Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: J6Al/+musbgX6y+9zjTEZOI+hDyBVidtjMbVzLqgZ6k=
Subject key identifier: 26:08:2C:F8:8E:AA:CE:8A:DD:D7:A7:03:7C:29:F4:32:91:10:48:19
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 01976D7430049423573DDCBF47287B99C247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0A22
Signing time: Sat 14 Jun 2025 08:00:20 +0000
Manifest this update: Sat 14 Jun 2025 08:00:20 +0000
Manifest next update: Sun 15 Jun 2025 08:00:20 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: ml2UY1fEjCUhdrw1DA4nS8IyC0/8dxL8S4KmubnCAWQ=)
2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:30:04:94:23:57:3d:dc:bf:47:28:7b:99:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Jun 14 08:00:20 2025 GMT
Not After : Jun 15 08:00:20 2025 GMT
Subject: CN=26082cf88eaace8addd7a7037c29f43291104819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:cb:0d:87:29:44:22:d0:81:65:76:a9:f0:
ed:23:22:17:d8:1c:79:39:03:6a:4b:c1:f5:4d:b6:
92:7d:42:82:a4:3d:63:c2:3f:72:4b:c1:c2:a7:bd:
05:2c:ac:23:68:ec:c8:8a:ca:7a:c1:72:c7:8a:65:
16:a7:d4:73:ce:21:e2:8a:14:7d:17:98:6a:64:57:
e2:16:4f:6f:0e:50:17:dd:02:59:f3:b0:f5:b2:3f:
77:94:5c:5c:34:e3:34:a6:2e:99:bc:30:25:04:17:
0a:e8:88:9d:bf:82:94:12:df:6f:be:63:9d:e6:11:
d3:d1:37:fd:73:29:57:26:ad:c3:18:cb:0d:7f:da:
73:20:6f:2b:f7:94:b8:61:4e:09:5e:e4:f7:c0:51:
64:8a:a1:56:ba:fc:0b:ee:e5:9f:42:01:5f:73:02:
96:44:a6:85:c5:94:0f:ed:f9:4c:f7:19:f6:e0:7a:
df:d8:ff:98:8f:61:54:ac:8f:d1:df:b4:56:04:af:
29:1a:c6:3f:84:a8:77:81:82:60:2a:9c:a9:a9:27:
bb:7d:47:c8:41:03:6b:99:ac:a8:f5:20:51:47:c2:
3c:f3:64:72:e6:a9:a7:e8:0a:26:c3:53:ff:01:c6:
87:41:63:e3:ca:a4:f4:2a:fc:ca:9c:d0:78:30:36:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:08:2C:F8:8E:AA:CE:8A:DD:D7:A7:03:7C:29:F4:32:91:10:48:19
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:66:fc:d5:f5:53:ad:14:44:64:60:a5:1d:f6:2f:03:97:a6:
16:42:cd:d9:55:27:69:d8:83:87:43:d4:b5:65:1b:c9:b8:bb:
1a:a3:ba:6d:92:57:78:c8:7a:25:56:d3:d6:61:6f:9b:e3:78:
b0:1d:9e:7d:6c:47:e0:ff:7b:bf:a4:f9:1f:82:5a:1d:27:2d:
ad:95:23:53:99:84:3b:72:26:6f:18:f6:98:d9:2b:7f:e2:66:
89:17:2f:4d:68:71:59:c2:62:4c:99:7a:87:1b:ea:7a:7f:df:
96:66:78:dd:bc:9c:50:7f:72:14:58:fd:97:ad:e8:e5:3a:77:
8d:5c:3a:08:dc:c0:b1:17:84:b4:55:bb:7a:40:f8:ff:67:75:
29:14:4f:9e:a5:da:4f:ab:11:f5:54:da:3e:36:ee:c7:f6:f1:
ec:2b:d2:f9:85:8d:ed:0d:90:f1:ae:0b:c1:18:fa:f8:23:8f:
ee:39:f0:5e:d0:3d:4b:5b:dc:1d:9e:43:36:b9:91:37:5d:2e:
e9:fc:b2:5c:bc:32:52:20:45:0e:a7:de:66:f2:c4:ca:63:af:
19:ca:f7:cd:d2:bd:11:8f:2f:fd:5a:cd:cb:70:73:14:08:12:
ad:c1:9c:bd:02:eb:23:3c:82:64:f7:c2:35:fa:f7:74:19:a6:
88:51:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:10:34 2025 by rpki-client