Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier: p0qCDM//xio1+aZ2A3ByLkyMttveD0NgRW+iX83BbQ4=
Subject key identifier: A4:A9:68:33:94:1D:F7:CB:DC:18:51:FE:B9:38:21:B1:B6:0E:50:8E
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 01976997C088A9F262436A63CDB41CE49AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number: 0484
Signing time: Fri 13 Jun 2025 14:00:42 +0000
Manifest this update: Fri 13 Jun 2025 14:00:42 +0000
Manifest next update: Sat 14 Jun 2025 14:00:42 +0000
Files and hashes: 1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: klPgJN2B9ckVu3z8j7wxKjNHqXGTbPt7Y8dGtuthFfI=)
2: _dBsBWq_R_HniB_oYd_SwrrifoY.roa (hash: lvPRkYEC7iItDLaOxgMbuIXZsy0MYwbc8HCCgTE8KuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:c0:88:a9:f2:62:43:6a:63:cd:b4:1c:e4:9a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Jun 13 14:00:42 2025 GMT
Not After : Jun 14 14:00:42 2025 GMT
Subject: CN=a4a96833941df7cbdc1851feb93821b1b60e508e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:93:ed:d3:fb:f6:0d:c4:73:ea:58:4f:82:
88:99:96:86:ec:54:0d:52:a8:d8:da:68:de:fb:f5:
8f:b6:b1:19:bc:20:14:7d:08:0f:08:6b:25:09:41:
bc:04:5e:27:7a:99:d4:3c:0e:8a:09:75:c6:84:ad:
ad:67:82:45:35:eb:49:de:af:33:5d:42:26:21:ac:
72:14:5e:df:aa:a7:cb:77:bb:d1:46:27:48:04:77:
48:ec:b4:77:f9:c2:86:0b:e0:3b:a2:2c:29:27:63:
97:78:fe:0f:a4:24:e3:fe:c9:8c:82:1d:8d:ea:55:
98:ff:77:37:3d:ca:8a:4e:1a:d6:89:f3:69:3d:4f:
ab:5a:97:1a:de:a5:2a:98:91:c7:02:4b:6b:a8:04:
fb:7a:54:e2:b4:6c:54:c2:83:e1:b2:30:f5:24:70:
01:3a:66:f1:d6:87:42:fe:7f:58:09:2d:66:e1:f4:
55:58:d3:fc:cf:08:e6:46:bb:19:53:17:c6:d1:5f:
19:7e:bb:63:c5:14:70:fa:b5:3b:63:16:5a:0c:b4:
79:f7:cc:b5:d3:2a:f2:33:65:28:02:d8:5a:bb:d1:
6c:36:13:d1:9b:81:a4:3a:ad:c2:11:52:7a:cd:ce:
d0:be:8b:47:c0:fb:73:15:31:14:f3:9c:73:de:a7:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A9:68:33:94:1D:F7:CB:DC:18:51:FE:B9:38:21:B1:B6:0E:50:8E
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c2:59:43:b6:cc:34:40:37:6d:16:28:86:1f:5a:77:02:86:
51:0c:7f:00:8f:31:6f:c2:b6:8f:32:3f:5b:f3:86:ee:56:5e:
1d:24:35:f4:e8:78:79:8b:1f:83:c3:04:4e:5c:e8:49:4c:10:
01:8f:b8:48:17:f8:25:e8:55:fa:e8:d4:f4:23:13:3f:44:13:
9c:29:b1:ce:a3:e9:2a:bd:1d:1f:a3:2c:1e:d3:7e:a4:f3:79:
f6:51:57:f9:ba:26:d3:9b:0a:9f:8f:26:68:7c:ee:6f:69:64:
b2:e4:6d:af:47:fd:7f:e4:27:61:f2:72:f8:4a:55:b9:90:d0:
1f:33:95:f9:92:35:7f:dd:13:24:56:a1:05:5a:66:d5:97:a1:
0b:a7:b1:5d:97:e5:5b:e7:9d:ff:af:89:e3:ec:9b:a9:2f:3e:
cc:92:9a:77:de:2f:fb:db:3a:ef:6d:6a:92:e9:a8:c5:2c:c6:
76:98:88:9a:57:70:50:6f:e1:62:0c:e5:fb:58:41:f5:7e:d7:
86:28:d6:6e:f9:1b:b5:2a:c5:e5:f5:62:ce:e9:4e:cc:38:33:
e3:d3:70:b2:f0:09:8d:75:08:f0:7a:71:f2:27:22:f7:f2:e3:
cb:8d:de:28:22:0a:a7:38:88:34:6e:27:19:cc:68:64:d7:10:
dc:c5:91:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:26 2025 by rpki-client