Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: 9QnKL3OStDeHT1ob18XDgXsaBFclK76+4CICoTLYPD0=
Subject key identifier: 3B:F2:B9:1E:AD:02:94:DA:33:FC:8D:C7:6A:57:89:4E:B0:38:AA:6B
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 01976D74B6AED645050D7946AC7F59C88C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 0195
Signing time: Sat 14 Jun 2025 08:00:54 +0000
Manifest this update: Sat 14 Jun 2025 08:00:54 +0000
Manifest next update: Sun 15 Jun 2025 08:00:54 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: QoEpFvYdaBYCJuSq3E5Fn5HRl0tON6LtY8Q56+eJ2MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:b6:ae:d6:45:05:0d:79:46:ac:7f:59:c8:8c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Jun 14 08:00:54 2025 GMT
Not After : Jun 15 08:00:54 2025 GMT
Subject: CN=3bf2b91ead0294da33fc8dc76a57894eb038aa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:a7:16:c7:6d:33:78:01:4a:86:b4:e8:9a:
ba:d2:47:78:b4:81:66:c0:0a:de:bd:5e:b7:72:55:
59:62:7c:82:11:70:77:61:d8:47:ff:ce:fa:02:f2:
7d:fc:91:d1:4f:11:18:1e:7f:00:62:05:c4:cb:16:
53:61:ef:c1:22:dd:1b:43:03:c9:14:e3:20:b0:41:
32:5b:11:6d:d5:66:fa:f9:bc:02:d4:66:09:59:bd:
53:23:81:64:72:e2:87:8c:52:33:8f:95:bd:92:20:
99:2e:c4:db:46:d9:30:f0:1f:2b:6f:fc:a5:e0:29:
b3:0c:f3:50:0c:c4:85:c0:f4:c3:1b:e1:e9:50:34:
43:9b:4f:73:17:7e:b2:59:26:67:16:85:81:e0:fc:
91:ba:8e:bb:11:9d:2b:9a:b6:66:24:ff:97:98:be:
53:7d:ed:4f:b5:b8:09:65:36:25:fc:fd:3c:82:24:
f0:aa:e1:19:71:05:4d:99:0d:16:d5:83:4b:93:66:
c9:e7:f3:02:c4:06:52:1d:8c:cd:30:2e:40:82:d9:
cd:2b:db:d3:94:a4:11:5e:1e:77:84:a3:b1:c2:9a:
fb:85:34:b8:b4:60:2b:f0:c0:c1:91:4f:78:e6:7a:
70:8a:98:18:3d:77:cf:57:14:3b:0c:57:19:4e:bb:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:B9:1E:AD:02:94:DA:33:FC:8D:C7:6A:57:89:4E:B0:38:AA:6B
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:63:a8:1d:42:42:ea:3f:30:33:a7:f5:d6:fe:53:40:71:fe:
c8:b9:6e:37:86:e2:50:cc:de:e4:62:3e:23:e8:51:a6:de:eb:
be:12:ca:a3:a2:50:7d:67:fa:74:be:90:bc:4e:26:58:71:1c:
fa:25:a5:8a:dd:51:91:99:d3:4a:7d:38:3a:90:29:09:01:dc:
e7:02:f5:ac:bc:6f:f8:cb:3c:f0:e6:68:2a:ed:ec:fb:4c:8b:
3e:75:3b:5e:ec:f4:63:87:c9:cb:db:f0:75:87:f7:ff:38:33:
bb:ac:0d:64:63:1f:59:c5:e1:f6:2d:2d:15:a6:ae:93:e3:a6:
ee:be:52:b1:35:d5:7d:c2:7e:b7:31:4b:2f:f1:10:e6:8f:ea:
12:5c:8d:88:c1:0c:a4:91:92:a1:ef:d5:a9:bb:36:ae:a6:49:
74:61:9d:20:1a:0d:bd:4e:17:ac:53:86:f6:70:80:52:15:4a:
c9:7e:1c:47:c6:3a:59:be:bd:3f:5e:a0:db:39:f4:df:f0:6b:
6b:35:ea:be:cc:0f:5c:11:c5:ec:6c:e9:31:4b:2d:ba:e5:6a:
eb:c1:83:9d:9e:05:2d:dd:c7:d8:a6:a2:5f:31:98:74:12:55:
94:c9:5c:2d:c0:e9:13:25:b5:9d:ef:46:6c:e1:59:a5:20:44:
5f:a9:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:30 2025 by rpki-client