Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier: +7Plk72WCPrqE/CQBraPrrtubkRxuerbw3+rL+jsv5Q=
Subject key identifier: 22:64:16:05:49:B9:6D:78:C6:29:2D:E4:C4:B1:E7:87:EA:60:7F:86
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial: 01975E6F87154D93E613F5CCE9D44969AB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number: 012E
Signing time: Wed 11 Jun 2025 10:00:56 +0000
Manifest this update: Wed 11 Jun 2025 10:00:56 +0000
Manifest next update: Thu 12 Jun 2025 10:00:56 +0000
Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: sia7hbtUNCcR2I1jQ99GPNCeo1bBYA6i+NinV5LI8S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:87:15:4d:93:e6:13:f5:cc:e9:d4:49:69:ab:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Validity
Not Before: Jun 11 10:00:56 2025 GMT
Not After : Jun 12 10:00:56 2025 GMT
Subject: CN=2264160549b96d78c6292de4c4b1e787ea607f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:20:6b:ae:c0:e8:e9:33:e0:5b:14:eb:80:
17:ed:b0:90:ab:e6:ee:36:45:a5:0b:c0:e9:e3:64:
86:11:e9:57:5c:ff:02:18:e4:e3:78:7e:af:2e:47:
1c:9d:43:71:3f:9e:1f:56:3b:b3:fe:a6:8c:e2:85:
8c:24:85:ab:60:55:a1:49:0c:f6:55:2f:bb:4c:34:
0e:a0:d0:de:a1:d9:1c:ce:2a:b7:89:33:ab:6a:33:
5a:29:12:82:1b:5b:d0:1b:2b:de:e3:ac:9d:67:6f:
52:7d:e4:26:c1:b0:46:2d:30:62:68:ae:b4:cd:73:
5f:be:47:93:ef:ab:9a:7b:44:34:1d:6a:fb:6d:bd:
c2:1c:3a:c4:97:1c:28:ff:8c:9e:b8:b3:08:16:8b:
53:b1:bc:0a:d5:1a:6b:1d:02:f4:0a:29:72:aa:2c:
f3:6b:d1:8d:06:44:5d:9e:cd:84:34:7d:45:da:f7:
56:34:98:3f:6d:d4:4f:ab:bb:3d:84:05:4d:54:12:
ca:6e:4e:f9:62:5a:b8:fa:8c:d9:48:ad:39:36:c7:
62:ec:b6:2f:73:6b:9b:90:70:24:da:20:1f:e8:d9:
b7:3a:cb:b8:38:8a:f2:9d:9f:40:37:dc:bc:d4:0b:
1e:f7:fd:10:02:f8:09:13:8f:be:74:06:4c:4b:71:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:16:05:49:B9:6D:78:C6:29:2D:E4:C4:B1:E7:87:EA:60:7F:86
X509v3 Authority Key Identifier:
keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c7:c7:83:ad:3a:62:d3:39:36:e7:86:ab:a9:21:82:1e:1b:
9f:4e:ca:eb:95:f9:40:a8:f8:c9:9b:33:17:f2:82:8e:f5:90:
cf:8e:da:64:67:12:7d:23:e6:de:f5:36:a5:18:73:29:6e:76:
d8:b1:27:a7:af:01:de:eb:2b:c6:93:95:09:52:28:18:6e:83:
a8:9a:8d:f6:e0:83:e0:55:47:84:a3:c2:98:f6:a3:86:42:93:
bb:a0:9e:12:fa:79:4c:fd:0e:2b:df:bb:49:67:45:de:41:eb:
61:74:4a:4a:bc:db:3c:0a:b0:bd:1e:fd:86:88:38:41:20:5d:
31:be:9a:86:02:57:9d:e2:17:d7:85:ca:0e:fc:ec:ae:d5:65:
4c:11:4b:98:e8:56:59:47:68:c2:81:80:76:8b:68:9d:41:a4:
a4:49:f1:0c:6b:73:41:7c:d6:70:ec:5c:2d:c8:13:ba:cf:3e:
3b:90:21:57:98:aa:2e:1d:43:33:ac:0b:cd:6a:a1:59:9c:26:
fc:5c:a9:f9:9f:96:81:91:aa:cf:9d:c0:47:b1:8b:47:16:c5:
19:de:0d:7e:41:a9:06:62:68:28:f2:83:f5:a3:38:fb:f3:a7:
e3:b1:3e:8d:0b:a4:be:dc:99:73:43:69:ae:9a:b3:d1:1b:9e:
8c:5c:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:23:42 2025 by rpki-client