Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: LsOdFATMSzpLyTP9euAN3DpFiVPEoxjPFDsQ51eUOBE=
Subject key identifier: 55:57:A4:42:B8:F5:0D:0E:D3:E0:12:A9:D5:FC:51:E5:C2:79:FC:A2
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 01974F6A7610EBC9E7866FC6B95EC004ABD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 0B13
Signing time: Sun 08 Jun 2025 12:01:06 +0000
Manifest this update: Sun 08 Jun 2025 12:01:06 +0000
Manifest next update: Mon 09 Jun 2025 12:01:06 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: /WWc2JfALhaTbcftBvqGdLYxov3L/Wk7T6e8Tf+hkk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:76:10:eb:c9:e7:86:6f:c6:b9:5e:c0:04:ab:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Jun 8 12:01:06 2025 GMT
Not After : Jun 9 12:01:06 2025 GMT
Subject: CN=5557a442b8f50d0ed3e012a9d5fc51e5c279fca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:d2:3c:26:45:66:0a:52:52:16:2c:0e:43:
20:3c:c1:59:37:25:06:b8:32:3e:4b:48:52:c9:3f:
ae:98:02:4c:98:97:a0:3d:12:ef:86:6a:9d:38:33:
64:6f:b3:77:29:93:70:c9:5d:ec:88:42:69:fe:48:
8d:d5:43:3b:08:1b:2a:25:5b:cc:8c:a3:05:4a:3b:
3e:79:e0:4c:5b:57:5f:0b:38:00:8d:ef:d9:db:04:
c7:90:6f:52:d3:24:3d:97:2b:73:8e:04:cf:0f:0b:
18:e6:33:5a:50:44:25:35:86:58:3c:c1:44:2c:7d:
5e:79:41:be:8d:97:36:23:a3:6b:9f:7f:00:64:e4:
8a:1e:23:5b:17:12:77:64:b5:76:2a:41:cb:03:22:
a7:44:38:1d:96:5f:b6:8b:be:ca:3f:e4:df:d3:f6:
9a:89:2b:fe:9f:50:14:02:8a:63:6b:54:f8:18:f7:
b9:9a:f7:5c:8c:74:62:a4:a1:ba:c9:18:33:39:e1:
7b:1a:aa:01:f5:08:e6:4e:e7:23:9e:65:dd:9a:8c:
db:fa:5e:28:e0:62:ff:38:ca:64:60:13:f6:f0:2e:
c5:39:7c:e4:06:de:92:a6:30:2e:66:e4:f6:81:dc:
79:a8:fd:ac:bc:5e:90:30:34:84:27:4d:5b:75:9f:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:57:A4:42:B8:F5:0D:0E:D3:E0:12:A9:D5:FC:51:E5:C2:79:FC:A2
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:04:e8:bd:9c:12:14:f8:4a:45:ce:b2:76:34:bc:fc:3e:ed:
83:08:07:78:2e:df:61:e5:3f:cd:75:7a:18:c0:a6:c0:be:f2:
8f:6c:5a:c4:d3:d7:6a:17:77:72:aa:4e:8a:23:e6:b8:eb:6d:
e1:49:4e:88:99:59:57:81:4f:61:5b:73:89:01:dd:26:ac:e9:
06:3e:0a:d4:4e:5e:d5:3f:40:b0:7a:4c:7c:f7:a7:0f:6a:8d:
57:07:4f:70:ac:b8:a1:69:07:80:61:64:68:a7:d7:14:fb:85:
19:d5:7b:92:6d:87:c9:ff:31:78:5f:df:12:09:83:1e:20:1e:
e8:95:10:90:28:18:eb:de:13:77:38:ab:3c:21:fe:02:13:00:
05:f6:03:68:c2:ff:0f:fa:ea:f0:9d:ea:ce:18:2b:71:75:59:
e9:3e:bc:16:b2:31:d9:db:84:07:f2:dc:93:fe:fa:35:dd:3c:
05:c5:50:7a:22:e1:ce:26:95:86:db:61:06:2e:a4:84:68:35:
2a:81:2b:7e:d6:96:8c:34:30:e8:f0:fc:8d:53:a1:2d:b1:63:
d8:28:f3:03:34:9d:13:18:f2:9b:77:54:2d:88:d1:41:01:c2:
5f:93:bc:85:be:f9:64:27:7e:f2:50:f0:e4:0e:91:88:29:02:
7e:d8:d6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:59:18 2025 by rpki-client