Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: 5VoLf3aGhKcGUDk9UaqHQMZrZjEcDKVPskmCN3tUyPI=
Subject key identifier: 02:90:7B:E1:DC:6B:91:0E:14:30:D9:E7:9B:E3:4D:61:B5:58:E4:58
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 01974779D7E38A615034B98F0F2A9C7DB13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0AC2
Signing time: Fri 06 Jun 2025 23:00:56 +0000
Manifest this update: Fri 06 Jun 2025 23:00:56 +0000
Manifest next update: Sat 07 Jun 2025 23:00:56 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: vKsjeoPqINBem5iXqX39h6xjitV6UZNWJud6J08/fMU=)
2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:d7:e3:8a:61:50:34:b9:8f:0f:2a:9c:7d:b1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Jun 6 23:00:56 2025 GMT
Not After : Jun 7 23:00:56 2025 GMT
Subject: CN=02907be1dc6b910e1430d9e79be34d61b558e458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:4d:11:55:2d:fd:f8:ab:af:96:d0:33:e5:
04:57:0f:d9:e6:53:96:fa:72:93:26:ed:98:63:6f:
27:39:6e:4a:e1:33:af:e8:2b:98:e4:e8:17:83:d7:
a9:d1:94:e5:93:08:bd:d8:90:e2:f8:a4:76:ac:78:
ef:84:e1:24:c3:31:c5:8d:60:2e:34:ec:af:fe:b1:
64:85:00:83:8b:54:ac:8e:7f:b4:3f:bd:0e:a8:32:
08:28:f3:87:ac:d4:72:28:e8:15:30:2c:c7:9c:d6:
65:8c:40:2c:78:3a:ee:7e:82:c7:1c:c5:b4:aa:8c:
31:e9:f2:da:3c:58:e1:22:4d:c0:87:af:19:84:03:
92:66:60:e0:71:23:bf:cd:13:4c:0c:77:94:92:17:
9f:05:41:f3:a3:2e:92:75:67:cf:0f:4b:f6:a3:6d:
0f:b0:d8:25:8d:8b:dc:e8:f2:9a:45:10:15:f3:28:
6b:2d:5c:6d:ca:ca:75:a3:24:40:97:90:cd:3b:14:
09:3f:fd:b3:f3:a9:05:12:d4:7e:37:c1:39:62:77:
ef:de:70:a3:7d:c7:35:e0:b6:95:f5:9e:48:97:2b:
61:b9:79:a3:df:31:bb:56:17:23:44:30:33:92:e7:
d2:81:cb:0d:4c:bc:45:6a:8d:ae:b6:38:72:ea:d3:
7a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:90:7B:E1:DC:6B:91:0E:14:30:D9:E7:9B:E3:4D:61:B5:58:E4:58
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:de:bb:8a:27:fa:85:29:c7:34:da:e1:73:4f:d6:84:4a:f5:
3c:58:c7:75:a7:2f:09:c8:d0:cd:28:c1:e5:58:35:1d:03:98:
a3:60:c9:1a:e9:46:c6:38:af:76:b6:60:7f:6a:a8:be:55:38:
51:a6:e5:16:25:7e:5c:b8:1f:58:29:44:72:4d:11:3a:72:9f:
08:a1:2a:12:30:af:c5:d1:86:82:6b:cc:b3:2e:c4:66:92:19:
ad:91:29:e5:d6:a9:c3:a7:18:97:f1:8a:0a:b7:18:f6:4c:ad:
f0:6e:a8:52:42:51:69:6e:37:a8:39:1d:9c:fb:42:72:3b:14:
a2:57:88:ef:7d:f3:01:0f:f6:e0:18:0f:4f:8d:a2:00:be:42:
d3:68:4a:ca:4b:f3:c0:42:54:b4:1c:98:4f:a0:07:c0:36:20:
12:60:03:89:3d:f1:78:31:71:51:d0:f4:36:c2:0c:27:c3:0a:
8c:06:de:9c:cb:c3:ca:13:20:8a:0d:c2:b6:7f:ba:75:77:6b:
93:d2:2c:da:55:bc:9e:b7:73:e9:50:e4:47:87:be:b2:aa:d1:
75:1a:85:1b:52:b1:e0:f9:08:f3:c6:d0:81:3e:f6:37:32:1e:
33:69:ed:bd:96:60:3c:da:6b:ba:8f:83:aa:68:ed:76:89:59:
98:5c:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:37 2025 by rpki-client