Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: L0m1AX+UI6hLuZ9+VEOZaJPgz/9IZ7PpkzG1G9cN0Z4=
Subject key identifier: 70:C0:EA:1E:51:20:33:67:C5:AB:24:03:46:43:5F:11:4D:7E:88:D1
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 01974A7A8F3CA62F1A7C87B0ADFFB26B6557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0989
Signing time: Sat 07 Jun 2025 13:00:35 +0000
Manifest this update: Sat 07 Jun 2025 13:00:35 +0000
Manifest next update: Sun 08 Jun 2025 13:00:35 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: wL9NJpTrVnro4WBZ6YhBJoaiyK9873ivq8XYX1Qn6go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:8f:3c:a6:2f:1a:7c:87:b0:ad:ff:b2:6b:65:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Jun 7 13:00:35 2025 GMT
Not After : Jun 8 13:00:35 2025 GMT
Subject: CN=70c0ea1e51203367c5ab240346435f114d7e88d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:82:a3:a2:16:47:66:85:02:62:61:26:59:
f7:0d:d4:56:38:5a:eb:0d:b1:db:c3:51:3c:3a:1f:
eb:88:28:0b:3f:3f:e3:e4:8e:fe:19:f0:d3:63:84:
60:ec:8d:3d:fc:d3:c2:88:a7:34:6c:3f:83:c4:2c:
8f:aa:49:83:83:01:46:f9:56:57:87:35:13:df:3a:
77:6a:5c:9b:5a:0a:9c:2e:fe:4e:a0:cf:3c:2c:51:
aa:31:00:41:42:b0:48:9a:61:7c:2a:48:c7:79:72:
be:aa:7e:82:31:9a:32:ef:bc:c2:84:1a:a9:10:24:
4b:b3:50:90:c1:16:9e:b6:77:a6:4d:36:dd:3d:9d:
b5:76:e6:08:3e:cc:7a:d6:11:b5:0a:02:98:78:fd:
c2:23:e8:5e:ab:54:ba:b5:00:e2:4b:66:85:62:11:
90:02:5b:8c:9d:4a:14:40:6c:e5:9d:a7:93:88:38:
65:4a:ce:cd:24:93:04:3f:bb:a3:22:8d:c5:16:1a:
88:e8:a6:f7:df:80:1e:74:ea:10:8d:66:1b:c5:de:
fa:0d:56:0f:41:2f:43:2f:3f:1f:89:63:67:62:3d:
7c:f8:c6:df:bd:c0:1d:b2:38:b6:2e:29:e0:54:b8:
64:5c:ba:e5:9b:03:43:1d:5c:d1:90:32:88:6a:4f:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C0:EA:1E:51:20:33:67:C5:AB:24:03:46:43:5F:11:4D:7E:88:D1
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:e3:61:dc:11:02:cb:b1:09:9d:06:09:31:1d:60:c5:ee:
f3:ac:ad:9d:af:d9:e2:68:df:25:c2:95:84:72:2c:75:22:69:
db:a8:84:4a:2a:23:d8:c7:e0:5d:3c:2e:5e:3b:31:5c:96:4b:
41:83:9f:c1:e0:04:f6:30:89:62:68:89:fe:7a:71:24:36:b6:
ee:3e:d7:29:3d:22:67:78:4b:cd:e2:38:02:ea:e5:a7:51:48:
58:93:fb:2e:18:d8:db:d1:91:a8:95:35:a9:fd:84:f1:68:6f:
0e:65:33:6b:7a:ae:20:c1:e1:28:bf:30:c8:d1:0a:9b:f8:f9:
57:57:f4:2d:bd:7c:0e:1d:a8:13:48:85:ed:ca:d7:33:0b:29:
29:41:7b:94:dd:6c:6a:99:18:11:c9:6a:08:3c:16:7c:27:75:
7c:f5:a7:f1:a1:3b:29:76:c2:cd:4e:14:f4:f3:d2:8d:19:c2:
1e:3f:54:04:38:3f:4a:4d:75:91:a3:cb:2e:fb:fb:77:44:f6:
6e:c5:56:98:af:22:86:cc:19:5a:7a:b7:ec:b7:62:07:ff:8c:
87:4f:39:f8:ca:6b:7f:7f:cc:ae:9e:13:71:11:c3:49:4f:52:
97:49:0b:23:23:c6:58:25:54:4a:c1:f2:93:59:57:2c:68:08:
4d:78:f0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:59 2025 by rpki-client