Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: p7dNJ3S/VCIAze+IPvyp9Xr7nftSr0oRZf/kuf/Ybgc=
Subject key identifier: 8F:49:E3:0D:E8:E0:D3:25:2F:9C:A4:1D:15:BA:66:20:83:95:2F:71
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 0197B7EA499728D86B928528AD5DEA01E5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0B2B
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: 2eXkqVLH6feZT+4EE54urr4XbxP51dArKpiBQbxcI1s=)
2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:49:97:28:d8:6b:92:85:28:ad:5d:ea:01:e5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=8f49e30de8e0d3252f9ca41d15ba662083952f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:31:9c:46:b7:57:bc:f9:6c:5f:1c:59:c2:
19:c6:00:17:46:f0:f5:e1:7d:8a:17:35:8e:fb:6c:
87:72:48:fa:64:3e:41:00:1e:6f:db:53:de:54:58:
ab:e8:6a:0e:2a:4f:a1:30:81:b2:61:e6:e6:ee:f5:
51:41:43:56:8e:f4:ef:ce:10:02:c6:1f:f6:eb:02:
20:72:7a:e5:77:44:e0:87:ff:bd:ee:14:66:a7:70:
a9:ce:1c:6e:c8:3f:6d:6c:92:40:e1:c4:77:94:7b:
32:20:8c:82:c5:68:cf:88:5c:46:9b:3e:a5:ec:ad:
31:9b:86:b4:74:5e:4a:cd:a3:79:59:bc:13:9d:61:
0d:29:9c:0a:a7:2c:b6:41:f2:90:3f:0f:16:19:6f:
2f:7d:6a:81:11:66:c7:f4:59:8d:6b:08:4b:43:c0:
5b:f2:73:04:95:ab:20:dd:8d:38:13:a1:d2:c3:41:
37:68:88:e1:45:58:71:12:b4:9e:78:58:9d:57:e5:
88:76:5e:96:b8:48:4d:bc:72:06:58:ed:6b:54:57:
6d:7e:d4:c4:42:ae:6f:71:ec:9b:d1:c2:0a:05:9f:
54:56:23:c5:47:30:08:a9:f7:59:be:71:9b:c2:31:
c5:6b:ac:3e:ca:ff:5a:22:3c:c9:96:57:11:b8:7c:
7a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:49:E3:0D:E8:E0:D3:25:2F:9C:A4:1D:15:BA:66:20:83:95:2F:71
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e8:b6:e4:7d:a3:f8:58:6e:97:b6:c5:6a:b2:3b:bf:36:81:
ba:8a:2f:d4:9a:aa:92:a9:42:b4:b6:26:5f:c7:ff:b4:3d:d2:
a5:db:9d:8b:41:e1:89:ff:d7:f5:94:81:82:d4:43:14:c6:e6:
e8:00:bb:be:f1:64:5b:0d:34:36:c5:9d:0e:d1:8a:43:81:53:
a8:9f:d9:36:d1:08:ff:8c:63:38:72:f5:29:7a:16:e1:f6:81:
dd:6f:1b:1f:df:25:0e:d4:09:e3:11:01:e7:3d:95:91:80:b2:
68:5c:c2:63:ca:34:1f:14:4b:4f:61:f4:de:00:9c:7e:0d:85:
d0:7c:c2:aa:62:31:44:85:11:35:f3:de:cd:10:6e:0f:bc:bc:
f3:5e:7d:9e:fe:38:b8:8b:49:c3:f1:09:49:d9:4f:bc:27:5a:
86:b3:1d:be:6e:6b:af:11:ff:92:b9:8b:f9:ff:98:a7:f8:e3:
e5:11:b6:07:26:29:f4:3b:aa:d3:26:c5:11:7b:74:75:ac:87:
f5:da:f7:69:6e:13:3b:08:10:1a:d5:40:3a:1d:a1:9d:c5:df:
75:24:2f:b6:69:2f:cf:9d:d8:1f:6c:9b:69:d4:89:dc:63:86:
15:5a:18:1c:4f:d1:59:25:f6:fc:02:c1:ee:b7:88:14:5c:09:
4c:8d:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:14 2025 by rpki-client