Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: qlK21J/fsQlUGH9Jfwf2Z5s31rcfEJeSvCo9AfBp9J8=
Subject key identifier: 30:7C:2A:0E:C3:52:1E:C3:36:6E:DD:2F:65:0B:BD:AA:D1:F3:FE:81
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 0197B88F949AB0DA33E5CCD159BD150C16E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0837
Signing time: Sat 28 Jun 2025 22:01:46 +0000
Manifest this update: Sat 28 Jun 2025 22:01:46 +0000
Manifest next update: Sun 29 Jun 2025 22:01:46 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: kLcpTtwpIHGQEKZS49Y+Rmwz++bbFExrCS1mNhLUpZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:94:9a:b0:da:33:e5:cc:d1:59:bd:15:0c:16:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Jun 28 22:01:46 2025 GMT
Not After : Jun 29 22:01:46 2025 GMT
Subject: CN=307c2a0ec3521ec3366edd2f650bbdaad1f3fe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:07:a0:e2:b0:b2:d9:1e:33:f7:97:59:3b:
74:b6:2a:93:44:c8:24:9a:96:aa:95:c5:cb:2d:82:
b3:64:bf:17:82:89:f8:1f:de:88:38:03:3c:c4:1f:
17:b1:70:00:4b:b5:00:79:9e:b5:30:5b:0a:5a:ee:
05:61:cf:08:d7:f8:f0:c6:02:58:24:92:bc:39:34:
cd:05:49:39:8b:00:ea:b2:d6:4b:80:9e:a5:87:72:
79:df:3a:68:a4:c6:6f:aa:d1:e1:21:a9:0d:ba:a2:
aa:5e:c3:16:e3:58:75:96:15:7f:e9:f4:7f:4c:d2:
fb:74:16:04:8b:cb:50:c6:7f:42:2b:34:b9:ff:19:
3e:45:45:0e:03:aa:e5:bd:86:3c:eb:9e:9a:45:0e:
7a:00:18:66:97:36:07:61:60:51:3b:21:51:ee:18:
96:27:ae:c8:1c:b6:98:93:43:e8:36:ae:8e:12:5b:
6f:7e:29:a9:c7:55:9a:db:16:58:14:cb:2e:57:1a:
2c:ef:e8:7e:d7:e4:05:de:26:6d:13:c9:86:a2:a8:
88:39:3d:84:b7:28:ab:c5:b1:d8:6d:4d:14:87:b4:
a5:79:a1:92:85:ed:24:60:6e:c3:f4:04:6a:7d:3e:
43:39:2c:67:89:39:c0:9e:2a:9c:08:f2:52:d9:25:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7C:2A:0E:C3:52:1E:C3:36:6E:DD:2F:65:0B:BD:AA:D1:F3:FE:81
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6e:f5:97:ff:f1:59:a6:ec:83:94:a2:fb:9f:be:7f:f9:8d:
2c:e8:bf:f0:88:8c:f5:84:81:ff:f2:b4:84:d7:7d:49:37:37:
17:02:62:4e:19:db:4f:83:f8:fa:47:dc:33:90:cc:44:dd:17:
7b:17:8b:70:47:91:f0:a0:ac:0f:fd:d0:41:96:16:43:89:0c:
2f:36:13:8e:32:a2:c6:b4:2e:74:e6:5b:02:6c:9a:55:c4:68:
63:e1:1a:f4:16:9a:3d:ac:60:1c:f7:52:21:a3:08:e6:bb:f4:
81:63:3b:f3:d5:2c:d3:42:d6:eb:7e:3d:06:0c:a6:8b:e4:5c:
6f:f1:28:c8:68:ef:a3:52:74:cd:f6:42:c0:79:09:0d:87:1f:
1f:54:11:29:f6:f2:4c:11:fd:89:77:64:17:b3:61:ba:3a:70:
d3:80:6b:15:1b:48:66:41:da:9b:6e:cc:33:eb:67:5b:d0:d7:
23:c9:90:cc:41:44:a8:12:bb:9f:d9:71:a4:d9:88:d2:c7:bd:
09:ca:b6:9b:fe:7e:74:fe:b7:b5:ba:b3:49:6e:83:bc:d2:83:
49:86:d5:c1:2a:83:dc:6d:45:fa:a4:33:2f:a7:0a:f7:16:0a:
ea:7f:cb:90:1e:24:60:98:8c:b5:79:e3:86:0f:af:3e:70:c7:
22:2a:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:23 2025 by rpki-client