Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier: RE/Cp2DqOy0mmE5v5mCthK99McPBs9VJ/LhIQwWrMI4=
Subject key identifier: 09:C4:BB:29:35:D3:13:67:8F:E5:B5:16:72:A7:E7:94:67:9E:69:7D
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial: 01976BBD5C6A5658FBE664A7690F7658CDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number: 0EF6
Signing time: Sat 14 Jun 2025 00:01:01 +0000
Manifest this update: Sat 14 Jun 2025 00:01:01 +0000
Manifest next update: Sun 15 Jun 2025 00:01:01 +0000
Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: RQ2YuX/WUv3v+RDWGsok+atDsev7LjwXjWfl+s6ECNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:5c:6a:56:58:fb:e6:64:a7:69:0f:76:58:cd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
Validity
Not Before: Jun 14 00:01:01 2025 GMT
Not After : Jun 15 00:01:01 2025 GMT
Subject: CN=09c4bb2935d313678fe5b51672a7e794679e697d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:cd:cb:97:37:12:94:87:8a:f4:aa:4e:bf:
3f:5d:d1:67:28:65:43:8e:67:3b:11:55:95:55:49:
0a:07:82:73:1b:5a:b2:d8:d5:b7:b2:1b:8b:2c:6b:
8e:9c:fc:59:60:3e:cf:45:04:1d:bc:29:07:5d:fd:
c1:9f:c4:96:54:bb:f7:18:aa:12:d0:77:2a:63:16:
8b:ca:5f:58:e7:20:97:0f:12:cd:70:41:58:da:34:
b0:84:b5:1d:a7:96:9c:74:cd:74:4b:d5:46:c5:22:
63:ba:a5:8b:22:fe:08:cd:d9:56:61:a3:e6:de:1d:
7e:5f:ac:8b:9b:7e:12:c8:dd:f9:b6:c9:50:ff:4d:
73:2b:a1:e7:18:46:62:f7:33:7b:7b:d7:c1:35:7a:
de:ee:00:77:8e:73:1e:5c:bb:2b:cb:2f:45:ca:ea:
c7:3e:5e:23:07:31:85:50:55:28:e0:00:55:f4:76:
fd:25:ca:2c:f5:c9:e8:b7:c8:a7:43:30:fa:49:3a:
d4:30:a3:b2:3c:77:64:ad:18:76:01:0e:d2:b1:79:
3b:0b:27:48:69:a0:48:b7:25:d1:fa:4c:cb:dc:90:
8a:32:3e:b3:e3:8f:63:2e:5a:8c:30:a0:ad:82:e6:
fc:ff:3e:17:c1:de:bd:63:88:2c:8c:65:94:09:be:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:BB:29:35:D3:13:67:8F:E5:B5:16:72:A7:E7:94:67:9E:69:7D
X509v3 Authority Key Identifier:
keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:5b:7b:26:d1:b9:58:28:24:dc:17:df:fa:ab:fb:9c:7b:0c:
6a:9b:79:09:c6:8e:ce:3f:46:21:fc:f3:4a:95:b9:aa:96:7e:
93:44:e2:4b:61:d3:ad:1b:31:a2:97:43:28:66:30:18:f3:95:
97:83:28:d8:e5:0e:dd:23:2b:c4:40:11:4b:19:36:03:ec:df:
f8:81:de:2a:2c:02:b1:96:07:d4:1b:6c:89:b8:a1:11:36:0e:
6b:0c:0a:97:42:59:6a:27:6a:3c:f0:be:08:a6:92:4b:6c:80:
10:01:b0:65:98:dc:09:da:7e:74:37:26:62:ae:a8:53:1b:59:
b0:8d:eb:ff:09:63:1a:53:7a:e8:b1:12:40:49:83:1e:0a:4c:
dd:70:86:f3:dd:15:f5:c8:df:72:cf:a8:5c:bc:b8:74:3c:69:
68:48:cf:8c:dc:27:c8:99:c7:70:03:39:fc:64:c7:65:4a:50:
84:d0:95:8f:05:d3:49:96:38:ee:b9:37:34:b2:d1:32:bd:24:
68:31:4a:13:71:fb:37:84:f0:73:6f:76:0c:49:4c:6b:4b:1f:
7d:0f:d8:7f:9f:47:0e:15:1e:16:ca:7e:04:1d:43:8c:eb:5a:
12:b9:11:d1:2a:dd:ec:d6:69:79:d4:76:c2:62:bf:19:bc:a3:
58:e1:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:35 2025 by rpki-client