Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: z5Pzv5Z8Xjj5vmLkgVjVhmlzP9rY9kfBZPVhAcJ+jkI=
Subject key identifier: 75:9A:4E:29:19:09:BA:1C:2C:09:02:4C:8C:30:FB:7C:02:A5:FB:11
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 01976DAB980E4FD299186BDBE52445FB885A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 1245
Signing time: Sat 14 Jun 2025 09:00:51 +0000
Manifest this update: Sat 14 Jun 2025 09:00:51 +0000
Manifest next update: Sun 15 Jun 2025 09:00:51 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: 3iHk9Jm8ParVpPbncaYZrH4VjWhaozhcRfJ6EGdGgOI=)
2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:98:0e:4f:d2:99:18:6b:db:e5:24:45:fb:88:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Jun 14 09:00:51 2025 GMT
Not After : Jun 15 09:00:51 2025 GMT
Subject: CN=759a4e291909ba1c2c09024c8c30fb7c02a5fb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:fd:d2:eb:3e:18:44:78:d6:0b:8a:60:a1:
6c:4e:3e:16:30:e8:4f:aa:b9:46:0d:20:93:46:0a:
a1:7d:7c:4e:b5:4c:a5:30:10:a1:12:d8:2b:90:07:
6a:d2:b2:5b:1f:a5:da:2e:24:83:85:bc:cd:9b:00:
be:27:56:bc:c4:b1:fd:85:37:ae:83:4d:f8:b5:6c:
e3:de:a4:91:68:97:22:a7:20:fe:77:19:dc:4a:de:
8c:20:0d:0d:db:97:17:4b:e7:82:63:c7:5c:85:2c:
ab:18:8a:7e:ef:4d:dc:8c:94:c1:74:be:a4:c2:2a:
27:d1:1b:0e:3f:b5:1f:03:4b:13:81:3e:1e:66:41:
ef:ac:04:79:89:e1:6e:8e:78:b8:f6:d9:27:6c:2d:
e1:27:da:c2:8a:40:48:7f:03:37:d2:dc:42:ea:27:
a0:c2:9e:af:9c:86:19:73:0b:18:be:13:76:fc:bf:
24:a4:04:a5:f5:76:b2:50:96:df:15:63:f3:92:59:
f1:95:46:f7:aa:5d:d1:81:9a:c8:d5:3a:ff:be:5e:
0b:b8:03:f6:4a:4c:19:23:b9:95:df:47:76:78:32:
ab:90:c9:6a:c8:99:0e:1c:d6:68:7a:2c:7f:87:a0:
64:34:ba:41:db:1c:0e:a1:70:b2:2f:c0:8b:e4:13:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9A:4E:29:19:09:BA:1C:2C:09:02:4C:8C:30:FB:7C:02:A5:FB:11
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ff:ba:19:dd:b8:17:51:ec:7b:44:d3:27:18:60:d4:c9:5b:
19:99:2a:b7:26:0a:1d:22:06:c1:36:14:ef:00:c2:fc:17:d7:
d2:f0:46:1d:f2:d7:a4:95:a8:13:c9:09:49:75:e1:17:67:a8:
7e:6a:1e:d9:0d:6e:45:2d:76:de:36:8f:47:3d:79:b4:be:31:
06:47:ed:79:8d:0b:ba:c3:fc:60:b2:8a:3d:2d:d1:56:a5:21:
dc:05:80:8c:af:65:f2:05:4d:41:b7:00:dd:d9:73:c5:f5:0e:
1a:b6:b7:aa:ee:ef:91:1f:6c:67:62:5f:fb:b0:65:64:92:b0:
e5:78:54:6d:b3:9e:1c:eb:74:6a:57:70:47:cb:c5:d7:1e:cb:
69:e9:a7:4d:7b:ee:0e:ce:a5:ad:86:97:52:f6:1d:b6:ea:b0:
14:0e:92:22:8c:2e:a5:de:07:76:08:bb:25:8d:78:f5:13:d2:
c4:8c:26:dc:22:39:8d:e8:63:fe:ce:97:d1:d6:f4:fa:0d:67:
db:67:e8:9c:31:4e:3a:24:c7:7b:11:92:23:0f:a1:0c:77:48:
b8:0a:ef:6f:df:e8:7e:8f:e4:c5:a3:85:9f:1c:f8:a4:5a:e7:
ca:35:a4:7d:9f:2a:9a:f5:71:10:be:13:07:0d:72:d2:12:e4:
93:84:de:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:44 2025 by rpki-client