Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
File: ROzsULCd1G04TQgbUH0juv71HJw.mft (raw, json)
Hash identifier: 6axZZWJ/uJzdMY3sB1o9eTtBl2vFQ6aXLiiT4x7sH9w=
Subject key identifier: 93:9E:0A:AF:92:58:44:B6:76:90:32:8D:0B:66:34:C4:B6:06:CF:D6
Authority key identifier: 44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
Certificate issuer: /CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Certificate serial: 019749316FF2EA0F90A433C58BA56D4AF4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 07:01:06 +0000
Manifest this update: Sat 07 Jun 2025 07:01:06 +0000
Manifest next update: Sun 08 Jun 2025 07:01:06 +0000
Files and hashes: 1: ROzsULCd1G04TQgbUH0juv71HJw.crl (hash: 6eLpReDSrE6Wetb/B5SJf8RpscdYwtD8/aI1prgrknM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:6f:f2:ea:0f:90:a4:33:c5:8b:a5:6d:4a:f4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Validity
Not Before: Jun 7 07:01:06 2025 GMT
Not After : Jun 8 07:01:06 2025 GMT
Subject: CN=939e0aaf925844b67690328d0b6634c4b606cfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:d8:50:30:76:8d:da:ff:ba:12:83:a7:82:
ad:fa:e2:f0:ac:45:d8:ac:9c:ce:dc:e2:67:00:7b:
e3:a8:7e:ee:7c:80:10:5b:ae:97:fe:1a:71:d9:b9:
1c:1e:2d:f9:be:07:ec:7c:d8:e4:2d:8f:aa:d9:9e:
94:b3:db:0e:e6:bf:71:4f:08:26:c5:d7:12:34:e0:
40:84:4a:ae:be:cc:7d:25:d5:86:f4:55:16:7b:3b:
b9:b8:1f:d8:c4:54:82:8b:97:7c:f5:2d:59:6a:97:
21:fb:76:1d:50:3d:fe:aa:62:83:ee:fe:8b:8f:81:
be:bd:b6:93:15:cf:07:ef:d3:11:8c:38:e4:d2:0f:
23:64:10:71:56:35:c8:97:20:5c:bd:06:41:f1:f0:
e6:78:9a:5a:23:44:d9:53:03:c9:ef:e0:cc:cd:28:
d6:3e:07:9c:51:09:da:f5:e8:a9:5c:cb:8e:04:cd:
2b:c3:af:08:37:ad:a3:bb:60:fc:b8:94:df:88:91:
12:a8:07:c5:ca:fb:ea:8b:0b:09:da:29:90:ec:71:
c0:37:13:4b:67:c0:0d:4e:09:7d:3f:da:82:1b:34:
ef:e2:42:57:b9:22:d9:bc:e8:ca:b9:b9:96:63:e6:
4c:1d:30:a7:1b:89:2f:3a:fe:f1:6d:26:63:2e:31:
e3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9E:0A:AF:92:58:44:B6:76:90:32:8D:0B:66:34:C4:B6:06:CF:D6
X509v3 Authority Key Identifier:
keyid:44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:b6:2a:5c:a0:f0:a3:0e:a4:b2:4e:d7:69:53:26:e7:11:
8f:8d:6b:0c:ce:24:8c:81:67:c6:be:e6:61:1d:8d:dc:5a:b5:
0c:ef:7c:01:ba:92:1d:63:f9:05:d6:de:56:81:32:59:8f:49:
64:54:48:7d:e6:c9:91:ff:b8:75:82:fd:98:6c:bd:c2:e9:31:
d1:87:f7:99:b2:9e:92:20:40:b2:50:bb:88:13:de:f0:73:7b:
6a:7b:a4:3a:8b:8e:77:06:d1:b0:de:a7:2c:ea:d9:d1:ff:d3:
36:20:c3:71:2f:8c:8f:96:a3:24:b1:ad:e8:17:15:3e:80:e2:
b1:81:80:be:f2:d8:be:b1:e0:47:a1:09:32:9f:b8:24:d1:53:
da:45:a7:8b:3a:02:e7:e7:49:c9:a3:e1:85:49:81:4a:be:94:
83:a6:9f:88:0b:3a:e5:9d:59:70:70:28:71:88:09:52:89:94:
da:f1:6e:70:70:1d:40:a2:31:e3:9d:18:66:89:cc:4f:eb:36:
f3:5b:ce:05:03:b9:2f:32:28:f1:1b:1e:62:6f:e3:1a:14:c9:
2a:c8:55:09:69:b4:dd:5b:3c:ca:2a:a1:1e:d9:96:b7:f5:9f:
7d:db:89:2a:9c:23:32:45:6f:92:33:4c:e7:12:dc:73:8a:fa:
0c:03:37:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:21 2025 by rpki-client