Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: XeTVc2C37q+EU5/4FwYYo/7Aw86hSTKhd5ZYbCury3E=
Subject key identifier: 2D:9C:B0:70:FF:6E:72:C5:45:74:3C:F3:25:26:CD:19:57:DA:DB:85
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 01976DE286544799AA708D38AC6DFD1B6E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 12C6
Signing time: Sat 14 Jun 2025 10:00:51 +0000
Manifest this update: Sat 14 Jun 2025 10:00:51 +0000
Manifest next update: Sun 15 Jun 2025 10:00:51 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: mSGqOk7fWrEspxPZNTinoH6ItbhmyhO3eMjq/qTAzgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:86:54:47:99:aa:70:8d:38:ac:6d:fd:1b:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Jun 14 10:00:51 2025 GMT
Not After : Jun 15 10:00:51 2025 GMT
Subject: CN=2d9cb070ff6e72c545743cf32526cd1957dadb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:46:b6:d8:d2:f7:05:41:7d:05:d5:a0:65:
21:dc:df:28:87:e5:e7:d8:1a:43:60:ba:16:07:c9:
7a:6e:ae:1d:29:31:30:82:89:ec:2f:83:65:29:be:
99:99:5d:b5:df:bd:be:90:4b:74:cc:99:12:2b:d9:
69:71:06:fd:a4:e4:b0:6a:66:4b:e2:62:3a:94:eb:
80:68:f9:5f:56:85:5e:ce:67:3b:bd:f6:a4:41:d7:
26:9c:5c:1f:70:5e:89:2a:78:9e:58:9c:27:1f:9e:
e8:15:ad:e9:d6:29:9c:a8:03:6b:9a:a2:7b:3d:ad:
f4:08:37:a0:40:b9:b8:cf:6d:0c:b9:c0:b1:9e:37:
36:15:64:1e:3e:71:5a:d5:1f:60:f5:27:3b:3d:92:
19:38:bc:c7:ed:61:24:5a:7f:29:9b:3f:62:19:a3:
d7:9f:ef:71:5c:37:e6:a7:ca:70:d1:ae:d0:4c:04:
05:9d:1a:a7:bd:d6:24:86:95:ac:04:ef:1b:81:a3:
bd:f9:b6:1e:18:58:ed:49:ce:dd:d2:7a:c3:46:96:
8f:e8:c9:aa:7f:4c:fe:a9:33:f3:ee:c6:44:43:18:
ed:f9:89:83:0d:95:fa:50:82:e9:43:44:94:42:05:
af:1a:9d:06:37:1f:0f:6e:27:b5:ec:64:af:ca:cd:
78:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9C:B0:70:FF:6E:72:C5:45:74:3C:F3:25:26:CD:19:57:DA:DB:85
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d8:2c:3c:9d:6b:66:d9:10:e4:08:d2:3e:19:02:c7:2d:44:
c8:a2:ee:3a:b7:89:6e:24:e0:5c:1c:11:68:06:e7:19:1a:47:
b8:05:f1:be:af:1e:f9:cd:1a:71:14:1e:f7:86:36:29:58:37:
de:4b:a8:bc:bb:5b:57:31:08:b4:36:ea:cf:4d:5a:f5:6e:66:
39:a4:9c:a9:e3:8b:41:aa:b1:ac:a2:7c:1a:35:b8:4f:fd:a1:
ce:68:da:a7:70:e0:ba:a8:fd:5a:2c:8f:a3:a1:4c:0a:96:6e:
f7:9d:60:84:59:87:cc:94:55:49:65:06:b4:76:54:cc:62:87:
fd:99:b0:95:b4:a1:cd:5e:c2:57:a8:16:2c:3d:5c:49:36:64:
a2:1f:e6:01:50:bf:6d:a1:a9:ca:a7:9e:e4:8f:09:8d:8d:7e:
cc:1d:15:74:fc:5b:cc:df:43:90:ce:d4:25:0a:aa:fc:06:b3:
ac:ed:86:6e:b7:32:71:53:51:1c:3b:8b:d3:0c:c7:0d:97:80:
85:05:c4:d5:66:da:8f:35:67:1f:38:fe:79:18:fb:71:35:a9:
51:24:51:37:ae:68:ac:1f:36:0a:f4:6b:c7:13:ee:5a:1c:fb:
bf:53:36:85:a7:6b:36:46:34:b0:67:ca:26:e1:39:cf:cb:54:
ba:bd:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:46:03 2025 by rpki-client