Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: 3AvN80BM672oZH5V6Q3ayTA0m6bh7uHc34G3HsNa4oo=
Subject key identifier: 23:0C:3B:70:C7:B3:F3:B9:19:CD:E7:AF:C2:AA:C1:4E:23:41:68:E5
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 019748FA6AC822E24BA2677EDD73FD4CEACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 1411
Signing time: Sat 07 Jun 2025 06:01:00 +0000
Manifest this update: Sat 07 Jun 2025 06:01:00 +0000
Manifest next update: Sun 08 Jun 2025 06:01:00 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: tnyd3xje1qMWseSh7SLUnEr55jZxVmPxAA6ViXc8UOk=)
2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:6a:c8:22:e2:4b:a2:67:7e:dd:73:fd:4c:ea:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Jun 7 06:01:00 2025 GMT
Not After : Jun 8 06:01:00 2025 GMT
Subject: CN=230c3b70c7b3f3b919cde7afc2aac14e234168e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:0a:0f:27:a8:7f:09:2e:ea:4c:ba:b9:7e:
a2:f2:3e:c5:22:74:ed:cc:58:c4:e2:cc:01:29:ad:
46:eb:1e:95:27:67:ed:f4:60:57:c0:3c:a1:72:9b:
09:47:03:16:0f:ad:81:25:55:ec:f8:21:4c:10:69:
1b:86:27:ac:ea:6b:32:14:86:83:a0:90:80:cb:af:
73:f4:f6:35:91:fc:5d:54:be:b1:f6:e3:84:93:a1:
46:15:50:bf:bd:20:5b:10:10:4f:cc:82:ea:f7:56:
1a:98:a6:c6:da:5d:df:bb:07:c7:87:90:9c:6d:7d:
ba:3d:f0:59:6e:b5:54:f8:94:00:ae:bf:b9:81:20:
2a:e3:30:97:06:6a:58:0c:99:4a:2f:75:d4:49:5f:
fe:bc:44:86:7e:79:19:59:6c:3d:29:52:25:b2:48:
d3:5a:71:2b:4f:10:d4:32:b7:e7:e6:20:30:b9:55:
37:f4:2a:72:e3:eb:85:a1:d5:8a:3e:20:b7:c0:d8:
6e:30:b8:79:b7:13:a9:01:b5:7d:48:b5:a1:8d:e4:
6c:da:ef:2c:2e:27:03:45:11:8d:88:d4:ca:2d:65:
e8:8b:83:0c:6a:f9:19:16:f1:43:7b:31:b1:6d:7b:
5f:d5:54:d2:7d:f5:b3:84:35:88:e4:f2:84:18:c5:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:3B:70:C7:B3:F3:B9:19:CD:E7:AF:C2:AA:C1:4E:23:41:68:E5
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1e:1c:2b:1d:5d:1b:be:d3:85:91:41:fb:d5:59:c4:67:df:
7e:9d:13:8b:1e:46:52:2f:70:3b:bf:84:fe:c8:03:17:7f:f1:
ec:80:2b:b1:02:79:34:df:cd:06:c3:46:6b:f4:01:3c:ce:90:
93:35:95:c5:c0:24:2e:ee:1f:38:37:a8:41:88:32:fd:e0:17:
d9:db:ab:99:e8:8c:b5:c1:c2:76:b1:62:32:e3:dd:3f:81:48:
85:31:48:39:f6:38:0f:4c:77:9d:d7:87:52:52:ef:8a:bc:cf:
6d:99:3f:43:60:e4:25:4e:a7:74:80:e5:34:c7:f3:69:cc:24:
90:23:04:ec:2e:17:4b:ff:02:b2:ec:a7:3a:52:d0:b1:5d:c0:
26:3a:1b:64:af:0c:c3:2a:ee:b6:01:52:1d:7b:72:99:a8:c0:
a3:e2:11:f4:8e:60:64:1e:1a:7f:86:e0:04:81:52:47:c6:14:
56:6f:01:e6:51:51:48:54:d9:40:99:2b:e2:bf:11:8c:ce:05:
6c:2c:8d:93:b2:55:99:08:a8:63:a2:e4:fd:b3:c8:57:ed:a6:
b7:de:6f:c1:c9:14:f5:73:cb:03:f7:fb:9f:90:7c:d7:31:21:
d7:00:19:3e:32:71:79:52:1e:38:50:18:39:4a:dd:c4:8f:69:
5d:97:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:37:18 2025 by rpki-client