Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: gO8FWKs0zNURWLq4uzNkBFGdQaWGvDBbyD5npx7JEkA=
Subject key identifier: 3A:24:4B:22:46:4C:45:FC:A8:D7:C7:80:92:35:11:37:9C:EE:B1:1E
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 01974C32144E7CED08D09070275D6FCF71B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0AF2
Signing time: Sat 07 Jun 2025 21:00:39 +0000
Manifest this update: Sat 07 Jun 2025 21:00:39 +0000
Manifest next update: Sun 08 Jun 2025 21:00:39 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: m3CROtS2WUr3Z24NP/EPCz1aI5ROG047607NMq5AtWI=)
2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:14:4e:7c:ed:08:d0:90:70:27:5d:6f:cf:71:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Jun 7 21:00:39 2025 GMT
Not After : Jun 8 21:00:39 2025 GMT
Subject: CN=3a244b22464c45fca8d7c780923511379ceeb11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:b9:8b:37:ab:d2:95:a6:95:2e:c3:19:7e:
c8:1e:63:c4:b9:50:2c:e9:cb:df:62:52:a0:4b:7b:
04:9a:ef:02:ad:a0:8e:03:cb:ef:75:9a:a8:f9:c2:
d4:80:2f:67:5c:09:97:41:34:50:de:f8:58:ab:97:
18:5d:90:4d:19:bb:12:8a:56:19:c7:87:43:ad:9f:
cb:6a:b9:46:3d:ee:ab:c4:9b:94:36:a5:e9:1c:23:
eb:e3:75:75:4b:f9:de:2c:b4:88:b2:a9:9b:a7:20:
78:6f:02:03:19:d9:0e:d3:8d:33:93:ba:7b:e8:62:
10:49:0e:52:1e:91:ff:16:f7:93:64:2e:8a:55:dc:
6e:a6:e6:c0:7a:62:86:d3:e7:eb:c9:68:f0:62:06:
2c:6a:4d:53:6e:ce:d6:1e:a6:71:a8:ea:45:20:cf:
ea:19:6a:66:97:a9:12:05:f0:eb:fc:ef:fd:1d:1f:
f0:04:cf:b1:57:63:33:4b:fa:be:53:54:8c:c0:72:
de:80:c7:42:85:82:c7:3b:28:09:3c:6b:09:b4:49:
e0:86:30:a2:c8:41:4c:4f:e5:a0:8f:47:7c:e1:40:
7a:cd:80:37:fb:d8:df:61:ef:d7:58:88:e6:10:62:
50:cb:24:89:e7:95:01:b8:1e:4f:93:0d:c5:0e:e8:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:24:4B:22:46:4C:45:FC:A8:D7:C7:80:92:35:11:37:9C:EE:B1:1E
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:82:4e:6f:d5:62:cd:57:a8:77:53:b5:84:ba:c6:e0:37:f8:
f9:1d:a4:ac:f7:37:8e:01:ca:58:f2:07:9a:24:56:08:79:c1:
9e:09:cc:38:ae:75:ee:62:48:e4:15:ff:d9:1f:8d:30:be:55:
34:90:45:c9:82:bd:26:18:ec:f8:dd:0f:48:42:21:41:f7:e8:
6f:30:5e:42:75:4c:61:48:a6:6f:bd:cf:11:4b:df:4b:32:7d:
2c:d1:5b:df:47:5d:dc:70:7e:be:90:58:0f:13:db:bd:3b:5d:
0a:bf:b0:12:0f:6d:e6:91:7b:d7:1c:c2:e1:81:f6:86:72:53:
e9:1b:99:57:ba:98:a2:84:d5:06:25:c1:e6:e2:d3:f9:93:d9:
de:68:30:9c:63:96:74:1e:92:5f:4f:33:23:1c:ef:b8:da:77:
ee:4e:92:fb:95:99:8b:f8:91:d9:d8:9f:86:77:4e:91:e2:fe:
7e:ed:c0:99:a6:00:a0:11:3c:ec:b5:e4:75:11:1b:d2:ec:19:
c2:c3:91:d5:56:3d:99:89:f8:b8:53:c6:fc:a2:37:71:12:6d:
67:c8:17:22:79:46:dd:80:1d:26:8e:0c:d2:d3:73:17:40:e9:
7e:a1:43:36:c9:a0:81:d7:49:f2:83:f2:e2:c6:f6:e7:c2:70:
b9:a2:b1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:57:32 2025 by rpki-client