Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier: Sahp/6qt19kQ8Bo4HMvwGyKQRAUpTxgEWfkcL2JrVww=
Subject key identifier: 89:EF:05:83:AD:12:5E:10:B5:8D:A4:58:50:58:E9:80:F7:46:0D:7C
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial: 01975EDD0D559B378ED432A33E50043244A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number: 0243
Signing time: Wed 11 Jun 2025 12:00:34 +0000
Manifest this update: Wed 11 Jun 2025 12:00:34 +0000
Manifest next update: Thu 12 Jun 2025 12:00:34 +0000
Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: A+2AsaGInNcjxif3vLBYWKE7rglqbzTfABOeM6GLaWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:0d:55:9b:37:8e:d4:32:a3:3e:50:04:32:44:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Validity
Not Before: Jun 11 12:00:34 2025 GMT
Not After : Jun 12 12:00:34 2025 GMT
Subject: CN=89ef0583ad125e10b58da4585058e980f7460d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:c6:da:4d:00:73:65:09:86:52:ac:78:05:
7d:86:e3:1b:83:c5:09:05:df:70:6c:cc:34:5b:a4:
a9:58:cc:33:19:49:2e:9c:08:f9:50:7b:10:1e:bb:
4a:4d:f8:de:70:5a:23:dc:85:a6:66:ad:0a:72:78:
ec:c6:7d:c8:39:ec:b0:80:c3:34:5e:00:52:bb:5a:
e3:8e:ae:33:7a:0a:3b:53:fa:3b:a9:13:bc:e0:a8:
0b:d1:58:87:29:33:ed:8c:df:90:d6:25:c1:a9:02:
03:cf:ee:ba:48:ad:c9:9c:61:e5:8c:71:e4:2a:b5:
84:f6:0b:9d:44:a4:a4:2e:3e:7e:50:97:dd:38:81:
23:59:4a:79:06:69:56:c9:bc:af:70:b0:44:d9:df:
0a:32:f6:7a:97:e8:85:65:00:3b:eb:cc:66:d1:aa:
fe:54:17:bd:70:e2:7a:47:5b:fc:0b:92:5d:ee:24:
10:02:b4:42:f4:09:11:77:e6:16:b4:5d:d7:27:07:
0c:30:bb:8a:dd:6d:52:62:3b:c2:16:cc:41:ae:e2:
c2:9b:11:0b:ac:c3:f9:91:8b:83:99:2d:da:9d:b8:
d0:2d:17:1d:85:c8:56:4e:9d:73:7a:58:df:1a:90:
17:ea:f8:47:ec:f0:f9:a4:2c:33:ca:d0:62:fc:88:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:05:83:AD:12:5E:10:B5:8D:A4:58:50:58:E9:80:F7:46:0D:7C
X509v3 Authority Key Identifier:
keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d0:00:29:52:fc:6d:59:b7:ad:37:be:a0:f4:4d:95:ef:53:
27:a5:65:54:f5:3d:91:7c:04:de:c2:2d:f7:54:dc:e8:36:39:
30:05:9f:a7:e9:95:03:f9:a1:78:fb:dc:ed:a3:6b:4f:c3:73:
80:44:5d:ed:37:c7:63:88:72:f0:8f:d6:3d:13:47:4d:c1:71:
26:d6:6d:b2:a6:9a:ef:24:a5:65:12:55:48:80:9a:4f:01:72:
5d:ba:01:71:ee:0d:c2:2a:8b:3a:53:93:44:8e:d9:0e:30:1b:
d4:03:de:bf:1b:e4:f5:56:d0:5d:46:15:2b:f3:c9:e8:ef:9a:
44:4d:4b:f3:71:ef:3a:1a:a8:ee:75:88:61:02:e6:86:18:8d:
ed:b2:78:1a:83:4b:78:07:97:2d:2a:8b:cc:07:34:52:a6:5a:
f8:23:be:44:ee:3e:90:ce:c0:41:71:c6:71:5f:31:c0:39:65:
f1:b5:50:c1:84:1a:7f:d9:e9:77:27:9e:32:23:30:5c:2d:89:
f4:d2:cf:f8:3e:ed:96:0c:7a:a4:00:5b:f2:5d:58:4d:73:19:
79:b9:fb:ae:f1:35:1b:ee:9e:e7:95:5e:d6:dc:06:0d:cf:61:
ad:2f:b2:f8:97:5b:e3:4c:60:31:30:b9:4c:01:c6:35:12:2a:
cd:e2:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:26:24 2025 by rpki-client