Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: jDODVrWJn0e4GyK6baAiqpzx1P5hEHKqbKRSUjGLPVk=
Subject key identifier: 3E:5F:7E:17:87:97:E5:D2:4E:9D:79:8A:3F:97:EA:D3:D9:6A:8C:16
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 01978B7ED29F95ABF2A1583B1A7EE1DFDA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 109D
Signing time: Fri 20 Jun 2025 04:00:33 +0000
Manifest this update: Fri 20 Jun 2025 04:00:33 +0000
Manifest next update: Sat 21 Jun 2025 04:00:33 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: rOlVFTXXVvqKI7bDfTPWfpY2p30/ue+f2fsCXgBKqQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:7e:d2:9f:95:ab:f2:a1:58:3b:1a:7e:e1:df:da:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Jun 20 04:00:33 2025 GMT
Not After : Jun 21 04:00:33 2025 GMT
Subject: CN=3e5f7e178797e5d24e9d798a3f97ead3d96a8c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:71:df:bd:91:54:77:1f:dd:8a:2b:85:b9:
f1:f4:eb:ad:f9:43:90:1a:53:f5:f4:35:0b:8c:e3:
2b:72:1d:b5:45:64:ae:69:51:e3:ef:64:34:79:61:
88:a9:0c:ae:6f:c0:ce:53:2c:f3:26:8f:4a:84:c4:
b3:81:2e:31:c0:1f:16:3e:95:cd:b1:25:6e:64:15:
31:70:01:cf:c7:ce:b1:c2:53:db:59:31:60:1c:b7:
23:7f:ac:de:15:81:57:87:6e:71:a2:ea:20:18:25:
af:f6:4b:9b:7f:74:1c:eb:26:d1:cd:c8:22:d0:0d:
13:8d:78:5a:4e:b7:95:23:65:f0:86:4c:a7:8a:9e:
b3:86:e5:34:d9:f2:f3:42:d4:67:64:10:68:ee:3e:
6b:76:bf:75:70:14:a7:0f:ad:ec:d4:37:4c:3c:0a:
4e:9b:d4:70:76:38:7e:5b:3a:76:f2:1d:b8:61:3a:
7e:6a:79:e0:9a:c1:d3:a6:0b:f7:b2:f6:0d:ca:5f:
29:16:8d:1c:07:5c:a5:dd:da:69:ee:23:9d:dd:8b:
43:4b:1c:a0:5c:c1:ea:0e:64:1a:3c:e9:1f:6c:91:
63:6b:f3:b3:ce:05:40:cc:5f:df:b3:21:a1:07:3c:
c3:f5:37:b7:10:68:e8:21:5b:14:86:2a:0f:b6:14:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5F:7E:17:87:97:E5:D2:4E:9D:79:8A:3F:97:EA:D3:D9:6A:8C:16
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:89:cc:dd:a8:87:fd:05:80:51:61:9b:a7:68:68:dd:26:87:
84:29:bc:1c:f3:a1:49:e9:ce:cf:d0:aa:89:af:5a:d9:d9:dd:
ab:06:0f:15:84:34:85:5f:95:3e:8a:0f:a2:69:b1:8c:40:71:
6e:15:34:e8:1e:2f:b6:fa:49:96:44:ec:92:2f:83:7a:4d:0a:
95:ea:96:d8:04:7c:1a:13:ee:46:a8:97:b9:2c:26:0e:14:0b:
44:5c:33:68:1c:30:af:ea:4a:d0:6d:19:08:d4:35:07:60:fa:
4c:e5:fa:0e:34:34:9e:56:20:e0:22:6d:38:5e:ef:4a:92:f0:
1c:fd:c4:25:41:fa:4f:23:59:d6:6b:e4:5a:2b:78:5d:84:1d:
d0:28:af:5e:2a:15:20:fe:6b:a5:a9:58:ab:a2:00:e4:c5:60:
84:81:c4:99:ed:c0:f0:66:8b:fb:5a:53:e8:2b:1b:4a:e6:ef:
11:06:4f:9c:54:0d:8c:bf:f5:1e:68:90:57:a9:a9:a2:12:d6:
c0:88:4e:3c:12:87:60:e1:38:8a:89:fa:e7:5c:d8:06:04:17:
85:19:ac:4a:51:1e:ed:82:fa:0d:f2:78:c9:4b:59:d1:ea:01:
03:bb:7c:e0:46:44:30:a2:f6:f8:3a:52:cc:ce:d7:d5:0e:aa:
f0:aa:0f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:14:57 2025 by rpki-client