Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: YGG1eacFjkTf1JHTU15VQJOE1IxoP5OpDLFXcgXsobM=
Subject key identifier: 8B:83:79:9E:CC:C2:07:47:84:DD:C4:E6:A2:21:76:FE:D3:B5:25:3C
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 0197488C95D797F7045491F8BDBBAD35DDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 04:01:02 +0000
Manifest this update: Sat 07 Jun 2025 04:01:02 +0000
Manifest next update: Sun 08 Jun 2025 04:01:02 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: ROdXmAevV572SBC9vDXhc6PfzBtjXFUm3OOGjyRs0nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:95:d7:97:f7:04:54:91:f8:bd:bb:ad:35:dd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Jun 7 04:01:02 2025 GMT
Not After : Jun 8 04:01:02 2025 GMT
Subject: CN=8b83799eccc2074784ddc4e6a22176fed3b5253c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:22:d0:96:48:66:28:40:0d:c0:f7:02:8c:
8c:75:f9:3d:1f:98:da:90:f1:da:ba:27:9b:6f:ed:
bb:6b:68:8a:2c:9c:e0:c1:99:93:31:38:ed:a0:c8:
4c:11:6f:be:a1:12:17:ea:de:56:d0:49:78:36:dc:
ee:f0:82:bc:fe:ea:8a:de:ea:bd:1f:65:0c:7c:54:
a6:a0:94:91:2a:d8:e8:e7:d8:3b:fc:96:3e:aa:11:
1e:ae:86:de:00:4c:b6:e0:78:6b:55:dd:45:a3:2c:
da:5d:87:bd:58:06:ea:0e:f7:3d:f3:25:5a:3d:c6:
72:f9:bf:13:71:ef:95:98:25:ed:3c:5c:f1:7d:c4:
2f:e2:38:b6:41:fc:3c:eb:8e:e4:bb:b0:71:2a:6b:
65:38:c2:eb:ba:71:8c:05:d4:e4:3b:3b:35:94:e2:
ce:10:e1:a2:a4:ce:83:fc:4d:06:51:23:cf:e9:98:
8f:f0:a3:76:41:fd:ab:b6:2c:11:d1:1e:ab:ed:9a:
be:87:44:a2:16:95:be:34:e8:90:2b:41:c4:9d:c7:
79:f2:eb:27:31:94:63:33:48:0c:75:1b:ae:7a:c8:
94:70:ae:81:1c:33:bc:20:aa:c3:30:92:3e:fd:6f:
77:79:c3:66:6b:40:42:d0:61:13:5b:ac:2e:72:29:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:83:79:9E:CC:C2:07:47:84:DD:C4:E6:A2:21:76:FE:D3:B5:25:3C
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bb:17:1f:15:29:b0:80:49:79:e9:15:f1:d6:06:e4:03:75:
a5:13:24:ec:10:79:e5:ef:e1:08:d3:eb:b5:a7:03:b5:f7:cf:
4e:ed:84:7a:2e:59:86:13:b5:2b:35:ef:f1:7d:a7:22:25:e0:
21:62:75:20:a4:52:ec:de:e2:4b:2c:5e:b5:ad:9a:7a:e2:a8:
a1:2b:4c:da:c9:a8:ae:fb:3d:c0:34:fd:f7:ab:50:83:da:c6:
99:97:21:b9:bf:d2:e7:49:df:44:e1:1d:cd:c8:78:fd:39:0e:
f3:09:e9:fc:0c:d2:99:3c:59:e4:79:02:8b:34:d9:54:94:f1:
33:0c:68:0f:b2:ba:51:3c:12:f6:51:4f:09:a6:90:54:eb:45:
52:c8:16:f3:b4:d4:3b:d7:c4:01:32:51:ed:cd:ec:6c:dc:1b:
25:15:1f:03:68:72:69:90:86:23:60:c8:52:72:1b:1c:be:55:
40:39:bc:03:b4:a9:c3:25:bf:81:50:15:c3:14:e0:90:b6:ac:
91:03:95:12:e0:7a:8f:88:2a:3d:7a:98:f9:c3:e5:b1:d6:8e:
b3:b0:6b:7c:c4:c6:e8:2e:9f:f9:10:ee:de:b8:49:be:74:89:
1b:a2:e6:59:4a:23:c8:38:f3:59:12:64:bb:ec:88:69:20:be:
33:63:12:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:42 2025 by rpki-client