Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: 4y+Lq+G2zMb8tkHfAJYRt1RfpR12xXHlMvHaZqiTqEI=
Subject key identifier: FF:D1:DB:EF:4E:09:C3:53:83:B5:F5:8B:81:2A:FC:A8:44:20:F3:C0
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 01976FD14B9A3C0774AC38465774075E2BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 0482
Signing time: Sat 14 Jun 2025 19:01:16 +0000
Manifest this update: Sat 14 Jun 2025 19:01:16 +0000
Manifest next update: Sun 15 Jun 2025 19:01:16 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: 4VLm6vJwCKdVVUIQLxElXltIjSCkvA1Q+snq8lfRXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:4b:9a:3c:07:74:ac:38:46:57:74:07:5e:2b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Jun 14 19:01:16 2025 GMT
Not After : Jun 15 19:01:16 2025 GMT
Subject: CN=ffd1dbef4e09c35383b5f58b812afca84420f3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:ec:ae:ed:be:2a:fc:bb:e7:9d:d0:01:20:
a2:53:c3:8b:11:8a:26:22:bf:20:02:84:1f:17:2f:
9e:aa:1c:eb:10:ac:36:de:25:7a:1b:73:30:5d:f3:
83:33:bf:69:c2:e2:52:e2:30:d7:2d:1a:72:a2:d4:
fd:c5:16:40:0e:6b:11:67:7d:87:45:8b:17:89:90:
e4:0d:4b:73:6a:e9:3d:0b:6c:ad:96:89:94:66:80:
af:4a:ad:0b:fd:20:77:50:7b:8f:10:9d:5c:b1:4b:
c0:63:44:ee:15:e8:c7:ea:93:d6:44:05:b6:56:ac:
4c:45:4d:64:d1:f8:e3:fa:d3:1d:cf:b5:1d:e4:b1:
99:de:0d:23:e2:66:89:8c:21:e9:c5:8e:d6:42:f4:
3b:72:c5:a3:96:93:a5:a3:ba:b4:2e:f1:ef:0c:c7:
c6:ca:52:71:ab:d7:aa:f8:bd:44:c8:6d:6f:65:85:
25:1a:d3:d7:a7:d2:0c:76:09:cb:da:7c:77:02:6d:
93:3d:33:5b:cb:a8:3a:96:58:2d:2b:5a:ff:66:1c:
4b:4a:44:8d:18:0b:4b:4a:26:ae:59:45:d6:a0:17:
6e:bc:0d:69:a2:66:3d:f0:a3:d5:06:6a:93:34:ae:
21:1d:9e:5f:5a:2b:6f:1a:08:54:b5:10:20:34:1c:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:DB:EF:4E:09:C3:53:83:B5:F5:8B:81:2A:FC:A8:44:20:F3:C0
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0f:8e:e4:be:bf:84:cc:af:50:ea:25:32:2c:29:ed:09:eb:
5f:27:7c:89:1b:01:97:12:8b:dd:c2:53:74:2b:cd:4e:1e:2f:
79:2d:55:26:03:5d:8e:b2:cb:19:ef:dc:8c:35:eb:54:bf:c9:
0d:93:ed:64:b4:76:5f:45:f0:b7:b3:48:c0:cb:23:78:49:01:
31:c4:df:e2:ce:a6:48:8d:5d:64:3b:3c:20:3a:fa:b1:57:d8:
32:73:31:44:d7:ab:20:26:da:97:6d:91:d9:11:fa:d0:a8:9b:
1d:42:98:fb:24:5e:95:73:0f:9d:d6:35:8d:eb:37:11:71:d1:
8d:1e:02:d1:a8:be:28:a0:ac:67:1f:fb:9f:9c:d9:3d:51:77:
71:e0:69:89:37:23:d0:c9:4b:7e:72:c8:a1:30:b1:bf:95:1b:
02:b8:15:10:83:e7:b0:f2:04:42:dd:82:ef:6b:a7:0c:05:57:
f2:5e:7c:a7:6e:17:e8:f5:94:e0:02:f5:02:e9:63:f7:63:90:
a3:72:75:f2:ce:14:1c:c7:6d:bb:bb:c4:53:80:ed:cb:ba:b6:
a5:29:8f:3f:5c:8d:c8:6d:ea:ee:32:48:3c:e6:18:d6:9f:64:
38:4b:c7:aa:c5:5c:94:0a:7d:b6:e7:c3:dd:d8:27:cd:f0:d4:
5a:e9:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:53 2025 by rpki-client