Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: IAeiof/cntdIR0b5pCpau7BeIRE8JIWAg/isqsREtqk=
Subject key identifier: EC:9D:30:C4:39:2B:F5:BF:EE:E8:D7:81:6F:36:72:1F:2F:08:45:2B
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 0197470BD41656D1E3D69A25CC9D4DEC2896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 09DC
Signing time: Fri 06 Jun 2025 21:00:46 +0000
Manifest this update: Fri 06 Jun 2025 21:00:46 +0000
Manifest next update: Sat 07 Jun 2025 21:00:46 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: nCAT+S9Kogmmt0s+pSkkwV+W2knjgKIjr4dB+PVAzs0=)
2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:d4:16:56:d1:e3:d6:9a:25:cc:9d:4d:ec:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Jun 6 21:00:46 2025 GMT
Not After : Jun 7 21:00:46 2025 GMT
Subject: CN=ec9d30c4392bf5bfeee8d7816f36721f2f08452b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:ed:30:eb:58:a3:c2:d1:34:36:a8:c4:f1:
38:d3:38:74:70:c0:1f:a6:e6:48:5e:e8:dc:de:4a:
db:74:51:c0:6c:46:e0:18:04:62:47:48:d0:5e:d8:
73:3f:69:78:28:53:c9:df:30:0b:59:11:4c:b1:1d:
cc:8a:05:df:a0:3a:df:9f:d2:7d:7c:1c:cb:45:66:
75:2e:97:ea:97:09:28:f1:d7:20:4c:e0:19:80:a5:
c1:e8:ae:a4:96:51:5d:03:cc:25:86:eb:a8:a2:a0:
19:b0:5f:98:20:e8:55:27:b8:bd:10:af:e7:06:42:
0d:79:83:56:fc:dd:2d:86:a6:51:61:e7:a8:14:9d:
8f:52:f8:d7:bf:4d:33:49:b2:5b:55:9b:0a:33:2f:
52:91:5e:9c:b1:c7:fa:3d:64:46:b2:48:05:3f:b2:
0c:63:7f:d7:0d:9e:24:6b:f7:b2:49:4e:5b:9a:02:
d0:c3:ca:3e:7b:30:5a:20:e3:8b:b5:d6:fc:80:41:
2e:5a:02:52:66:0c:74:3b:b3:4f:0d:47:f9:24:c8:
70:b0:c2:5f:7d:da:3f:e2:12:86:b1:44:b9:be:71:
f5:3c:f8:7b:0a:07:05:55:23:12:67:03:36:05:22:
6a:64:b2:a4:ec:34:e2:7e:f4:48:06:1b:e1:fd:ca:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:30:C4:39:2B:F5:BF:EE:E8:D7:81:6F:36:72:1F:2F:08:45:2B
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c0:58:22:b2:67:a9:0f:5b:a3:0e:95:9a:c5:b6:00:90:58:
4e:dc:c1:10:05:0f:3b:5f:5e:19:67:dc:50:41:a6:01:e9:f1:
62:c8:db:ca:4b:0d:d0:cc:93:f8:1d:36:d6:42:ee:0d:16:97:
7a:9b:31:4d:6b:84:00:4c:79:10:31:6a:b7:7b:c1:c0:62:7d:
4c:d8:b5:32:e3:64:90:94:00:74:1f:a3:9a:e1:a5:39:92:ab:
1f:47:87:72:c8:ce:96:da:3e:bb:87:5f:84:75:89:df:97:6d:
cb:8e:79:25:cd:26:10:cc:c2:2e:bc:80:d6:6a:af:6a:2a:bf:
23:04:30:1c:34:b8:4a:4b:e3:49:b3:fb:e2:0e:72:5f:98:bd:
6d:d8:f6:e7:07:48:30:a6:e3:1c:09:41:cb:d0:1e:1c:e3:22:
6c:4e:9a:0f:1c:98:21:da:6d:57:8b:6b:89:93:de:35:7d:90:
1c:a1:c4:51:13:7f:ba:91:c5:85:9a:a9:b3:0a:03:95:0f:23:
87:e4:4b:85:be:3e:7f:3f:70:60:e7:78:21:3c:09:a1:50:4a:
54:e9:bb:4c:7d:ad:3e:60:a2:a9:29:cf:fd:20:72:e5:95:00:
cb:95:75:45:6f:65:dc:34:c8:ed:ca:97:30:7c:29:9f:b9:32:
60:2a:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:33 2025 by rpki-client