Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier: M7SZDQQUL/UOMYJTXGu5n98ign09yiXwFn8i46tgycw=
Subject key identifier: 36:53:28:5A:8C:9D:05:53:37:03:03:62:ED:48:63:F8:50:28:36:CE
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 019748FA163FBDD169EA0AF90DC2732A1D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number: 0CCA
Signing time: Sat 07 Jun 2025 06:00:38 +0000
Manifest this update: Sat 07 Jun 2025 06:00:38 +0000
Manifest next update: Sun 08 Jun 2025 06:00:38 +0000
Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: frHZapUTdk48tDITDH4k8sWDNqx/a4HLUShakiVVH10=)
2: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (hash: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:16:3f:bd:d1:69:ea:0a:f9:0d:c2:73:2a:1d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Jun 7 06:00:38 2025 GMT
Not After : Jun 8 06:00:38 2025 GMT
Subject: CN=3653285a8c9d055337030362ed4863f8502836ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:ba:10:7e:5c:89:a1:de:84:1b:95:fd:27:
1f:05:69:4f:f8:b7:45:c8:38:af:16:ca:a9:b3:53:
fc:b1:d4:8c:74:93:ff:e6:cf:3e:db:9b:5c:ce:06:
bf:1a:27:03:eb:f7:ac:5e:8f:b0:ef:05:3c:3b:97:
da:3f:0c:5d:97:5f:b3:1a:57:c6:86:57:a0:97:10:
54:eb:96:df:91:0f:c9:8f:82:6a:00:8e:d5:79:77:
6a:8e:73:1c:f8:ec:cf:3c:b6:7c:db:77:cc:3d:6e:
58:65:78:c8:ad:6a:26:a9:41:f6:b8:d3:c5:72:da:
6f:1e:3e:86:26:cb:29:dc:a4:f5:d5:f1:46:7d:80:
48:59:4f:6e:a4:ea:76:a9:6b:54:64:bb:cf:46:88:
fe:08:49:a2:ad:51:f2:08:a1:03:a7:e0:93:73:85:
af:38:7d:a8:82:7c:48:35:75:7c:80:3e:14:72:2f:
87:44:a4:20:92:99:1b:09:d2:66:58:ce:a1:a6:ee:
5d:ca:ee:ce:f9:fd:f4:54:f8:77:31:ee:f2:46:5b:
72:27:09:c3:a9:83:65:ab:e7:5e:82:36:1a:7e:15:
75:21:3c:42:a4:df:02:bd:26:36:e1:6a:d9:ed:8b:
7a:18:7c:e7:a0:d0:fe:85:96:ed:21:9c:02:52:66:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:53:28:5A:8C:9D:05:53:37:03:03:62:ED:48:63:F8:50:28:36:CE
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1e:4a:bf:16:3e:87:29:9c:2e:a0:2f:e5:8b:49:83:d4:8d:
1e:74:5a:62:1f:98:1f:08:2e:d3:bc:d2:24:56:9b:bf:a4:ab:
c6:8e:a6:c6:eb:ed:78:fa:4a:aa:f7:62:c7:c2:db:b0:60:41:
6c:24:09:82:af:1b:af:d5:fd:52:2d:fd:83:06:7a:82:eb:84:
e4:70:af:d3:a3:6a:1b:07:69:fb:39:0c:46:b7:35:b7:86:f1:
9c:c7:90:57:bc:85:25:1d:cd:e8:13:74:c6:6b:fb:91:48:bf:
bb:cb:d9:10:6f:df:c0:90:46:52:8d:45:f3:87:51:dd:b2:5d:
81:9d:48:48:81:9b:c3:38:8c:26:8d:3c:bf:fc:d2:1e:37:e8:
d5:75:17:88:4f:05:3a:90:ec:aa:1e:99:3c:b9:61:cd:b4:c3:
5d:4a:14:8d:8e:e4:31:d9:df:8a:1f:ea:4d:44:c0:a3:2f:98:
27:f8:20:0a:4c:2d:a4:74:42:7c:59:b1:4d:c3:13:20:ac:b8:
c3:21:a1:86:5a:db:2b:56:a2:d1:6e:96:55:be:39:c7:f7:d5:
af:03:24:fc:3c:61:ad:80:a8:4c:fd:7f:7c:ba:92:71:e7:27:
47:9f:16:8c:90:a2:51:1c:f4:6f:02:92:0e:d6:d0:3e:b9:e7:
d2:dc:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:41:03 2025 by rpki-client