Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: B0BNiCtCrUwYDe1uh0QyzL+Vik5d/J0qhgAw4zW7rRk=
Subject key identifier: EF:CB:4A:A1:94:F8:D1:6E:BE:85:96:08:0E:C0:55:EC:EF:C9:02:37
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 01976BBCB4164853AD70D65CE57753C1A40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 03E4
Signing time: Sat 14 Jun 2025 00:00:18 +0000
Manifest this update: Sat 14 Jun 2025 00:00:18 +0000
Manifest next update: Sun 15 Jun 2025 00:00:18 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: dMYXOBer2CSnEQW/FOHqgHHZDlxuDTlAoZ/f7WrfK0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:b4:16:48:53:ad:70:d6:5c:e5:77:53:c1:a4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Jun 14 00:00:18 2025 GMT
Not After : Jun 15 00:00:18 2025 GMT
Subject: CN=efcb4aa194f8d16ebe8596080ec055ecefc90237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:d4:c8:19:f3:e8:87:9a:cb:80:31:a3:b9:
2f:47:4b:dc:85:d7:71:a2:5c:76:b5:b5:a4:c3:0b:
08:ed:a3:5c:03:8a:44:8f:44:0d:17:7e:7a:2f:ba:
90:75:95:5d:4d:d0:24:2c:6e:47:60:87:3c:a6:6f:
7f:f0:34:42:4a:c1:3c:24:41:c1:e7:0e:92:7d:a1:
7e:13:a0:b8:34:85:9e:35:c6:03:e5:88:4f:33:3a:
a7:ae:7f:59:3e:b2:02:ba:d4:cf:fd:1a:55:06:2e:
c3:53:a3:81:1f:86:25:1b:c9:77:35:3d:f0:47:69:
73:5a:98:7d:47:97:6f:5a:ca:24:32:2c:93:aa:21:
8a:34:1b:ca:d5:0c:31:c4:3d:73:b1:ef:f0:63:6e:
e8:40:05:6e:65:c6:46:2a:b4:8b:30:f0:a0:99:78:
ab:6b:4a:d0:9b:bb:ab:d7:90:99:ea:4f:55:97:03:
f5:d7:f8:37:47:c8:d4:1d:a0:76:c1:fd:fe:19:59:
8d:ba:2a:e9:36:05:c4:7b:47:60:30:6a:49:88:d6:
cb:4a:cc:3e:c0:8b:2b:fe:f7:28:7f:7b:69:e0:e7:
0f:f9:4e:39:ff:da:5d:88:a2:c8:fc:55:bb:8c:12:
42:ea:a4:73:5c:c6:e6:55:68:8c:a7:9d:6a:b4:01:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:4A:A1:94:F8:D1:6E:BE:85:96:08:0E:C0:55:EC:EF:C9:02:37
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f8:12:da:9e:0e:b2:f9:52:40:b2:6b:78:47:1f:ce:f0:23:
ad:94:88:ee:12:62:2f:b4:15:fd:0a:e2:f4:88:c3:af:aa:9f:
44:a0:c0:00:ab:26:ea:94:34:59:75:90:16:59:aa:2d:c7:dc:
27:a1:26:bc:6d:a3:b0:48:bb:22:f6:16:95:b5:80:e5:0d:d3:
2f:03:85:8b:b6:c0:44:a6:b4:63:60:36:19:5d:87:cc:90:37:
9d:7e:da:d7:cc:cd:60:07:4c:ba:16:5f:f4:cc:70:20:f0:31:
3b:bb:a7:54:a0:80:23:f5:ba:b2:da:04:20:08:88:25:2e:84:
a2:ce:59:72:0e:c0:dd:2f:6f:94:f0:8e:fa:e5:9c:8b:75:e6:
56:f3:27:68:01:c1:eb:50:6c:34:0c:79:cb:a5:7e:ce:e3:2f:
ac:50:71:26:a4:e1:25:1a:b1:05:d2:34:9a:da:f0:3a:0a:8a:
ff:e3:2c:36:41:cf:aa:97:46:41:78:84:bb:52:f3:69:22:15:
48:aa:77:cc:45:77:1d:78:a4:9c:78:6e:cb:3b:8c:9c:c7:f6:
2c:42:96:b7:28:5b:94:de:19:08:ee:7d:04:c1:d6:be:64:18:
8d:6d:d9:ce:d7:70:1d:96:d7:fd:a4:42:50:39:91:3b:cf:76:
d0:9e:5b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:39 2025 by rpki-client