Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: t4jK3+bHmmOEX5k/0ML1JrUTYe+ksOb4uqj44I4GGys=
Subject key identifier: 84:62:97:A2:5A:B0:C7:DF:DE:3E:21:C3:23:97:FB:A0:4E:48:51:B4
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 0197470BC243C118985A6E6EBC03CFA101C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 150C
Signing time: Fri 06 Jun 2025 21:00:42 +0000
Manifest this update: Fri 06 Jun 2025 21:00:42 +0000
Manifest next update: Sat 07 Jun 2025 21:00:42 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: aXCEf/pQmqIv5b0yEipF8Lvhcjeyym+5C1Jgnyt5FBI=)
2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:c2:43:c1:18:98:5a:6e:6e:bc:03:cf:a1:01:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Jun 6 21:00:42 2025 GMT
Not After : Jun 7 21:00:42 2025 GMT
Subject: CN=846297a25ab0c7dfde3e21c32397fba04e4851b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:ad:06:1c:f3:94:6f:d7:e6:ca:4f:d2:3d:
6a:16:a9:67:25:cd:5f:18:79:45:1d:6c:e5:06:36:
c3:50:bc:f6:7a:3e:cc:8c:33:57:a9:16:cb:0e:69:
a8:44:36:a1:52:07:ba:d3:40:68:9c:8a:4f:be:71:
c9:c5:bb:2d:a7:01:4f:c0:93:b4:33:03:59:33:11:
03:9d:de:19:40:65:ef:15:b7:de:5e:ee:f6:7a:1d:
b5:fe:07:63:3e:60:76:33:8f:79:ed:f8:38:cf:ba:
9b:11:09:23:59:96:e4:7b:74:ad:86:d1:be:c0:97:
a9:86:03:cf:95:93:e8:9d:cd:d2:ef:e2:13:12:4c:
6d:10:b1:07:8d:8c:ad:19:ff:10:eb:53:06:28:eb:
81:89:6c:24:06:8e:59:e3:4c:df:7c:7f:d1:22:07:
52:92:60:69:c1:c1:01:c2:b5:db:b9:52:88:8d:e7:
59:30:e8:38:3c:67:12:7b:ff:49:e6:b9:b5:bc:0b:
42:4d:3c:85:7b:6c:c7:47:f8:e3:3d:ed:28:23:c6:
d7:96:72:ca:b1:ef:c3:ed:8b:ad:30:c0:ba:0f:f1:
64:38:3f:68:73:3b:dc:49:9e:2a:e4:85:61:82:04:
d3:8f:09:06:45:a2:e4:3c:d7:08:35:88:1e:25:7d:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:62:97:A2:5A:B0:C7:DF:DE:3E:21:C3:23:97:FB:A0:4E:48:51:B4
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b8:23:51:e6:57:e0:d9:e4:c1:70:35:b2:6c:02:e2:d0:6a:
43:23:f2:3e:d6:ef:b2:c3:55:91:64:1e:72:51:c5:ad:31:67:
e7:cc:e7:34:09:be:e8:af:72:7a:e8:d8:d1:a4:11:27:9e:4e:
1f:97:12:a5:9c:04:60:2a:75:38:db:4a:14:2b:f7:91:62:fb:
bf:a2:1d:d2:af:e1:23:11:80:a3:51:15:5d:7d:db:8b:d8:aa:
84:76:f9:13:4a:98:a9:86:a3:fd:24:f3:68:30:28:e4:f4:4f:
62:69:43:d5:8d:75:a8:f4:53:fc:bc:66:c7:a0:30:38:95:93:
23:bd:cb:91:8c:1a:5d:72:c6:3b:9e:35:e1:60:ad:42:a1:44:
c2:d6:0c:14:59:40:f6:e5:b7:39:b2:ab:bc:db:90:f1:01:6b:
38:9f:2f:fe:33:a6:de:65:bd:d8:02:5a:c6:39:52:76:d3:88:
5f:bd:1c:09:f3:43:f5:a2:6a:7f:e5:5b:d5:8a:b0:78:ff:4a:
05:99:ec:58:b4:fc:7d:dd:70:9a:42:d9:c6:7e:eb:3c:69:69:
ed:7c:4d:a3:a4:ae:7d:c2:77:f8:8b:e5:a9:34:3f:52:e5:97:
b5:a9:18:e2:78:43:e2:f9:f1:4c:9b:6c:7d:7b:5b:ef:34:9f:
74:6b:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:47 2025 by rpki-client