Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier: QLL7g7GQwaxW49Wfczl+An1xbOPKYWO3IKqf/QleZbk=
Subject key identifier: 78:0B:89:61:F9:20:FC:77:0C:8D:24:68:97:7F:8A:80:82:03:0F:C4
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial: 01974B1FAFF5E56D47BADE5E56B41EDFC0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number: 02CD
Signing time: Sat 07 Jun 2025 16:00:57 +0000
Manifest this update: Sat 07 Jun 2025 16:00:57 +0000
Manifest next update: Sun 08 Jun 2025 16:00:57 +0000
Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: 5kx6GEitM8QYeMbOD7NO66fgYgDHJTORrEBlplcAsN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:af:f5:e5:6d:47:ba:de:5e:56:b4:1e:df:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Validity
Not Before: Jun 7 16:00:57 2025 GMT
Not After : Jun 8 16:00:57 2025 GMT
Subject: CN=780b8961f920fc770c8d2468977f8a8082030fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:52:1e:9e:d8:ad:2b:9f:83:ca:9f:98:ae:
f2:43:58:f6:a1:70:90:53:fc:9c:ab:a2:c8:18:a5:
a3:ed:bf:b3:8d:0b:0d:20:07:4b:9c:e3:06:cf:66:
e5:1d:d5:82:fc:c6:a9:c2:85:26:a0:e4:14:9d:28:
48:65:9e:37:e7:04:a1:20:46:5c:c9:ce:f8:eb:2d:
60:99:e6:e3:fe:1d:13:73:4d:7a:cd:6f:6e:39:24:
8f:6a:e7:0c:6e:59:7c:1e:a9:e1:d4:a9:13:71:42:
0e:0d:4c:67:4f:7a:77:a6:78:9b:19:e9:ae:ae:1a:
8f:1f:17:1b:66:ce:90:87:11:59:1e:df:6a:f9:74:
de:65:d9:03:d6:ab:59:05:f8:19:85:16:9b:d5:ac:
8c:c5:27:bd:c7:4a:e8:ec:cf:28:aa:e2:28:b4:95:
ee:4d:1e:7d:74:64:8f:cf:18:cc:f9:a9:e2:bd:97:
c3:03:3a:ee:df:5c:4a:17:07:0f:33:d7:08:91:65:
48:2a:73:35:6f:46:18:81:10:54:93:86:e1:40:6e:
16:04:53:3d:36:54:de:f6:8c:95:b8:e6:c6:c4:87:
75:93:db:49:70:16:0c:73:0a:c0:7a:9b:ff:8f:b2:
c2:b7:06:e1:1b:45:fa:f2:5b:ef:f8:c1:4a:04:37:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0B:89:61:F9:20:FC:77:0C:8D:24:68:97:7F:8A:80:82:03:0F:C4
X509v3 Authority Key Identifier:
keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f4:b0:7a:57:56:7c:16:91:4e:63:9a:0a:0d:52:e5:80:bf:
a3:4c:fd:91:43:b6:ce:d3:e5:07:fd:e8:64:be:6f:26:d4:f6:
de:d2:c6:fe:3d:6e:91:f2:ff:98:17:90:9e:63:18:f9:6a:cd:
3c:c6:68:d4:2d:29:99:7e:ec:02:10:9e:58:0b:dd:bd:04:32:
83:d6:ee:4e:ff:6b:be:57:6c:1d:42:b9:27:a2:2e:f8:ab:cd:
ef:1a:f2:6d:0a:27:98:54:f3:15:10:21:c6:b0:48:8d:e8:4c:
c4:22:2f:08:a4:3e:fd:5d:d6:17:85:3e:b0:23:7f:ea:99:00:
34:68:44:fe:a3:9a:a8:c5:ef:32:dd:68:a8:96:0f:72:5a:19:
63:04:fc:72:ce:90:7c:38:74:37:c4:18:46:e7:8c:49:e6:3a:
53:b7:c6:23:b6:08:4f:04:da:b4:9c:c0:3f:f6:bf:ea:0d:d2:
b5:d1:0a:f7:c2:6a:07:12:df:53:09:20:bf:48:d8:15:94:b4:
b3:25:14:dc:8a:10:a1:0b:a2:65:60:a6:95:96:5f:1a:f9:3e:
42:e9:85:77:a2:08:71:3e:39:5d:ec:90:32:46:2b:a5:b3:af:
ed:86:7e:ed:0a:6e:de:c2:11:b8:43:81:78:6e:5a:7e:54:7e:
74:01:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:26:16 2025 by rpki-client