Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: b0OUVBNfV9ytSoDbNgO6+Aii0gYPpyEnHnFzzAF509g=
Subject key identifier: 1D:D2:AB:D0:A1:E6:19:02:90:65:1D:BF:A9:8F:45:8A:22:21:A4:37
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 01974D7C2A977FE7C3C647648D25755399D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 7C
Signing time: Sun 08 Jun 2025 03:01:12 +0000
Manifest this update: Sun 08 Jun 2025 03:01:12 +0000
Manifest next update: Mon 09 Jun 2025 03:01:12 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: USV7dL4VYyqMtMHTSXNXn33dVfrqRQnlUan/QLNrvLo=)
2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:2a:97:7f:e7:c3:c6:47:64:8d:25:75:53:99:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Jun 8 03:01:12 2025 GMT
Not After : Jun 9 03:01:12 2025 GMT
Subject: CN=1dd2abd0a1e6190290651dbfa98f458a2221a437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:9b:5d:c3:b8:66:00:e0:bd:39:51:ad:c4:
c7:16:88:ed:c4:a0:fa:18:e8:f3:13:74:18:cf:2b:
80:d0:bc:4f:ac:b0:03:38:5c:86:b0:af:6f:57:f1:
9e:42:74:1a:69:47:cd:e3:63:b7:6f:52:3a:a1:b4:
6a:ab:bd:21:9f:30:7c:13:94:5e:25:01:c4:52:19:
96:62:5f:8e:87:68:95:e1:c5:01:03:ea:28:52:b8:
3f:b7:69:14:18:24:ea:62:5a:00:19:48:85:f7:89:
70:a1:7c:dc:6c:50:f1:94:54:aa:70:3c:57:4b:3b:
2b:0b:a4:63:1b:a7:5f:1e:48:93:1a:f0:d0:11:da:
f4:f4:d0:b1:fa:19:f8:38:59:44:99:79:9a:99:9b:
af:5f:bc:ae:2e:c4:12:82:73:51:ae:f0:ab:52:a5:
b3:c1:d4:b8:a7:fa:aa:18:32:04:76:e0:59:e5:e9:
fb:71:26:a0:e2:5d:e6:2b:28:9b:dc:d6:fc:d7:62:
4f:ca:16:7f:97:64:4d:73:89:a5:96:0b:80:16:59:
13:4d:0f:f8:af:f6:05:7b:75:40:c7:4b:de:f1:80:
83:f6:32:49:f8:97:d9:57:d3:c6:38:42:5d:5d:4a:
4f:60:a2:c1:16:a8:85:ac:ae:bf:6a:69:d6:7b:1f:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:AB:D0:A1:E6:19:02:90:65:1D:BF:A9:8F:45:8A:22:21:A4:37
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d3:70:ff:79:38:eb:b4:15:ef:5c:8a:62:e3:0e:31:9d:ca:
5e:d5:d4:9f:d5:d9:df:b3:05:a1:22:b3:fd:62:9d:cd:cd:7b:
0d:cb:f1:03:29:a0:ec:58:42:59:0a:e9:f9:6c:8a:2c:bf:84:
cb:81:2e:ac:0e:55:44:4b:13:5c:2e:31:a2:97:31:75:8d:87:
f3:ed:ec:b8:23:a7:6e:f2:db:2a:4f:03:b8:41:5e:ab:43:65:
5a:94:68:3b:9d:7c:df:b2:ec:d8:d5:78:6a:46:17:06:4f:fc:
64:42:0b:25:8b:5c:ff:06:5d:68:38:57:b2:e3:10:7a:61:bc:
31:23:f5:54:7f:07:e8:3e:57:8a:5a:33:42:67:0d:c5:d3:79:
7c:3a:33:80:19:70:71:92:55:28:be:7e:6d:8b:95:80:05:57:
68:e5:04:1f:99:30:2e:06:6e:52:7c:b4:2e:4b:5e:f6:05:c1:
0a:05:d4:81:cf:47:42:d7:ed:fa:83:5b:21:b1:8f:01:af:c3:
d4:55:6e:5e:cd:ba:a7:d0:1a:38:ed:1b:29:41:c9:4e:49:0d:
2c:69:0b:5e:ac:53:2d:b5:23:38:89:c1:0d:ef:0d:64:1c:22:
89:60:32:ba:e6:ab:39:4c:c8:0e:96:5f:35:81:f4:8c:76:d9:
47:71:b1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:20 2025 by rpki-client