Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: rXD9pI7ZHoe7pMWlXEirHItk1yaRbCRUSDsUYTc49nc=
Subject key identifier: B5:B4:F8:A9:9F:FE:C9:AA:17:0E:0C:EF:21:23:8C:E6:22:E1:4B:6D
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 0197474304FD63605F3BC308D684AA0C9045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0183
Signing time: Fri 06 Jun 2025 22:01:03 +0000
Manifest this update: Fri 06 Jun 2025 22:01:03 +0000
Manifest next update: Sat 07 Jun 2025 22:01:03 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: eztvBSSLdkZf9iF3G7nUwQl3WnADxYubp8auH8ZY4XQ=)
2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:43:04:fd:63:60:5f:3b:c3:08:d6:84:aa:0c:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Jun 6 22:01:03 2025 GMT
Not After : Jun 7 22:01:03 2025 GMT
Subject: CN=b5b4f8a99ffec9aa170e0cef21238ce622e14b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:0c:26:fd:0b:a9:79:33:b3:8c:33:b0:c3:
4b:93:8a:82:22:1a:01:65:64:26:5a:43:c4:68:30:
88:f3:15:ce:71:e1:1d:55:02:c7:cc:e8:64:1a:bf:
d0:2d:bd:be:1d:67:f0:13:f7:c0:74:2e:3a:6e:50:
10:02:03:28:88:06:66:9e:47:d2:0e:91:48:35:d2:
18:7a:30:82:e6:db:de:a5:75:a4:59:f7:64:d6:8b:
1a:d9:b5:3e:11:f0:67:0b:2a:cc:7e:6b:8a:98:03:
83:f8:8a:0d:87:95:5d:6d:f4:75:3d:9c:bc:d5:17:
6d:58:ed:bc:61:93:39:98:6a:48:ec:4f:e8:2c:d6:
79:ba:1c:a7:c4:29:ba:a6:31:1e:8f:ca:67:6b:ad:
cb:87:fc:9e:9e:31:01:67:3d:42:51:0b:08:19:85:
e5:bd:22:cb:03:92:d5:49:53:e4:a3:d9:33:3b:b0:
9b:98:c0:8e:40:81:78:7b:04:75:b6:08:3b:ab:53:
ee:8b:94:8d:1f:1e:7a:3a:95:60:7e:9e:4c:ab:51:
9e:c6:ad:53:e2:6a:01:c4:ed:f3:80:6a:59:62:a9:
69:9c:cb:68:df:98:df:cc:6b:2b:00:a6:dc:ee:d3:
1c:08:72:35:ef:ae:87:73:98:7c:2a:8b:99:cd:9d:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:F8:A9:9F:FE:C9:AA:17:0E:0C:EF:21:23:8C:E6:22:E1:4B:6D
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:21:c4:ea:6d:9e:38:37:b4:8a:73:2e:fb:14:17:45:04:f2:
72:14:f9:ea:67:8d:90:a7:09:4f:d9:3c:d3:e8:f7:ba:cb:1d:
18:58:9d:da:83:4d:a9:84:32:8c:05:b2:d8:86:cd:4e:92:02:
59:90:4f:f3:8b:28:8e:42:86:64:34:ac:61:c1:8b:db:6f:df:
a2:08:65:29:80:07:74:98:ff:fa:08:80:ad:ca:97:54:8a:df:
a4:3b:c4:03:aa:59:61:89:01:60:b3:05:81:36:19:64:46:89:
1a:2a:93:5b:59:2d:54:5b:3d:02:e1:d0:14:95:22:03:c2:2d:
22:84:89:a0:dd:7b:be:bf:74:ce:e4:22:e3:50:46:31:d7:16:
9c:fa:a1:83:e0:9b:43:a8:54:00:4b:2d:f2:4c:28:a9:6b:01:
a0:00:c6:c2:0c:2b:12:b0:5d:da:64:1f:fd:55:12:e8:02:c8:
e1:23:29:7b:d1:54:6f:9e:0f:e5:3f:c9:7e:53:9f:42:7b:04:
93:26:fc:29:21:ce:75:4a:ce:22:c0:01:81:25:98:0c:33:a9:
bd:fb:e9:96:b3:27:8f:03:ad:84:0d:90:3c:14:e3:8d:e0:3d:
b4:8e:6b:48:ce:68:cf:c7:30:a6:d8:33:b2:f6:9a:88:58:06:
26:bd:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:42 2025 by rpki-client