Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: RmN85TM1HBrJEkv2gaAkdvyCmWD6bc5i+VN3jC0B0Ao=
Subject key identifier: 8F:05:BC:ED:CB:C2:0B:0F:33:BF:5C:0E:B8:C6:ED:2D:A2:C7:77:A3
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019771F63F73E2FD32EED6823372988EEB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 08EA
Signing time: Sun 15 Jun 2025 05:00:52 +0000
Manifest this update: Sun 15 Jun 2025 05:00:52 +0000
Manifest next update: Mon 16 Jun 2025 05:00:52 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: kO8UDK9MCpdN/cWMwIWsH1YNwvnWFW0qwzroh3MReJQ=)
2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:3f:73:e2:fd:32:ee:d6:82:33:72:98:8e:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Jun 15 05:00:52 2025 GMT
Not After : Jun 16 05:00:52 2025 GMT
Subject: CN=8f05bcedcbc20b0f33bf5c0eb8c6ed2da2c777a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:37:fc:36:a6:6a:a9:7e:08:f7:8f:6c:26:
fe:e0:60:59:e7:d7:ae:a4:46:23:11:b4:59:12:5d:
dc:99:00:32:92:ea:85:2d:10:13:8f:93:a4:b9:30:
06:15:73:54:9d:28:3c:05:06:3f:39:43:74:f0:27:
84:75:3b:08:14:86:36:91:b1:c2:a7:8a:b5:55:1f:
3a:e6:d1:39:73:dc:95:f9:6c:75:26:8e:ef:b7:48:
14:b2:a2:b8:82:98:82:c3:0c:cf:a5:90:fb:16:9a:
d2:99:49:1e:f9:7d:37:2a:d7:02:93:12:ea:00:ce:
53:98:3f:4b:19:a7:db:2a:d8:65:f8:91:dd:6d:46:
5f:de:e0:49:0c:7e:fe:51:06:94:a4:64:c8:ec:0f:
b4:e0:67:39:d2:13:4d:3f:f7:b6:e6:67:b9:4e:f5:
a3:69:7a:d6:fd:1f:76:52:ed:3c:7c:20:21:7e:24:
fc:4f:4a:b1:92:ad:fa:05:e2:f6:70:30:b6:32:1d:
cc:3c:68:f4:dc:61:b3:8b:5d:40:23:dd:5f:e6:44:
2b:74:3d:9a:69:18:f4:24:3f:a3:e3:20:01:47:7e:
e0:0d:9f:5a:7c:9c:b8:7c:86:7e:db:f5:7c:10:01:
d2:38:30:0e:17:e4:be:f6:69:6f:bc:6a:02:a3:56:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:BC:ED:CB:C2:0B:0F:33:BF:5C:0E:B8:C6:ED:2D:A2:C7:77:A3
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c8:55:2e:e6:9a:ef:3b:93:93:c6:84:48:50:60:45:c5:29:
2e:17:ea:ac:29:c2:f1:ad:74:7c:54:af:d4:c0:cc:12:45:4b:
65:2c:14:99:7a:29:dd:35:a8:c0:cb:88:35:fe:5b:65:bf:f2:
38:c0:27:7c:e2:e2:58:73:e1:46:12:f7:3f:2f:1b:b4:78:68:
63:f2:b0:12:0d:75:fe:d5:6b:0e:39:20:29:31:ce:ce:79:2d:
57:bd:96:3f:89:26:3f:2f:88:6e:3d:f3:d1:c9:8a:4c:2d:ff:
4d:95:c6:7e:52:d5:da:58:19:7e:f3:d7:35:0a:b8:08:20:23:
c4:ff:4a:14:dc:cd:7a:b2:96:c4:21:97:8f:d6:63:51:3c:22:
37:8c:07:2b:b2:51:e9:67:08:17:ed:97:93:8d:b2:a9:c1:83:
8b:56:05:45:97:16:8d:e5:4c:ae:83:58:97:a5:89:30:f6:28:
56:1b:cf:97:f6:bf:de:cc:fc:8a:f0:3f:3a:b0:f6:d4:d8:12:
25:c1:e0:c2:c2:ae:a2:16:69:2c:fa:23:54:c4:70:77:fd:66:
e0:80:88:5f:46:aa:ce:8c:51:f5:a0:19:05:d5:e6:16:47:dd:
c8:54:4d:f1:5f:34:e0:fa:c4:31:9d:ac:34:52:2f:02:67:e8:
8f:6b:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:37 2025 by rpki-client