Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
File: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft (raw, json)
Hash identifier: 8pRFRLnxcX4tKRhvVhZGbKVuP8qZWqIgWMuoxdKbb3M=
Subject key identifier: D5:D2:83:70:4B:C9:A5:B0:5E:46:40:2E:77:A0:12:3F:08:34:FA:F2
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Certificate issuer: /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial: 019753105363B5A2808547DB76B41FD92FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 05:01:08 +0000
Manifest this update: Mon 09 Jun 2025 05:01:08 +0000
Manifest next update: Tue 10 Jun 2025 05:01:08 +0000
Files and hashes: 1: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl (hash: PXFqsnMXB774uqG9Sn22Q00ZOtKaW1lyRXor17Gj6sw=)
2: 9fYVFfHTqf1a_imjPpvJGZndsKw.roa (hash: rlKOE4E7l83H6REVCLchmgjMBofrkEYi53PSu+quf3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:53:63:b5:a2:80:85:47:db:76:b4:1f:d9:2f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Validity
Not Before: Jun 9 05:01:08 2025 GMT
Not After : Jun 10 05:01:08 2025 GMT
Subject: CN=d5d283704bc9a5b05e46402e77a0123f0834faf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:02:bd:2a:d6:9c:92:09:e5:4f:2e:b4:5c:
af:b2:88:49:2f:ee:2d:82:93:69:07:93:48:69:14:
db:35:8b:02:87:71:ab:e4:31:cc:f0:81:e5:96:66:
0f:b3:07:8b:c8:36:fc:78:06:8e:8d:1c:4d:d9:67:
f5:f0:ca:a1:83:ca:49:97:9d:b5:7f:37:4a:61:7e:
11:4f:2c:2f:dd:29:e6:10:ab:9c:84:77:b7:17:af:
30:a7:4d:df:9a:25:90:c6:43:41:7c:32:50:9a:f5:
b2:fd:0d:6d:c7:f3:84:63:5b:51:5a:0a:01:de:d9:
0a:ba:36:0d:35:b3:af:95:86:da:70:cd:4b:89:4a:
c0:6f:68:25:f1:d3:9e:b0:fc:26:04:d3:fb:29:f4:
88:50:60:d4:31:a4:ad:32:11:8b:81:4d:97:98:e4:
6d:ed:02:98:44:ed:cf:56:29:b1:1d:2c:4f:b0:38:
0c:3f:3d:d9:2a:5d:66:fc:c0:3e:7d:c9:bf:75:a4:
a8:79:aa:de:f8:6c:03:6b:50:50:3b:56:da:8d:62:
cd:b1:08:ec:34:4d:72:fd:2a:86:06:90:e6:96:ee:
6b:2b:8c:84:32:66:4d:d2:5e:8c:af:13:e6:f1:1e:
b8:78:78:6f:2e:69:ec:3c:fe:fb:80:82:80:c3:97:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:83:70:4B:C9:A5:B0:5E:46:40:2E:77:A0:12:3F:08:34:FA:F2
X509v3 Authority Key Identifier:
keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:40:8f:13:b1:c3:41:72:66:76:77:b2:92:55:3f:7b:83:8f:
a5:9b:9d:6e:0c:9d:af:00:c4:5d:d3:8f:18:fb:41:26:f6:e2:
73:8a:92:da:d2:6e:18:d0:02:65:a6:9f:e6:45:78:87:8a:13:
69:ac:26:1b:81:f3:62:09:c0:19:3a:d6:22:9d:17:5a:55:b8:
79:c1:c5:54:12:7b:ac:17:5c:6e:82:34:1a:b6:59:6b:90:93:
66:94:c8:b2:5a:04:cb:31:a9:94:8b:72:12:0f:96:18:26:a3:
0a:89:19:fa:90:37:56:d1:52:48:72:1a:b8:93:e1:aa:ea:ed:
32:91:74:7f:a5:18:ef:d6:d0:d3:e9:5d:b6:4c:90:7c:d6:b1:
61:ce:87:56:35:5f:f7:aa:86:bf:8e:e4:06:43:e2:4e:c1:08:
65:61:86:b7:79:6e:f3:b6:66:91:a5:75:9a:fa:2b:9c:38:53:
59:8d:ad:9f:d6:f8:b0:98:d8:ec:fd:d0:70:e1:80:5b:4e:05:
c1:97:d0:21:fe:21:11:bd:27:7e:c0:5e:c8:c8:27:0f:d9:37:
c3:36:5c:05:57:53:d0:b3:5c:72:85:48:ed:63:83:3b:29:d4:
16:7b:bc:87:94:76:f3:8d:1a:0f:6a:79:51:33:56:87:d6:b5:
af:7c:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:29:16 2025 by rpki-client