Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier: yM1+ZZTSakXcwgfggyYO1mv9gIw+IK68HaXe0QRSGmM=
Subject key identifier: 78:5B:4B:DC:C1:B3:60:24:16:AC:35:45:E0:66:E9:85:E8:60:91:46
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial: 019752D8F3C406C8362B6D1A3AA059F13B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number: 0128
Signing time: Mon 09 Jun 2025 04:00:39 +0000
Manifest this update: Mon 09 Jun 2025 04:00:39 +0000
Manifest next update: Tue 10 Jun 2025 04:00:39 +0000
Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: lPmsx/1krAq25GG/5dQG7B5sORvXVCoOUop9jkxsRi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:f3:c4:06:c8:36:2b:6d:1a:3a:a0:59:f1:3b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Validity
Not Before: Jun 9 04:00:39 2025 GMT
Not After : Jun 10 04:00:39 2025 GMT
Subject: CN=785b4bdcc1b3602416ac3545e066e985e8609146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:c4:18:a7:52:10:4b:af:32:59:c1:4e:00:
8a:76:e4:fb:34:b0:0f:e9:f3:45:63:19:3c:f6:19:
8b:23:df:40:5f:3a:e3:41:e6:87:6e:76:3f:e0:1b:
eb:61:8d:ef:bb:e8:c6:2f:e1:0b:8a:7d:5e:7f:89:
17:5f:ca:d4:d2:1a:61:02:ab:a2:83:ec:cb:e6:fb:
64:1d:84:08:26:e7:24:b2:07:61:ac:97:03:2a:49:
b0:82:d3:97:ed:61:6b:e7:03:24:49:cc:6b:7a:87:
90:86:cf:db:59:e7:1b:c0:b6:52:7f:5b:10:69:49:
5e:fc:09:34:0c:92:47:8c:ff:40:90:2a:79:47:2b:
5e:5a:18:e7:10:12:fb:06:b0:71:8a:de:82:03:ca:
6b:d5:6a:f7:a0:51:75:ae:51:a9:c1:05:64:97:92:
dc:4b:ee:fe:0e:76:10:c3:37:df:ca:0f:dc:ed:7b:
c2:a1:08:89:07:e4:07:5d:a3:6d:f0:a7:a7:f9:8a:
73:32:93:0f:23:ae:11:2f:62:02:6f:6a:5b:d5:ea:
05:34:98:0b:ee:97:37:16:82:09:a4:df:8c:c5:1d:
64:ab:c3:42:40:44:13:04:af:a9:0a:f4:4a:e9:f5:
94:48:97:a9:c7:6f:de:21:7e:dc:56:91:e3:9a:52:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:4B:DC:C1:B3:60:24:16:AC:35:45:E0:66:E9:85:E8:60:91:46
X509v3 Authority Key Identifier:
keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:78:97:05:65:fd:cf:ef:f5:dc:e5:04:5c:01:09:d8:24:25:
70:69:5b:37:6e:be:f4:e0:fe:c1:bd:e8:2f:e2:3e:b6:2d:b4:
5f:d8:59:4e:9f:4f:4f:26:6b:24:eb:6b:fe:78:a9:56:31:76:
6b:ce:83:13:99:b8:93:0d:50:ae:00:50:89:16:78:78:78:2e:
9b:79:a0:2d:72:16:b4:06:ef:94:58:b5:ff:aa:18:ac:f6:e3:
ec:c2:24:24:c6:eb:3d:4e:d2:e3:72:7c:1c:67:53:93:63:ca:
27:91:f7:79:b9:42:86:c1:32:fe:88:11:cc:ec:2a:d4:f0:42:
13:a7:0b:5a:40:c5:88:dd:6d:4c:bc:f6:ec:31:3c:21:63:f2:
45:56:91:41:cd:cd:b7:f6:e7:97:ed:46:ca:9b:3d:09:98:17:
83:61:17:dd:b5:c6:54:f4:47:74:b0:d3:fa:6e:af:aa:3d:e3:
7d:98:e4:70:c7:cd:ff:cd:03:13:34:1e:93:b6:19:2c:04:9f:
8a:e2:76:3b:23:fc:46:01:7c:85:6a:47:0b:e4:43:2a:56:c3:
ff:4b:e4:e5:1b:93:9a:18:c1:3f:97:3f:45:6a:a2:9b:d7:ca:
12:44:d0:e9:45:b2:87:d6:fd:56:56:79:e0:56:56:aa:47:37:
c7:aa:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:39:52 2025 by rpki-client