:eb:db:bb:bf:49:97:c1:c9:97:de:
31:8a:24:bc:35:7f:a1:5c:32:66:30:4c:4d:28:6b:
3e:e4:07:aa:27:57:84:49:dc:b9:91:45:ad:6d:d8:
b4:44:0b:b7:4e:6a:0e:c6:ba:0c:38:49:87:6e:88:
87:54:90:59:17:3b:78:3a:85:99:79:7e:ae:0d:3f:
3f:79:eb:52:c8:b9:d6:e0:fb:c6:09:e4:72:5a:3c:
83:04:a0:89:40:ff:ee:87:ca:0f:b6:b8:18:a0:d1:
4f:83:a4:2f:9c:aa:7a:d3:75:07:62:5a:fe:a0:04:
15:f4:13:05:52:e0:04:f3:ff:20:6a:70:4e:2b:ac:
f4:dc:39:1e:1a:b0:3a:a9:98:8d:ea:83:ee:36:3c:
b8:db:04:c9:e3:5d:12:75:9e:61:08:bc:50:67:09:
16:c2:e2:79:6a:e2:3e:26:2e:ab:2d:27:39:46:dd:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9A:04:D4:5E:9A:CF:70:AC:0A:3E:53:0F:22:7A:8C:65:7C:58:C6
X509v3 Authority Key Identifier:
keyid:AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:07:1a:19:32:93:1f:7c:51:ce:b8:7e:a6:87:37:80:8a:99:
80:47:5d:f4:ee:9e:b8:ad:6b:76:b5:b4:ed:c4:f3:fa:f1:db:
a6:a1:bd:21:19:6b:5f:63:27:1b:ee:00:37:e4:26:ca:c4:07:
94:23:23:10:89:1c:5c:25:39:ae:d4:06:57:80:1f:98:18:10:
6b:d7:79:ff:4a:b4:c6:a7:f3:28:c7:f2:e6:25:b4:4e:87:af:
fd:b5:37:c5:28:85:63:e8:f5:2c:88:f5:45:ef:e4:63:4a:c3:
de:7e:86:d3:6d:30:02:4a:2f:13:43:f3:26:e5:c6:25:b8:a9:
7a:b8:3f:f4:ea:a6:2a:13:de:6c:6e:68:a1:6f:e0:4c:76:23:
19:a5:0f:43:22:6f:6f:02:95:0b:97:cb:86:44:cb:f0:98:d5:
3c:a2:01:c8:04:a6:95:24:e8:e9:8d:b1:7b:cd:22:65:56:34:
f8:38:67:87:cf:37:7c:17:91:39:fe:13:21:de:8b:63:56:f1:
93:7f:0b:e2:3a:8b:5f:1a:56:dc:3a:77:ba:10:da:36:e2:70:
b1:a6:36:37:b1:6f:26:76:92:cd:16:1f:5e:67:a4:1d:ff:de:
73:53:92:bb:b3:81:77:6d:d6:82:bd:f0:7f:1f:a1:40:80:e6:
4a:12:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:33 2025 by rpki-client