Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: fRlt0lYzNEdDmxj7XjNkToaTTyAsUm6hMh0aluoqKQk=
Subject key identifier: 0D:21:DF:76:B0:20:24:96:2C:0F:97:28:35:9F:9F:74:60:C5:7E:A1
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 0197B6A134F37B8EB96F258C9B6E93AE5A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: +zqNS9k6CJiy8qHSDW7cs7cnGbyLxWYc5GoiTspZFsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:34:f3:7b:8e:b9:6f:25:8c:9b:6e:93:ae:5a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=0d21df76b02024962c0f9728359f9f7460c57ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:8b:05:a2:5a:94:cf:28:9c:ac:a7:80:5d:
31:00:c2:52:57:3c:10:0c:4c:51:df:ef:30:13:d2:
3e:76:31:a7:c7:f2:a8:dd:31:5e:d5:c0:cb:37:bb:
6a:47:f3:55:bd:08:7c:eb:bb:01:b8:c9:6b:cc:1f:
2c:36:83:02:8c:a3:b9:3a:f3:95:d2:f3:2a:f3:02:
c4:01:76:0b:03:d0:71:c5:26:66:38:2b:73:bc:a6:
13:58:b8:a7:d5:8f:cc:2f:92:68:93:46:37:d3:f9:
e4:d9:0d:1d:6d:6c:db:5d:f3:cb:94:57:5b:12:e7:
6e:58:3f:e6:86:99:00:55:cc:fa:be:1e:be:ac:83:
05:c1:6d:97:bc:8b:1e:b7:32:3b:3d:56:a0:ee:17:
f6:1e:06:66:85:10:ef:b3:2c:8d:7f:83:23:8a:94:
99:c0:72:f4:db:ea:08:04:73:cc:1e:1e:4b:be:13:
60:b4:4f:91:9b:98:94:cc:dd:c3:89:19:20:86:4a:
a7:7d:80:56:34:fb:c1:b4:13:51:4e:de:3b:d3:58:
a2:f7:31:36:c9:62:d4:20:88:64:c0:fb:2e:da:79:
83:09:00:63:0e:f7:0c:5c:29:6d:0e:a3:b6:20:46:
96:9d:0f:2d:b6:0e:25:c0:64:65:93:44:35:b1:fa:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:21:DF:76:B0:20:24:96:2C:0F:97:28:35:9F:9F:74:60:C5:7E:A1
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:37:7a:f1:29:33:4d:21:d8:d4:a7:bf:8f:ef:49:e2:19:a5:
c5:bb:23:2d:7f:6d:ff:a0:f1:f2:1b:90:24:33:18:ad:57:ac:
29:74:83:d8:5f:1b:fa:f0:8f:ec:2b:a8:18:e5:a2:63:3c:93:
f9:93:c6:b5:39:91:30:55:49:63:ae:c3:61:6b:d1:9c:b8:00:
03:55:bf:4d:f8:12:52:b3:0a:97:dd:20:12:61:69:f8:38:e8:
fb:22:ff:32:d4:b2:c4:d4:22:33:20:cf:17:bb:e5:2b:25:6a:
66:90:3a:8c:da:60:3b:fa:31:4e:60:e0:ee:73:8d:9b:dc:a3:
95:d0:28:2e:8c:99:6a:d4:e0:80:6f:fe:eb:0d:8a:32:74:97:
c7:d8:83:2f:2f:7f:3a:4d:a0:bf:b6:74:f2:b4:53:28:98:72:
89:88:40:d7:fc:39:36:d1:fa:e5:bd:0f:3e:2f:d3:a2:bf:2e:
a8:95:e3:f6:ce:d3:e4:2a:7f:7b:4a:cf:c9:47:60:75:62:e4:
58:ee:21:83:7a:5e:8b:70:0b:a6:5b:e4:88:fb:a4:15:d4:15:
17:ab:a5:2c:d6:5a:f5:c0:b8:c3:0c:e9:67:54:25:32:ab:ef:
a0:93:96:96:51:ab:6d:0d:06:ae:d5:44:d1:20:5e:53:50:b2:
a9:36:09:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:38 2025 by rpki-client