Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: mf55SE1dYPXw1zjfZwgbyQYEMQ8+CtHrjTWqPJ9uLyQ=
Subject key identifier: 08:EF:07:8A:81:99:87:78:50:FF:99:F2:08:BA:C4:81:4A:22:04:CB
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019747426597DA6A013F74394C342D476C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 1131
Signing time: Fri 06 Jun 2025 22:00:23 +0000
Manifest this update: Fri 06 Jun 2025 22:00:23 +0000
Manifest next update: Sat 07 Jun 2025 22:00:23 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: jtxe7dQHsxNUug3k6OsTcDwggQCE7Yyj0THLeHRotFQ=)
2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:65:97:da:6a:01:3f:74:39:4c:34:2d:47:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Jun 6 22:00:23 2025 GMT
Not After : Jun 7 22:00:23 2025 GMT
Subject: CN=08ef078a8199877850ff99f208bac4814a2204cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:d0:60:41:71:53:92:f7:d8:ff:07:5a:fe:
a7:37:83:0b:27:44:7d:fe:d2:bc:ea:93:92:20:56:
bf:8d:11:1b:6a:f8:cd:d3:6c:6d:a2:13:6b:8f:c4:
db:11:dd:5d:61:12:d9:35:f3:2f:a7:31:a9:5e:a9:
77:ff:2e:43:65:58:3b:2f:55:72:85:f1:60:d8:7b:
6c:e5:d2:a5:de:9a:aa:3e:9d:35:35:d8:76:15:d4:
d1:a2:f2:b3:29:6e:fd:2d:ae:e0:a2:c1:90:48:24:
e1:ef:be:b4:a2:d7:ba:99:24:8a:38:02:7b:a8:26:
ea:75:26:fe:07:19:08:73:f7:ce:68:08:e9:c3:27:
2f:62:f7:c6:6d:be:b1:df:bb:d0:9e:6b:a6:3a:1f:
3f:da:87:bb:25:ec:3e:d8:7d:47:df:3a:ef:5b:a4:
7e:30:d4:88:50:f7:e4:1a:6d:af:2e:b1:ad:22:03:
82:c5:4d:af:4c:3a:0b:7c:d5:c4:12:fa:e7:49:e3:
89:63:74:ed:06:4f:22:86:51:c8:bb:3c:f3:ab:0c:
e8:08:9d:9a:3c:c5:b6:7f:5a:2b:6d:93:96:0e:a3:
e2:91:c6:ed:f0:48:48:be:c4:66:c0:48:f3:86:94:
52:b1:a3:87:93:41:d9:24:19:12:61:29:79:dc:4a:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EF:07:8A:81:99:87:78:50:FF:99:F2:08:BA:C4:81:4A:22:04:CB
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5c:4f:81:d9:ea:78:af:34:d2:e4:82:72:76:ce:2f:9e:f9:
b2:cf:64:d7:61:9c:08:6c:83:87:79:73:c0:a0:33:a6:6d:24:
b0:75:17:d2:97:e0:ee:8e:a6:43:87:c9:ae:03:5e:e0:27:60:
52:32:41:5e:b8:f0:b2:5b:eb:e8:e3:b6:e5:b0:f1:77:4e:a1:
f3:c7:0d:db:8c:f9:a9:0c:d0:b1:b4:0c:c8:06:9a:68:0c:72:
fa:3a:8a:ea:30:eb:b0:cb:d3:f6:d1:83:f2:ea:a3:c0:6c:13:
74:46:c6:a8:cb:16:7d:24:20:5e:f7:2e:0d:dd:cc:45:8e:b9:
de:67:a1:d4:41:bd:ed:89:f0:fe:ac:95:80:2d:9e:eb:ac:8c:
bb:84:c2:63:df:23:8e:37:f2:b4:d5:1d:04:88:b0:4a:c3:51:
25:b4:2f:c7:55:ef:b4:fe:83:93:df:3e:11:48:0f:7f:57:4f:
a6:f1:d4:ea:81:52:cb:5e:c8:28:ff:f1:58:79:62:ff:81:28:
c8:1b:dc:51:9d:d0:17:60:3a:00:3c:0f:4f:5a:be:58:e1:80:
f8:7c:58:af:4f:ac:a5:07:f4:fa:b0:6e:1a:23:b4:50:b7:b8:
6a:c6:c4:ec:b2:8a:a3:4b:80:b8:dd:3f:fd:ec:4a:7a:83:8f:
e0:8a:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:39 2025 by rpki-client