Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: 74AC3WTiyuqsLyRoJ63twqQF03TWtkuWHwah9n0FsaI=
Subject key identifier: A4:C1:3C:65:57:F2:13:1E:3F:6D:0F:61:D3:C7:FD:D7:B1:5A:74:8F
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 01974B567F4CF345FEE296B0B3B057ABF78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 0286
Signing time: Sat 07 Jun 2025 17:00:49 +0000
Manifest this update: Sat 07 Jun 2025 17:00:49 +0000
Manifest next update: Sun 08 Jun 2025 17:00:49 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: 0rYU7Yu3QMvCUteUN9oIEebiq6r56QrrLhEvpFNO1HI=)
2: mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa (hash: bNr/zF64vk+SVTrKPbIdCfqu6Sowa5lS9V4LG/Ns2g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:7f:4c:f3:45:fe:e2:96:b0:b3:b0:57:ab:f7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Jun 7 17:00:49 2025 GMT
Not After : Jun 8 17:00:49 2025 GMT
Subject: CN=a4c13c6557f2131e3f6d0f61d3c7fdd7b15a748f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:3e:5d:3a:60:38:40:fd:2d:c7:ef:40:1c:
d8:5b:17:76:26:a5:78:17:76:31:32:2b:c3:e7:bf:
7c:0a:29:59:8d:7b:bf:c2:7f:ca:91:df:81:b6:56:
02:a2:76:16:e5:c2:e4:ae:3e:38:67:4c:d3:07:81:
c3:9e:26:6e:68:17:0b:53:30:f2:bf:be:c7:2d:be:
ab:23:be:77:c7:99:15:5d:c8:7e:f3:e6:ca:29:fa:
88:58:b0:55:ba:84:f4:0e:bf:19:46:04:f0:f9:92:
33:0b:f7:27:e0:e3:e9:0f:0e:95:09:21:70:ee:4f:
bd:14:0c:38:00:2d:0e:7f:ac:b3:82:ff:2d:10:c8:
44:78:1b:7e:2a:9b:ae:c9:94:00:7c:91:7f:c4:ac:
09:c6:7f:86:1b:d3:51:fb:81:97:e0:13:65:b0:56:
df:2c:f8:86:bf:43:94:76:61:b1:e1:4f:d2:c0:49:
4b:cf:fa:15:9b:fb:c6:ec:eb:c3:ba:b3:1e:46:17:
e8:fb:f8:c7:05:ba:23:40:13:ae:a2:68:f9:d9:32:
df:22:b4:94:87:d6:0f:25:c5:61:86:d1:e5:1d:9f:
42:a9:99:f2:ad:d1:6e:18:10:be:13:c3:27:b2:e1:
c2:98:f4:e5:14:39:0a:dc:72:2d:21:32:3a:53:a8:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:3C:65:57:F2:13:1E:3F:6D:0F:61:D3:C7:FD:D7:B1:5A:74:8F
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:97:39:ba:c9:3d:91:3d:50:29:6e:47:4a:08:04:33:3b:e1:
23:df:ff:a6:12:cb:a9:5c:97:d0:6e:df:3a:b2:b5:67:24:e3:
03:45:67:22:f3:72:8d:05:1f:ed:9a:39:57:c7:06:7d:48:ba:
88:9b:80:5c:06:8c:21:70:9a:69:f3:be:f1:da:06:15:16:96:
1e:28:fb:93:40:74:63:c1:6d:dc:d1:08:a6:fe:6e:80:3f:01:
ea:b1:42:71:a6:bd:7e:5c:73:d3:ea:ba:ca:a8:05:be:53:86:
49:9b:33:ba:a5:dc:55:b3:d9:4d:cd:ac:df:cf:94:55:2e:91:
51:5c:e8:12:f2:74:a5:fc:9d:29:c5:8d:c5:d8:f2:a7:85:12:
25:a4:c0:b6:9d:f9:3f:53:8c:79:b6:c8:0b:f3:06:8a:f3:b0:
a1:15:b4:80:4c:eb:f6:b4:c1:78:7c:94:12:6d:7b:dd:53:25:
c5:3b:48:c9:c1:09:fa:00:15:b7:33:7e:c7:fb:b5:f3:9e:e2:
f7:72:ee:02:9e:7d:86:af:d8:bd:b7:69:05:e7:20:7b:27:43:
71:35:23:8e:b5:3c:ec:5a:f9:e9:b9:60:00:60:23:2f:78:e8:
e7:67:ba:46:c1:9d:2d:26:1b:f5:10:00:37:5f:e6:a0:06:4a:
46:87:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:13:57 2025 by rpki-client