Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: aclx8Jr1xDngP9zPFjkQuI8RY6Rz8P690lYIOqVHUPQ=
Subject key identifier: 4D:F7:6A:D0:A1:6E:A8:90:75:E3:22:60:D9:55:F7:24:72:8E:E5:9F
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 01975A24783E43F4B7A08A90696059A2C544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 0551
Signing time: Tue 10 Jun 2025 14:00:28 +0000
Manifest this update: Tue 10 Jun 2025 14:00:28 +0000
Manifest next update: Wed 11 Jun 2025 14:00:28 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: xr9IGFlmrkA9RJohqZIx9DTpzpeUNJs4JKgT1HV2WyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:78:3e:43:f4:b7:a0:8a:90:69:60:59:a2:c5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Jun 10 14:00:28 2025 GMT
Not After : Jun 11 14:00:28 2025 GMT
Subject: CN=4df76ad0a16ea89075e32260d955f724728ee59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:50:bf:53:11:02:44:b6:bc:50:80:5e:dd:
b9:15:25:c8:93:a6:eb:ef:c8:58:4e:6d:4b:84:16:
ad:01:2d:c0:8d:9b:58:e9:46:fa:6b:ff:ef:19:f4:
14:e3:4b:22:3f:ab:62:32:e9:91:dc:6f:6f:b1:78:
8f:4b:0f:7d:58:e6:64:64:b1:ec:e2:4c:12:67:fe:
d0:0b:a7:30:56:d2:77:fc:6e:b0:d6:46:54:27:6e:
4b:f5:8a:9d:d8:66:16:99:cb:80:86:10:da:70:28:
82:5d:52:ab:21:99:3b:22:4d:f1:73:cf:84:77:b2:
0d:0e:8e:86:23:ee:66:bb:de:e3:0f:45:66:2d:0b:
64:f2:01:46:45:6b:4b:4b:46:32:ba:c4:74:00:b8:
eb:2a:db:ff:ea:45:a4:20:c0:75:68:b7:8a:a9:21:
16:dc:1a:6e:b7:0c:29:72:bb:a6:5b:16:19:1e:e6:
2b:ce:95:78:2d:43:21:c3:82:a7:3b:87:b9:6a:75:
b6:8a:5b:98:0b:08:75:b4:da:70:b6:e9:b2:e7:b3:
25:1d:31:a2:2d:70:f7:06:0e:5d:9c:3a:98:aa:ee:
32:15:58:62:5a:4f:51:27:61:43:4e:b0:fd:e3:bc:
3b:83:87:6d:44:90:a4:19:6a:fa:d7:95:23:92:5a:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F7:6A:D0:A1:6E:A8:90:75:E3:22:60:D9:55:F7:24:72:8E:E5:9F
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:eb:60:90:ba:3f:bb:8d:82:21:bf:a5:64:f7:42:7c:ca:55:
56:b3:12:f7:18:fb:7b:4b:0f:16:01:c5:4a:a4:7d:b5:bd:cc:
7f:b5:a0:3c:19:77:8d:9b:7e:60:ee:ac:5b:21:ff:47:d0:4a:
0b:2b:c0:fc:74:f1:ab:ef:5d:e4:01:b8:46:5a:54:a1:be:69:
a4:d0:5c:79:ef:de:ee:19:42:3a:bb:a2:45:4e:a6:f5:76:f1:
ca:fe:a2:1a:3c:85:8c:3a:b0:18:03:56:ab:01:13:11:30:4c:
88:21:7a:a1:2e:0b:fd:e6:16:fc:c2:50:d4:0a:68:22:01:03:
94:45:e5:76:f4:ee:c8:d4:10:9d:8a:ab:11:e4:dd:6b:65:07:
3e:09:6c:4b:da:24:1a:fb:6f:98:bf:08:f6:0d:34:58:f2:43:
57:2d:bf:4b:54:41:71:93:d3:a4:f3:93:29:71:24:e4:18:1d:
ca:26:79:39:c9:ff:d7:7b:84:e3:1d:4c:35:06:02:42:fa:fc:
ff:c5:23:d7:6d:0a:53:67:26:82:c1:e5:2c:a6:3d:76:fd:a0:
ff:a2:86:6e:02:40:58:d4:16:80:cd:3c:94:80:83:87:e9:b9:
ea:34:76:38:8a:a0:94:d1:02:15:15:8f:d0:d5:d2:5a:fc:55:
5e:b7:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:27:49 2025 by rpki-client