Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: 1DbEkqUnE8o6ctBYEbpJtIS2PwqMEtZCryMw8Vrrhrc=
Subject key identifier: 6B:20:94:71:EF:13:66:34:5F:61:0A:DC:79:27:2D:93:D9:84:68:33
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 019754598031BB717542BCD51D38E5392702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 054E
Signing time: Mon 09 Jun 2025 11:00:40 +0000
Manifest this update: Mon 09 Jun 2025 11:00:40 +0000
Manifest next update: Tue 10 Jun 2025 11:00:40 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: vgWXkq/OfLJBCMBTrnCNm7SS1KOqiL6vquqOoN49DAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:80:31:bb:71:75:42:bc:d5:1d:38:e5:39:27:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Jun 9 11:00:40 2025 GMT
Not After : Jun 10 11:00:40 2025 GMT
Subject: CN=6b209471ef1366345f610adc79272d93d9846833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:68:13:d5:d1:cf:27:79:e4:f2:03:52:3f:
47:d1:66:ff:16:89:00:5e:f5:51:24:38:b1:ca:76:
2f:54:0b:70:5b:55:30:8c:ea:3a:9e:0c:4d:46:76:
22:16:89:33:3f:db:5a:05:ca:df:e9:66:b5:64:e3:
9e:39:04:69:8d:c3:b7:09:30:51:7e:c3:87:73:aa:
d2:9b:28:f0:cf:2f:4f:e6:ef:10:8b:f6:bc:73:76:
6c:14:69:d5:ed:df:8e:d4:74:f2:69:15:ee:a7:68:
1e:40:dd:bf:13:3d:5b:92:76:d1:99:75:d8:6e:66:
65:38:82:07:5c:1e:e5:4c:82:8a:ff:7b:61:6e:55:
dd:14:70:41:a4:45:71:1c:5a:ec:a4:4a:f7:8a:9c:
18:04:14:fb:7b:a5:4a:f1:03:d4:0f:e0:97:d1:e1:
b3:11:e9:f8:29:dd:4e:a0:8f:fd:30:64:fb:8a:87:
3f:07:08:28:22:d3:5d:03:50:10:34:c8:56:a5:7e:
aa:9f:8e:7d:8c:b6:58:3c:85:e4:68:8b:ad:ae:81:
32:39:00:4c:1d:2a:bd:cf:fa:24:00:53:ce:b0:c6:
c5:09:4e:0b:02:b7:e8:81:e6:26:cb:89:d4:e2:b8:
8a:f6:2f:2a:c5:92:30:2b:17:83:a9:f1:91:78:17:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:20:94:71:EF:13:66:34:5F:61:0A:DC:79:27:2D:93:D9:84:68:33
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:83:08:09:1b:49:1c:4f:a2:3b:15:bd:a3:4d:67:17:5c:a4:
86:94:48:a4:b3:29:75:35:5c:89:a5:ef:14:a7:ce:1f:e9:0b:
84:4a:2e:3c:e0:43:3c:ac:a3:06:c4:0a:ec:d9:6c:3d:73:65:
40:2b:a0:d9:8e:30:78:4a:57:98:5e:20:6a:da:5b:f3:8a:71:
d6:a4:24:db:5c:02:aa:13:ba:d5:4a:db:51:bb:13:c4:0f:dd:
9f:6b:4f:d4:23:8c:f1:50:b6:c1:01:9d:94:cb:b4:24:e7:67:
bc:23:95:e4:cd:05:3f:75:b4:c6:84:c2:df:bb:1b:13:49:c4:
8a:69:a4:1d:cc:88:c6:cd:c3:7a:e2:c7:8d:0d:6a:28:75:cc:
5b:b1:5a:ab:de:c6:e5:f0:f1:3f:9e:ae:38:e7:e5:59:f1:7b:
80:01:9d:7e:76:a2:6c:e1:80:ec:ae:3c:c4:28:c2:73:d5:5e:
a0:15:3c:36:94:84:0b:20:b6:f3:92:53:65:0a:fe:35:b4:9a:
2f:76:aa:da:8f:b6:f7:98:f0:d8:9d:d0:49:f6:20:20:d9:38:
4d:3e:e3:f8:b1:9b:eb:d2:20:b0:bc:8d:5e:da:74:94:66:d2:
65:cd:c0:53:4e:3b:76:97:73:4f:c3:c9:21:ec:f4:e3:df:cd:
11:4f:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:30:00 2025 by rpki-client