Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: Y9vSXYwg8jQfgRUBR76YbqJZYciLgsDQ+IgD3U/PTmg=
Subject key identifier: B3:38:08:5D:E2:B8:86:0C:45:90:CF:C1:99:21:08:AD:3A:57:E2:7E
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 01976F2CBF8388868A6681BD46402B4C16CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 099C
Signing time: Sat 14 Jun 2025 16:01:32 +0000
Manifest this update: Sat 14 Jun 2025 16:01:32 +0000
Manifest next update: Sun 15 Jun 2025 16:01:32 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: 6zvxG0eo5Le4i8HefSF2tN+mokx/lPQMcv5RGqOX+Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:bf:83:88:86:8a:66:81:bd:46:40:2b:4c:16:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Jun 14 16:01:32 2025 GMT
Not After : Jun 15 16:01:32 2025 GMT
Subject: CN=b338085de2b8860c4590cfc1992108ad3a57e27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:a2:11:8b:b3:aa:73:0a:ae:66:09:3a:9d:
67:1d:e9:f7:7b:c7:97:13:ca:6f:65:b6:76:8a:46:
ae:14:39:42:58:b9:55:20:05:35:06:ad:e0:d3:05:
7f:80:98:de:7e:64:4d:d2:e3:a8:b6:18:76:04:a0:
a6:5b:52:89:3a:35:3b:a2:93:f1:f9:54:d1:e5:21:
6a:7f:cb:76:95:77:82:a3:c5:5f:49:f2:b4:f3:8b:
87:9f:49:ef:35:88:4e:fc:f2:5f:e9:ba:b4:39:76:
a9:ce:5a:ac:83:26:6b:6f:6f:cb:4d:b2:6d:96:26:
15:bf:8e:20:55:5f:c9:fa:b3:d2:f7:a0:6e:d9:90:
d4:14:07:8d:e5:27:2a:e7:44:0d:4b:89:25:db:5d:
7b:48:a3:97:d1:a1:b0:fe:90:99:60:90:1b:ac:01:
8d:39:45:d0:76:19:3b:59:51:e6:2f:2b:71:74:68:
9f:f6:a6:cc:df:34:43:df:fc:8a:f2:63:88:44:d4:
6d:ea:d1:84:13:78:46:aa:27:cd:be:d3:c0:e9:f5:
20:e4:7d:a3:00:73:ce:c1:2b:8c:3f:15:9b:09:a5:
47:47:20:92:71:f3:cc:07:ab:d3:4a:c9:4b:aa:aa:
18:59:2b:28:ad:ee:43:59:31:91:ba:fb:65:56:16:
6f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:08:5D:E2:B8:86:0C:45:90:CF:C1:99:21:08:AD:3A:57:E2:7E
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:ac:5f:be:49:35:dd:47:66:96:7d:e2:73:85:94:67:a3:
31:ef:12:e5:70:d8:37:f9:68:07:72:cb:08:0f:8f:de:2d:4c:
cc:6c:20:0a:bd:37:33:1a:5b:c8:6d:77:48:5a:2a:da:86:5d:
0a:3d:90:6e:14:07:1a:d4:fc:ef:a9:3c:0e:45:8e:11:1d:66:
c2:84:08:12:52:3d:d8:2e:67:42:89:5b:95:02:f1:d4:bd:a9:
3e:cd:2c:4e:0f:9d:67:6e:ce:52:65:43:0f:2a:03:a3:72:2d:
fe:fc:e5:37:a3:8c:ea:0f:d7:10:6a:b7:4e:d3:90:e2:e5:1c:
90:1d:f0:94:9a:c3:eb:09:09:45:50:c1:01:2c:15:59:be:a0:
d0:6e:19:bb:7e:b4:ee:08:c7:9e:89:c9:02:90:f0:00:79:6b:
18:dc:52:a0:cb:a7:07:df:bc:f2:47:26:36:80:28:e4:f0:b0:
51:ce:bf:65:ac:17:d3:a5:ea:bd:5d:2d:47:26:ac:76:30:c0:
b7:b6:4e:c5:7e:0c:4c:e0:6e:a1:26:34:0a:0c:1b:b3:3a:55:
7d:75:6f:7e:a5:f7:df:93:ee:18:83:f5:65:e9:61:72:e7:08:
31:34:8a:1f:ac:f9:e3:2d:a5:7d:35:75:46:4c:7a:d7:78:1e:
6e:53:66:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:25 2025 by rpki-client