Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: xX0Vhj0XNKh+hxp3nLf3+FP1qcMzDJVvbKxW01Batq0=
Subject key identifier: 0F:65:0A:53:0E:0C:8A:9C:FA:63:9F:53:B6:AB:F2:F1:A9:2C:2F:12
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 0197523511352B80F346FA143AE2F193D53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 0EA0
Signing time: Mon 09 Jun 2025 01:01:38 +0000
Manifest this update: Mon 09 Jun 2025 01:01:38 +0000
Manifest next update: Tue 10 Jun 2025 01:01:38 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: cdlASFnChRgnzeK65UkhGZwzgJLXlloofuOGQnEf4IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:35:11:35:2b:80:f3:46:fa:14:3a:e2:f1:93:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Jun 9 01:01:38 2025 GMT
Not After : Jun 10 01:01:38 2025 GMT
Subject: CN=0f650a530e0c8a9cfa639f53b6abf2f1a92c2f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:a5:d4:38:4f:36:e9:00:e1:da:1d:3b:00:
54:ca:bf:78:2c:a9:54:95:0c:84:c5:27:44:18:c1:
f2:2c:a5:20:7e:31:90:dc:a4:c0:5d:03:e7:09:29:
f5:ff:9b:18:a1:fa:9f:f5:e0:ee:68:bc:e6:cb:db:
a5:12:26:0c:26:a1:bc:53:c2:f4:cd:ae:5f:51:42:
43:3d:09:68:aa:eb:b0:9f:27:b1:8a:e9:25:49:79:
df:06:ee:8f:35:4c:96:bf:c6:35:8d:f0:77:81:a9:
f2:a1:c4:17:10:3d:69:ae:7b:67:e3:39:73:38:fa:
f2:96:04:d9:f4:69:6a:25:51:ed:17:3f:74:86:71:
96:d3:c5:49:b7:17:b8:18:bc:25:e7:b1:46:ad:95:
a2:85:03:b2:95:80:05:72:4f:30:23:42:8a:5f:1e:
59:4e:a9:05:c5:fb:2c:2b:e3:ad:3a:fa:d2:80:23:
79:f3:3e:00:c4:c2:e1:ad:25:b1:9e:36:9b:6a:bb:
f3:01:11:c7:e1:38:99:c3:4c:2c:d5:bc:a6:f6:76:
e9:99:0e:2f:d1:11:d8:c8:91:26:ea:2c:d6:a7:f1:
5d:b0:81:4c:68:15:fd:f5:63:d2:6a:b9:c6:6a:20:
af:83:f3:e1:2a:14:87:a2:8f:3e:27:67:8a:7b:bb:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:0A:53:0E:0C:8A:9C:FA:63:9F:53:B6:AB:F2:F1:A9:2C:2F:12
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1c:f9:2c:03:21:f7:62:ed:ef:ea:d7:6a:4c:45:8b:f5:6c:
e7:17:e5:ed:53:b4:1e:ff:62:8f:63:fa:92:76:e5:82:9a:be:
ef:86:c2:a1:a4:25:29:bf:58:9b:e3:d7:c9:a4:f0:54:18:34:
e2:e4:87:1c:33:c4:52:04:7e:d3:3d:8c:95:2b:e1:55:2a:3e:
e0:51:7b:6c:f5:1c:5a:eb:d5:07:98:9f:8e:29:5b:74:18:f7:
f3:10:8a:d4:f0:8c:be:bd:91:7c:d4:cd:87:5f:62:d3:84:7b:
be:27:f3:02:b7:40:70:23:32:12:7f:19:25:22:0a:f3:3a:d0:
f9:9c:fa:8e:28:d0:dc:ba:c3:33:8c:ec:63:21:5e:f2:43:18:
f1:39:e9:c9:9e:1c:72:99:10:b9:94:6b:64:63:fb:7a:e8:56:
49:e9:07:99:dc:28:59:2c:f8:c4:62:f6:3f:93:ca:b8:e7:29:
6e:76:9e:e5:97:1d:cc:2e:75:ab:74:18:55:3c:ec:b5:b5:59:
7e:90:a6:2b:62:4e:96:82:8a:52:95:02:b6:e0:31:c3:11:82:
83:aa:ca:08:f5:df:b0:2e:d8:20:52:99:95:0f:ab:44:9c:39:
bb:15:07:05:f9:df:7a:ff:06:0d:23:ae:44:ae:f7:f3:df:31:
d0:2f:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:27:06 2025 by rpki-client