Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: 6o80EVUi4jKX/IljqFCjXAx2Fvv59zEQojdmfb/9p2g=
Subject key identifier: 06:6C:15:A0:68:97:46:06:1F:50:08:C3:72:E7:C5:94:71:E9:39:BD
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 019774F73C5A7CE71B5D457129941D2CBD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 0934
Signing time: Sun 15 Jun 2025 19:00:49 +0000
Manifest this update: Sun 15 Jun 2025 19:00:49 +0000
Manifest next update: Mon 16 Jun 2025 19:00:49 +0000
Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: OresSLCNGEg89UChZTZv/F/qbcKwU/EUEi+rbAiE5CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:3c:5a:7c:e7:1b:5d:45:71:29:94:1d:2c:bd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Jun 15 19:00:49 2025 GMT
Not After : Jun 16 19:00:49 2025 GMT
Subject: CN=066c15a0689746061f5008c372e7c59471e939bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:3f:54:0c:a9:50:ff:56:2f:35:c2:8a:0d:
5b:8c:42:72:ce:30:99:0d:00:f2:d8:ce:b1:f6:6c:
6c:78:58:a5:02:53:ef:6a:7b:20:90:a9:eb:a3:01:
b4:1d:a4:70:86:9b:06:5a:8f:e1:9f:66:72:f7:09:
46:5e:4d:e2:b4:5b:ea:e0:e3:1f:fb:60:66:d4:fb:
81:8f:25:28:f0:f1:a4:cd:5d:35:c0:23:19:12:20:
4a:83:7f:7b:db:d0:67:63:af:67:24:6b:1b:de:94:
3a:d4:29:cc:f3:09:fc:3f:16:04:5c:9b:85:ff:de:
02:a2:23:dc:6a:dc:97:94:10:d6:cd:c6:86:0c:17:
9d:e3:bd:ca:fa:1d:5a:b8:1f:20:03:e6:8b:fe:c2:
33:2a:9e:a8:33:1b:25:8c:ff:97:7c:5a:a9:b5:27:
48:21:2e:a6:30:fd:48:21:ba:8a:7e:2e:69:17:a4:
5e:47:62:9d:66:fd:37:e6:df:ad:a2:e8:c3:27:79:
ad:88:c4:88:0d:9c:78:c9:8f:37:18:8a:b0:ac:51:
fb:93:00:4c:5e:80:b8:5d:c4:90:cc:f3:f0:47:e7:
78:b0:ce:e5:5a:ad:67:1f:49:69:9b:71:9c:06:77:
c8:20:b1:ff:d1:6b:cb:29:48:ce:6e:95:db:06:16:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:15:A0:68:97:46:06:1F:50:08:C3:72:E7:C5:94:71:E9:39:BD
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:04:0a:3d:78:d3:ba:3a:bf:99:34:81:85:b4:71:ca:a7:15:
02:d1:57:fc:60:78:84:16:5c:17:41:a4:41:22:f1:50:f3:a4:
5f:51:62:54:5b:bf:a2:b6:ac:5f:6f:1d:5d:e2:ac:a6:4a:ec:
5b:98:4e:e7:4a:6a:a4:6a:1d:72:23:c3:b9:fa:35:06:9e:71:
48:2e:fa:d6:a6:b5:c9:59:16:ba:80:ef:ab:a0:cf:a5:c2:cc:
0e:3a:75:8e:89:c5:01:1b:ce:5b:85:f4:92:3f:43:e5:b8:dc:
45:fa:f4:3b:aa:5c:79:5c:85:c3:f7:95:14:00:f1:1b:37:46:
fc:91:55:fc:78:b1:5f:c6:82:44:7b:5a:03:d2:bd:12:46:aa:
29:6b:1a:95:c4:88:29:78:61:2e:7d:6b:97:0b:af:1a:f3:ab:
7c:91:27:01:a2:76:06:b8:4a:ae:50:e5:05:30:a3:b2:5d:68:
42:2d:ea:1d:a6:e7:6d:0b:28:13:e5:57:03:eb:71:73:b5:f1:
b0:44:22:5c:a6:53:63:b5:74:fe:a1:60:96:73:29:b1:ea:a5:
4e:f2:36:3c:c9:79:d7:ff:46:52:b6:22:15:b6:81:42:7b:fb:
49:22:01:f8:f2:15:7d:d3:c8:a1:c5:39:4d:86:11:3b:b9:1f:
16:13:ff:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:29:16 2025 by rpki-client