Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: ZQw1q74X6D/x5+oEJg92zlTBbBrQk1jRhwsk11csgww=
Subject key identifier: B1:16:B4:30:06:8F:2D:BF:00:6F:B3:23:22:EB:CD:5E:5F:71:D2:C8
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 01974EFC7060B3315FF0A0A473D8D20027F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 12C1
Signing time: Sun 08 Jun 2025 10:00:56 +0000
Manifest this update: Sun 08 Jun 2025 10:00:56 +0000
Manifest next update: Mon 09 Jun 2025 10:00:56 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: A1JXIChRkUNKO6RdkxRlLvLFgq2pxdEIf1I1fjowcD4=)
2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:70:60:b3:31:5f:f0:a0:a4:73:d8:d2:00:27:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Jun 8 10:00:56 2025 GMT
Not After : Jun 9 10:00:56 2025 GMT
Subject: CN=b116b430068f2dbf006fb32322ebcd5e5f71d2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3a:dd:ef:74:fa:33:92:12:ed:bc:8f:95:f0:
c9:40:01:07:7c:cf:fc:80:76:20:fe:d3:3f:d7:1b:
27:fd:b0:3b:7a:fa:39:2c:bd:91:e5:97:14:f8:b0:
79:95:f0:d8:5e:b2:16:9e:97:14:55:ad:f6:9c:08:
ce:77:a6:14:00:b1:56:fb:23:a7:4a:db:0b:9d:70:
57:9a:92:3c:e1:cb:c8:f7:dc:05:ef:c1:a9:7f:dc:
8c:3a:d1:3a:9b:25:e6:7b:0f:30:95:0c:a9:a6:58:
0b:a4:d7:fb:8e:20:89:a5:fd:0b:14:c4:74:67:5c:
99:31:ad:4b:26:c5:38:0f:0c:28:5a:93:72:b5:6c:
bb:24:65:df:8e:24:e9:30:08:43:fc:23:f6:ee:a8:
e4:14:85:61:29:c7:5b:f3:f5:8b:2c:37:d3:45:a3:
c0:d2:fe:94:e6:a0:0e:85:f7:e4:fa:e0:53:dd:54:
d5:9b:7f:b5:55:fa:b1:20:b9:67:9b:75:b2:3f:cc:
d3:f2:a5:49:d6:e3:32:b2:27:dd:8f:52:6d:04:4e:
cc:68:ab:6b:26:61:60:4a:6f:ae:03:34:fa:f4:08:
a4:9a:27:db:f3:f6:37:bc:cd:81:6e:fd:b5:4b:33:
f0:b4:86:a3:0a:fb:71:da:c3:cd:4a:5e:e8:a2:53:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:16:B4:30:06:8F:2D:BF:00:6F:B3:23:22:EB:CD:5E:5F:71:D2:C8
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:1c:9f:cb:0b:e9:96:2a:1a:77:68:47:d0:2d:10:db:a3:
ea:2a:7d:4e:42:c3:4c:ce:28:13:93:b2:2d:6e:56:0a:fe:e9:
3d:5f:df:b1:dc:9d:b4:c3:cd:83:0c:80:8a:4a:2e:a9:3c:0e:
a4:05:ff:f6:88:04:9d:31:b3:17:ac:25:a2:75:f9:c9:f6:8a:
27:54:bc:1d:4a:d8:1c:5c:6c:dc:26:3c:10:da:d9:22:10:4e:
48:fe:d8:74:82:50:60:5b:42:2f:da:dc:24:b1:60:0e:fa:a5:
78:e8:3f:99:cf:bb:3f:24:00:0a:2d:2e:fa:67:5a:1c:a7:b8:
db:4d:14:e8:58:e3:5d:3f:c1:bd:4d:a8:73:85:d5:99:ce:1a:
1f:55:c0:bc:ca:f7:da:df:f5:12:78:04:c4:a2:f8:65:fd:6b:
e7:c4:b7:63:89:26:2e:a9:0b:11:09:51:cf:4e:d2:e2:d3:f0:
cd:e5:ac:32:75:d7:dc:fd:7f:f0:78:e4:97:10:31:f7:7c:7f:
71:2d:95:82:7b:b6:a5:8d:e6:7d:b9:c2:9e:9f:33:f6:47:db:
86:7c:6d:35:27:be:c6:0f:8a:ef:b2:3b:a8:bd:28:b6:9b:32:
f6:8b:6d:c3:bd:33:4c:bf:2d:56:bd:b5:0e:75:13:06:6a:e6:
55:ab:17:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:39:41 2025 by rpki-client