Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: Het3Mh0qflZCNsHo2SLo2aCm3Xfq3Zl5E2/D83UX4oY=
Subject key identifier: 99:80:47:C1:35:01:A0:5E:FC:60:08:29:4D:01:D5:DF:3F:F8:6F:49
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019771BFBEFEB4561E660D2DE0F6F04E8A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0199
Signing time: Sun 15 Jun 2025 04:01:20 +0000
Manifest this update: Sun 15 Jun 2025 04:01:20 +0000
Manifest next update: Mon 16 Jun 2025 04:01:20 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: i8R7fhIqql0BaehWbiByJfBMIFJ1DXQbWfRerr56bfA=)
2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:be:fe:b4:56:1e:66:0d:2d:e0:f6:f0:4e:8a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Jun 15 04:01:20 2025 GMT
Not After : Jun 16 04:01:20 2025 GMT
Subject: CN=998047c13501a05efc6008294d01d5df3ff86f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:8e:b6:ad:40:e9:cf:3f:3e:61:85:1b:ee:
c5:86:d2:3b:ff:f1:c8:55:a1:be:07:b3:ac:f0:5b:
5b:7e:51:69:1e:f0:c4:58:92:c8:eb:07:64:8b:29:
a8:b8:62:a0:bb:8e:80:13:5d:4c:17:e0:cc:a2:df:
6f:28:17:6d:4c:a5:29:89:3a:bb:c6:55:2f:cb:1a:
04:62:30:84:a1:50:e0:b6:8d:57:f3:15:68:7f:e3:
c5:cc:1a:86:6e:84:8d:e2:71:f6:38:f8:53:15:e5:
54:00:4b:b3:4e:90:65:50:e6:43:b4:95:bf:b1:61:
0a:b1:d7:08:c3:d3:d4:c8:d7:1b:40:96:54:1c:95:
2c:7d:85:3e:b2:7b:59:bb:31:85:e1:ec:e5:f0:a0:
fa:95:db:ec:cc:c0:14:e1:b7:25:f8:3b:3e:f4:46:
18:bd:3d:fb:7b:c0:fe:27:90:32:62:69:ca:d6:b1:
cd:93:04:39:99:da:7c:e1:3c:dd:c0:9d:70:cd:77:
2d:a3:07:c7:10:da:3c:97:18:a4:53:7c:75:ae:2e:
24:95:8b:23:d0:95:4d:c9:8e:3a:9b:04:bf:75:3c:
ba:06:ff:cf:2b:81:51:31:f4:3f:b6:38:a7:95:99:
8e:ef:12:19:74:55:80:ac:61:92:b9:4f:46:95:31:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:80:47:C1:35:01:A0:5E:FC:60:08:29:4D:01:D5:DF:3F:F8:6F:49
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6e:ed:ed:14:be:d6:10:b3:d8:32:3f:cc:90:17:85:6b:f7:
9e:fc:12:58:6e:51:2f:32:b1:49:66:39:b9:26:33:c0:bf:53:
f1:f7:6b:3e:7b:76:ef:b2:bc:00:7f:c6:71:17:7b:30:d0:78:
8d:34:df:b7:56:d0:e4:66:00:13:65:bb:7d:81:a2:ff:bd:d8:
38:e8:7a:99:d3:43:12:ce:41:b9:a2:36:82:56:c4:7b:db:54:
a8:68:1c:fd:69:be:a6:76:4a:0d:9f:9a:c9:2e:dd:76:df:8f:
cd:69:09:a9:3e:df:39:45:9f:df:6c:41:e1:cb:bf:5b:b7:2b:
43:a6:e5:35:cf:58:03:10:8d:e3:36:6a:0c:31:c4:83:4a:37:
0b:54:7e:52:e4:7e:d9:31:ac:d2:a7:18:3d:2c:d4:dc:b7:cc:
d0:3d:06:ac:af:b7:13:cc:a7:fe:f1:62:ef:5b:d2:3b:0f:0e:
20:9a:f2:ec:4b:4d:11:74:61:d2:c7:93:ee:3a:a7:a0:4a:c2:
7a:e4:b5:e9:29:2f:ad:a0:a2:a8:2b:21:7f:34:b8:b2:dd:88:
2f:ba:49:ed:29:d2:d8:ae:8f:7c:91:be:f3:80:b2:fd:f0:5d:
51:e6:35:6d:20:9c:9b:58:88:77:42:66:9f:59:f3:13:3f:8e:
31:66:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:19 2025 by rpki-client