Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: qP0HKZ9rZ7jzwFReKGX4zNbixYfo7JG0QFWekX+WGTg=
Subject key identifier: 13:A3:88:20:B0:D6:14:09:03:57:FE:7E:ED:29:58:07:DA:1D:8C:52
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 0197469D8D2E50D3A8CD73442294CBE60E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 147A
Signing time: Fri 06 Jun 2025 19:00:19 +0000
Manifest this update: Fri 06 Jun 2025 19:00:19 +0000
Manifest next update: Sat 07 Jun 2025 19:00:19 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: CwJWeM53cPHCbvuqZLVOtcqddT53LlQKOY9YinWUIrQ=)
2: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (hash: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:8d:2e:50:d3:a8:cd:73:44:22:94:cb:e6:0e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Jun 6 19:00:19 2025 GMT
Not After : Jun 7 19:00:19 2025 GMT
Subject: CN=13a38820b0d614090357fe7eed295807da1d8c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:d9:ef:c1:49:70:81:b5:d1:bd:bf:bf:98:
b1:68:73:14:3f:63:78:fb:15:70:1c:fb:b7:75:c7:
4b:ba:9b:a7:2a:fe:f7:93:47:d5:88:10:9e:ec:c8:
e8:ea:5f:58:eb:2d:60:6e:9b:02:de:5c:ad:8a:35:
85:6b:c0:fe:e0:84:4d:98:1a:eb:dd:76:d0:86:f3:
d9:24:af:05:8b:79:1a:6b:ef:af:6f:05:00:5d:16:
e6:96:da:23:3d:9d:a2:b7:fc:5a:73:59:d1:3b:97:
5e:64:d9:d9:72:0d:f7:c7:df:cd:24:23:e4:ad:5f:
1e:c6:2c:6e:c1:ed:ca:e1:a7:02:2c:cf:1d:a3:fd:
11:bf:3a:ab:bb:48:43:20:d7:1b:9a:c4:2d:79:15:
4f:71:a9:58:fb:ea:6d:e6:25:c6:b4:c4:e6:d1:4d:
2b:8e:34:bb:5f:92:09:4b:f0:da:51:4f:db:7b:13:
d7:1f:2e:bf:36:ca:94:b2:d8:91:db:74:9d:a8:8a:
c2:42:2f:df:6f:29:1b:a5:55:e5:93:2c:0a:6c:2b:
ab:9f:74:26:08:09:12:5e:a7:ae:45:bb:2d:6b:74:
12:50:b9:83:5f:c4:0c:1e:69:b9:ee:0b:71:a6:3f:
6d:5f:89:f3:74:d1:68:b3:1d:07:27:5e:6e:4c:9b:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A3:88:20:B0:D6:14:09:03:57:FE:7E:ED:29:58:07:DA:1D:8C:52
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:af:de:15:e3:33:69:67:70:52:6c:a6:68:b5:2a:d9:44:2f:
30:a7:96:a4:bd:d3:ac:6a:83:48:7e:b0:70:7b:c7:0d:ec:db:
d8:cf:8a:0e:8a:0d:5c:16:2f:bd:3c:53:eb:d9:ea:b5:6d:a6:
fa:ad:1a:1f:2c:ef:95:bb:23:93:e7:0c:00:18:66:8a:8c:1d:
7a:67:9e:bd:d1:6f:a7:96:9a:73:9d:f5:c8:a2:4f:8d:a7:64:
e4:f0:0b:36:15:88:e1:12:b5:a5:a8:47:b6:bd:a6:bc:57:6f:
be:4c:11:15:b6:9a:fb:ce:77:64:ce:bf:ea:be:4b:36:51:6e:
cd:5b:6d:0a:d2:00:fd:66:b9:39:c3:fa:c6:f2:87:c8:0c:e3:
da:eb:27:d3:fc:e2:05:8c:0c:4b:cb:5b:6c:94:94:fc:59:5b:
6f:45:52:50:cf:8a:66:75:03:18:5b:c8:8e:9b:c3:e9:24:4c:
87:80:4d:36:01:a9:43:4b:c8:6d:c4:83:3e:8c:25:cf:3d:e9:
13:f3:24:8a:cc:47:f7:96:5b:bf:b8:b6:49:3d:14:1b:56:d0:
67:e5:34:ca:d0:27:4c:77:56:c0:32:38:c8:79:c6:c5:e2:c0:
35:52:f5:a6:2f:20:75:d9:57:f9:75:da:ba:e9:71:2c:3f:f0:
45:eb:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:12:56 2025 by rpki-client