Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: 5+QnebfpepG2aBr5NAxYYJ8vDBFc4+akbDvVDXcJpBc=
Subject key identifier: 68:7E:E9:EF:40:4E:02:92:B1:25:1C:3E:41:C7:00:52:1E:DC:84:B8
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 01976997B3669DC505DBC11837BA1261BA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 12D1
Signing time: Fri 13 Jun 2025 14:00:38 +0000
Manifest this update: Fri 13 Jun 2025 14:00:38 +0000
Manifest next update: Sat 14 Jun 2025 14:00:38 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: 4HJb/KLdgTCqkNoWLzJnU8tp7BQM5IzpuEf1DABCKDQ=)
2: 5tz1cuLC3Spal7LSIEjI-Qlcl6U.roa (hash: XSoR4/ODhnGd0USG7NRxHx6V9kNwJuT3OUfa19EcNCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:b3:66:9d:c5:05:db:c1:18:37:ba:12:61:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Jun 13 14:00:38 2025 GMT
Not After : Jun 14 14:00:38 2025 GMT
Subject: CN=687ee9ef404e0292b1251c3e41c700521edc84b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:ab:7a:46:9e:9a:90:f9:cd:4a:33:35:ad:
a7:7c:ea:90:08:71:73:f7:6b:29:08:e8:2b:ed:d5:
8f:af:2d:8d:7c:d7:bd:65:71:75:d6:2d:45:96:d7:
f4:98:b8:b4:6d:c8:32:ff:a7:67:b2:be:54:15:c9:
fe:e1:31:80:ec:af:99:d5:d5:fc:70:f2:41:49:a5:
79:d9:11:23:cc:7d:50:c0:51:5e:69:a9:ee:fd:19:
cd:78:32:1d:43:68:53:ac:14:15:ba:61:67:84:d2:
ba:3b:8b:c5:5f:f3:7b:9f:13:c1:0b:e9:1a:e0:21:
e9:81:e2:cb:1a:cf:7e:d4:b9:9f:de:8b:18:1d:31:
9b:f7:bc:27:09:e5:d0:d3:f6:37:2f:45:c5:c3:fc:
49:26:f7:d0:0b:a7:94:9f:73:b9:5c:a7:d6:55:69:
d1:4b:e2:be:70:88:40:60:c5:c9:d7:6c:30:98:7b:
55:44:c4:74:be:84:dc:b3:b0:25:74:75:0d:08:76:
49:57:9b:21:99:d3:98:ed:08:59:2e:c6:03:80:6f:
95:7f:fa:3b:76:19:eb:5f:ae:39:ee:01:76:5b:62:
a0:75:39:4c:d3:21:35:4b:84:b3:87:85:13:17:1d:
c4:9d:24:fa:26:7c:25:3f:5c:5e:cf:a2:44:4b:f9:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7E:E9:EF:40:4E:02:92:B1:25:1C:3E:41:C7:00:52:1E:DC:84:B8
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:50:b5:98:d6:05:c4:8b:dd:90:0a:1b:6a:ff:fe:2f:c9:23:
94:9a:9f:b5:84:ec:78:45:86:e4:68:8f:cc:de:1c:a8:96:ba:
77:96:9a:26:e1:a2:24:bd:e5:89:81:34:2d:ff:41:de:7a:21:
ab:b5:fa:21:1b:9e:08:dd:3a:33:25:0a:27:18:42:71:86:b8:
94:24:91:96:5f:48:5d:f0:77:b5:86:8e:3e:1c:ef:94:2a:15:
cb:6a:b2:9f:5c:ad:fb:63:9a:2e:05:6e:30:8e:57:db:67:7c:
85:50:b1:a8:c1:3a:53:e6:8d:f1:13:2a:d4:36:b4:ba:0d:69:
5b:fb:e1:73:0d:53:b5:0b:5c:8f:0c:89:36:db:b2:ed:f7:1d:
ac:2e:e5:da:b3:9f:17:c6:5b:c3:78:97:22:a1:98:94:46:af:
c1:60:74:d3:bb:3e:b1:61:63:ed:94:75:18:5d:7d:84:7f:63:
68:16:ac:cc:20:14:bb:1d:b2:ec:1e:2d:3e:41:3d:9f:b5:4a:
23:88:a6:18:c2:e4:9a:b5:a7:dd:6a:c8:af:cb:f8:ff:f1:6e:
7a:b0:02:8d:ae:c9:07:79:47:a3:f8:18:e0:c7:cd:9c:2a:4f:
9e:22:44:0e:b9:a1:a9:34:fe:d4:4c:72:de:5f:7b:e8:9e:8a:
37:70:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:28 2025 by rpki-client