Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: 4tZWwFPiiBaGCOHTk0T9M+kMvgISZaKDBjx93qQeuec=
Subject key identifier: F6:0E:6F:10:F2:8D:14:1C:E4:85:51:03:4C:A1:44:2E:8A:81:50:6B
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 01976F99E29E9ABB5E42F0FCC6E8691A60D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 1425
Signing time: Sat 14 Jun 2025 18:00:45 +0000
Manifest this update: Sat 14 Jun 2025 18:00:45 +0000
Manifest next update: Sun 15 Jun 2025 18:00:45 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: CtGKUlMYZICj0W6UUzpyrRpDW5wP5bUcV68m/4RfcXo=)
2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:e2:9e:9a:bb:5e:42:f0:fc:c6:e8:69:1a:60:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Jun 14 18:00:45 2025 GMT
Not After : Jun 15 18:00:45 2025 GMT
Subject: CN=f60e6f10f28d141ce48551034ca1442e8a81506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:27:cd:24:eb:92:c3:c0:2b:3b:5e:c8:b6:
5d:98:64:5f:5a:07:73:da:19:37:ae:3b:85:33:68:
44:2c:b8:d1:51:d1:f5:d0:12:4e:98:26:03:bf:e0:
cc:68:fa:16:89:53:11:44:ac:23:51:42:a9:3f:85:
6c:53:89:db:e0:5d:c8:25:1c:67:a3:f8:21:c1:fc:
12:a6:5d:5d:bc:3d:0c:ee:dd:b0:28:22:8a:a4:1d:
f9:08:54:a0:ac:75:12:d8:fc:9f:9d:af:c4:27:99:
33:de:84:99:5b:5b:b5:7d:7d:d7:61:03:d7:8f:68:
ae:ac:26:54:1d:fa:bb:cb:8e:35:6e:9b:e2:de:bd:
42:6f:41:41:c5:07:c5:3d:ed:56:06:cf:29:ee:4b:
1f:a1:fb:e7:67:c7:74:63:33:29:dd:57:86:d2:80:
09:51:fb:aa:3a:52:3e:aa:97:09:e3:1a:50:99:52:
1a:e3:5a:44:79:30:d4:16:1a:13:a8:65:09:2d:4e:
07:ec:47:35:9b:18:21:4a:fc:04:a5:54:2e:cc:ee:
46:02:7e:f4:ea:52:32:c0:f1:0e:d6:8e:ae:eb:00:
0c:44:09:6b:f6:e4:65:c2:09:c3:d1:75:0b:01:c9:
79:51:5f:d2:a4:9f:c1:af:df:d0:51:01:8d:72:c0:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0E:6F:10:F2:8D:14:1C:E4:85:51:03:4C:A1:44:2E:8A:81:50:6B
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:75:90:4b:21:49:31:30:a8:44:e4:88:51:a2:dd:92:f0:3d:
70:bb:30:fa:4a:7f:bb:5d:55:e6:44:6c:33:1c:ed:c1:b3:d7:
d8:6e:e1:1d:b0:8c:bb:d1:08:4b:9c:4b:ce:18:f1:93:b8:d6:
e6:5e:39:20:bd:66:f3:59:8d:bb:f9:f6:0d:a6:07:77:87:74:
ac:93:a3:ce:b0:84:1f:b5:0d:c8:dd:27:9c:a7:2f:cc:85:ff:
31:77:dc:bf:46:85:59:3a:ab:25:43:24:dc:9d:cc:fd:d2:12:
17:83:71:be:a8:72:91:ae:31:94:c8:11:41:c9:3d:11:51:19:
48:b8:43:63:2b:9b:c7:08:ab:13:29:b8:98:3e:d5:e4:9c:3b:
0e:e2:30:f1:03:9f:93:1e:fa:c8:6b:f1:b8:c0:bb:33:08:ec:
c8:90:a7:41:cb:db:a3:c0:73:bf:a5:65:a8:a4:dc:2e:c5:e6:
cd:34:c7:a1:8a:ab:6f:96:b7:3f:dc:74:60:88:d0:22:43:bd:
62:7a:b1:fd:69:79:39:d6:cd:41:8e:81:53:84:2d:d3:c2:40:
c1:d4:3f:d4:3a:be:bb:db:63:7e:a8:5e:c9:0a:80:c4:8e:79:
61:c6:3d:03:c3:25:40:61:85:2e:1b:98:eb:04:ad:95:df:f3:
d1:4f:a5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:03:20 2025 by rpki-client