Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: ZXWQUngT/2x/Olu8/OoQ+FZjW3zOSAGkS8chVuPSFUI=
Subject key identifier: 5F:00:EC:AB:DC:F0:74:F1:9D:1A:67:9F:EF:C1:46:36:AD:3E:56:CF
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 01976BF404EFB4B8CB00D55216A4C0095521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 1353
Signing time: Sat 14 Jun 2025 01:00:43 +0000
Manifest this update: Sat 14 Jun 2025 01:00:43 +0000
Manifest next update: Sun 15 Jun 2025 01:00:43 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: kZHl7bjb2bzNNNahOc4mbxF06TAUOR1DXsemx4Dwytk=)
2: tE13-Z8TEXFI2N_Q3eslEjXwYJ4.roa (hash: 7axnrMAdFOe7EcvPvTZA4mgDnvv0sfD7w1s1AvMo3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:04:ef:b4:b8:cb:00:d5:52:16:a4:c0:09:55:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Jun 14 01:00:43 2025 GMT
Not After : Jun 15 01:00:43 2025 GMT
Subject: CN=5f00ecabdcf074f19d1a679fefc14636ad3e56cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:c8:cc:24:da:2a:14:ed:4c:2f:cf:72:04:
d7:1e:e2:79:4d:6a:2a:b8:0a:4b:73:e9:c2:87:4f:
9b:22:ef:22:fd:cc:1c:90:74:a7:51:68:74:ec:9b:
41:c7:e4:fe:57:46:c9:de:f6:35:b8:ea:c5:d0:95:
f8:84:72:74:6b:3d:bb:45:67:1f:a4:0e:0f:1a:f2:
86:c4:4f:85:ef:0e:77:83:a3:70:99:3d:31:ca:9c:
27:cb:2b:1a:ff:3e:fc:38:fc:94:49:a6:d6:97:81:
16:31:eb:95:0e:53:3b:2f:c3:1d:d0:3e:c4:67:bc:
9d:08:f5:68:9d:65:03:62:a3:b6:79:1b:d2:e8:c6:
15:f4:e7:63:05:34:ac:2b:94:e5:26:e0:c6:c6:ec:
4d:dd:9e:db:5f:03:e6:ad:54:42:82:09:84:06:f1:
6b:ad:3e:e0:96:8e:01:fb:1e:db:88:e8:2d:84:c4:
13:2d:35:67:43:be:30:42:82:a3:f6:90:a6:4f:41:
3d:a1:fc:31:f4:70:12:99:af:b2:d6:18:a9:90:5e:
e7:da:5c:fd:70:89:42:23:0b:f3:1d:29:fd:35:26:
ae:f7:21:07:7c:04:47:78:79:2f:14:93:59:aa:98:
5f:73:09:aa:28:36:c0:93:f3:c7:79:65:2c:04:19:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:00:EC:AB:DC:F0:74:F1:9D:1A:67:9F:EF:C1:46:36:AD:3E:56:CF
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1d:29:57:6d:1d:ea:01:5e:df:88:d8:01:4c:77:72:ca:67:
56:9b:28:42:38:a9:9a:94:a8:a2:10:2a:d5:e2:2b:ff:37:e2:
f7:0f:70:33:f7:33:57:7a:86:22:65:1c:bd:22:ef:f0:3e:b5:
23:56:54:f2:98:85:16:40:b5:ae:ea:4f:76:22:79:61:a8:6f:
fd:0c:9c:f2:93:c7:c9:11:b2:9d:89:29:d8:2a:7c:4c:85:47:
18:f5:95:66:40:3c:ba:e1:2f:cc:07:a1:c7:c8:b6:e7:65:37:
c8:80:dd:76:94:b5:00:c2:b3:c3:91:c4:bd:2e:8b:be:85:ff:
50:82:03:4d:7a:d9:a7:e5:69:29:b9:97:7b:36:fb:1c:57:ed:
b1:e3:83:13:88:2a:be:38:6f:c1:92:3b:8b:dd:f3:ad:26:db:
f0:ac:c2:8f:d8:7a:63:f0:63:5a:27:b2:85:d4:14:b5:72:e1:
ee:80:63:b8:c8:b7:d9:9e:17:94:45:1d:54:c1:b4:69:05:92:
0f:37:cb:1c:9c:a9:70:49:09:c2:6c:11:0d:7e:6b:ba:b8:19:
bc:7a:6f:56:f2:b3:b4:7b:d9:c6:af:e7:d0:97:b4:32:a4:58:
e8:a8:b2:f9:ae:60:ea:50:c1:d2:a0:88:74:3c:fe:11:a8:6e:
46:75:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:17 2025 by rpki-client