Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: yZLMq4mlSuq1ViYSGLaiUKA9BQlthm65UNGwtHfbTd4=
Subject key identifier: 2C:6E:A5:0C:DB:25:F1:50:C6:8E:70:DF:14:8D:28:DC:B3:15:58:D6
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 01974D4545FA402DD6F9709DAEBB447CDC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 123C
Signing time: Sun 08 Jun 2025 02:01:14 +0000
Manifest this update: Sun 08 Jun 2025 02:01:14 +0000
Manifest next update: Mon 09 Jun 2025 02:01:14 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: FxiZrbQA5bgr6+o3vq9I0MPzMt/bvdfhPAKnkfDUzi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:45:fa:40:2d:d6:f9:70:9d:ae:bb:44:7c:dc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: Jun 8 02:01:14 2025 GMT
Not After : Jun 9 02:01:14 2025 GMT
Subject: CN=2c6ea50cdb25f150c68e70df148d28dcb31558d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:08:22:a3:3f:92:a7:35:e3:a6:6b:6f:5c:
16:f1:72:18:74:39:18:6b:af:d1:fc:b3:b0:31:da:
c6:c4:f2:de:7e:0d:0f:54:79:cb:dc:d2:81:f0:1a:
24:e6:72:e3:13:43:a9:39:fe:90:a5:59:62:c3:64:
95:64:3a:2f:28:8d:31:20:b3:28:d7:2d:61:d0:d9:
22:0d:f0:b4:7f:81:b8:6c:06:e6:f4:c1:ce:1a:11:
7b:b5:7c:bc:6e:6f:a9:4f:99:19:93:53:6c:23:e9:
15:07:e8:69:ff:f9:f4:ce:2e:24:9e:dd:70:05:8b:
89:b9:a5:2e:c4:fa:11:e9:bc:5d:c1:63:bf:90:c3:
d2:9e:e5:4d:f6:ef:06:ac:a9:10:6a:d6:7b:64:09:
d6:f4:4d:58:75:7c:32:9d:9c:8c:58:ff:18:e7:38:
e2:de:3d:45:8f:e0:06:25:46:f9:a9:b4:92:8d:93:
8d:a9:77:be:23:87:49:f6:84:71:15:0b:61:5c:86:
18:ae:89:1a:2b:23:4c:54:ff:d2:45:d9:d4:16:b0:
58:6d:87:29:f6:ad:bc:3c:39:1f:b4:cc:80:4e:46:
7a:f7:4d:5b:28:3f:13:bc:f5:ab:f9:d9:c0:3c:04:
bb:a2:9a:1f:94:89:f3:17:24:30:f5:13:7f:86:10:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6E:A5:0C:DB:25:F1:50:C6:8E:70:DF:14:8D:28:DC:B3:15:58:D6
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6e:68:51:19:d0:c8:80:3d:06:68:d1:0f:64:72:7b:5f:51:
40:5b:d2:02:d4:29:48:db:50:84:42:34:9e:28:e7:7b:a8:15:
26:3a:d1:81:a9:c6:0d:59:e7:d0:04:a8:c2:b3:55:b0:8a:72:
65:cf:fc:8f:d5:67:75:9c:b6:67:8b:ca:13:76:02:62:a2:2f:
63:78:f7:ab:33:35:52:a4:98:c7:82:4f:ea:e5:56:5e:0e:47:
3b:3e:77:d9:68:70:34:33:8f:79:8c:34:ac:1f:68:97:95:a3:
ee:50:3b:45:92:9b:27:2a:59:e3:4a:7a:1d:a3:d0:af:32:2a:
8b:8d:90:5d:64:53:76:8e:d0:ca:4e:bb:27:c8:7f:9c:fc:1b:
2a:d8:93:9f:62:04:d2:b4:b6:1e:94:a1:19:74:19:61:06:7b:
fc:66:de:d6:cf:57:7f:7f:55:14:fb:b0:e9:00:5a:50:1e:95:
e7:b7:02:fe:f9:ab:2e:bd:8d:2f:cf:bf:14:66:74:76:a4:d3:
de:42:fb:be:36:cd:95:1a:77:4e:b1:46:f4:71:75:2b:20:79:
11:ef:e6:8d:ab:bf:29:1c:67:69:ff:8d:1f:6c:27:14:56:7b:
f9:be:6c:82:49:f3:98:06:36:8f:0b:dd:b0:ae:1f:cd:3f:02:
e6:52:8a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:16:42 2025 by rpki-client