Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: 3cLluKcnu/v6l+9+Cj/Kvw7aIoXiUX6ede0rUhRHhZs=
Subject key identifier: 3B:D9:5D:8F:F9:BB:6F:B5:10:27:21:66:31:3F:27:8F:E7:4B:BB:C9
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019873E2283DBE2546A581DC3CF7DD23D367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0A23
Signing time: Mon 04 Aug 2025 07:00:57 +0000
Manifest this update: Mon 04 Aug 2025 07:00:57 +0000
Manifest next update: Tue 05 Aug 2025 07:00:57 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: XucNwJwHqzccEyx5G5Kh8I9ujuO+MtNTtT7myAgY7pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:28:3d:be:25:46:a5:81:dc:3c:f7:dd:23:d3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Aug 4 07:00:57 2025 GMT
Not After : Aug 5 07:00:57 2025 GMT
Subject: CN=3bd95d8ff9bb6fb510272166313f278fe74bbbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:b7:12:75:3d:a3:36:55:96:06:a5:21:68:
ac:ea:f8:78:34:42:d5:dd:0c:ca:45:a1:26:5f:93:
63:52:99:90:1b:a5:d7:76:b4:f0:ee:1b:a3:b4:ef:
c6:91:37:44:47:c2:61:7d:04:5d:54:5a:a7:7a:2f:
fc:b4:dd:88:12:26:4c:1b:5d:cd:8e:0f:1f:37:52:
e9:ec:37:c6:3f:af:25:dc:a7:3d:c0:29:71:a7:55:
82:5d:ca:e6:93:6e:09:41:3b:54:d1:2f:fb:2f:87:
e1:70:f4:73:41:a8:46:f5:d5:33:11:9d:03:41:55:
23:b4:0e:7c:1b:7a:6e:1d:c2:8e:20:d4:7d:c7:ce:
33:f4:82:55:1a:07:87:ed:4e:8b:e4:90:a4:fd:3c:
b6:2a:ae:7f:3d:a4:05:c7:34:9e:fa:a6:10:1b:1a:
a5:5e:a6:2a:43:bd:93:8c:ea:73:55:4f:c8:07:65:
49:63:e0:5a:17:79:c5:78:bf:b8:0f:db:0c:a9:aa:
cd:ef:de:01:a0:35:c2:58:65:96:78:11:94:06:f0:
67:1a:82:1c:96:e5:6e:14:b0:ce:67:16:ab:5f:db:
9d:42:fb:bd:21:63:03:82:33:3d:07:a3:ea:37:5e:
e6:8c:e6:12:17:ae:72:18:8c:24:a2:ac:8f:3e:8e:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:5D:8F:F9:BB:6F:B5:10:27:21:66:31:3F:27:8F:E7:4B:BB:C9
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9b:84:48:4b:d3:a4:04:f7:4b:35:07:01:14:7f:fe:82:ef:
dc:5c:9d:d6:e8:a3:ed:40:64:ce:3e:c2:57:38:84:db:94:fc:
ca:9b:ec:ef:24:89:d3:a4:0a:6f:13:2a:63:8c:1c:d8:a0:e9:
cb:2b:50:5c:53:fd:7a:64:2b:5b:cd:de:58:b1:d1:4a:24:cc:
13:18:aa:07:f2:85:c6:c3:63:c3:8e:14:62:43:c3:28:f6:cc:
48:72:4e:fa:2d:4b:33:de:df:bb:b1:c8:d6:b5:5c:f6:21:73:
c5:bd:19:23:25:2d:07:6b:40:93:f9:a0:9a:a4:b4:ae:52:ac:
bd:1a:80:8b:7d:bc:2d:61:4b:ea:32:d9:81:93:df:e9:ad:f3:
55:62:95:03:be:1e:48:8b:da:27:69:02:eb:f2:c2:b8:3c:32:
cd:8a:84:5d:11:53:53:8e:56:b7:ec:39:be:07:36:cc:7a:ab:
19:17:b0:d6:e8:b2:b2:c3:56:e9:20:90:27:3d:ab:ff:56:cc:
5c:a1:0c:64:c0:c6:00:ad:4e:47:47:60:2c:ab:90:ad:1d:d1:
4c:c8:4e:c4:d4:b3:bc:08:4e:d9:58:e1:2f:72:6f:55:eb:bb:
2e:49:15:52:a6:25:7c:ca:fb:6d:d9:35:12:15:53:d9:ce:36:
bb:93:c7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:34 2025 by rpki-client