Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: 4tjUTne4t6BlMEHuwbgL3vNxd6oyFD3in9CPvYMg/Tk=
Subject key identifier: 0C:55:F7:B3:F4:8E:A2:20:79:59:59:D4:CB:EE:2E:48:B5:C1:D5:59
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 0197B5FBC29A286F4E82AF520F11721D1012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 08AD
Signing time: Sat 28 Jun 2025 10:01:04 +0000
Manifest this update: Sat 28 Jun 2025 10:01:04 +0000
Manifest next update: Sun 29 Jun 2025 10:01:04 +0000
Files and hashes: 1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=)
2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: KRTUTnTkjmTnNBI7mtqqz5NWtqW+55Y7Zr1mVFm2vyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:c2:9a:28:6f:4e:82:af:52:0f:11:72:1d:10:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Jun 28 10:01:04 2025 GMT
Not After : Jun 29 10:01:04 2025 GMT
Subject: CN=0c55f7b3f48ea220795959d4cbee2e48b5c1d559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:da:0f:b4:ed:2b:cb:f6:1c:8c:be:02:fc:a6:
6c:60:35:7d:b3:27:59:30:9c:72:ae:42:d2:0b:aa:
d0:bc:c0:a9:7a:48:03:ad:12:fa:72:24:6f:cf:6c:
a3:9c:a4:2a:25:51:73:77:f3:4e:bd:54:73:89:06:
a6:e4:3e:c8:16:2d:53:f6:a4:f7:de:09:b5:cc:43:
dc:64:2d:4c:69:67:85:75:74:47:61:10:e6:5c:fd:
5f:0d:3f:fa:e5:5d:e3:ce:38:f8:0d:dd:88:e4:b9:
20:15:26:70:4d:49:e0:36:79:75:2f:e6:66:ef:30:
e4:2a:88:e6:81:e6:d7:b5:5a:3e:a7:71:34:3d:ce:
7c:ec:59:d1:f2:81:fd:9c:94:a1:ec:65:9f:d0:f7:
fa:69:4b:68:58:11:a3:c1:3a:a4:31:b3:3f:81:02:
fc:da:b5:73:fa:27:a5:3e:35:3e:b5:34:cd:4e:ca:
59:67:e2:d3:1b:5d:d0:18:4e:5e:2d:3a:ed:25:bb:
bb:18:9d:4b:3d:d4:cf:dd:51:a3:a7:cd:b2:6c:b1:
87:83:66:66:e7:39:90:73:4d:2a:66:8a:60:c9:2b:
53:da:b3:a3:17:93:35:ad:32:87:af:51:6e:74:c2:
77:5c:bc:76:f4:61:67:45:6c:e6:c6:b9:24:fa:57:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:55:F7:B3:F4:8E:A2:20:79:59:59:D4:CB:EE:2E:48:B5:C1:D5:59
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5a:10:3c:e1:df:cd:62:dd:03:06:31:61:bb:17:26:e4:3a:
c1:e1:00:b7:86:06:6d:b0:33:c3:af:b5:ff:86:69:eb:8b:b3:
43:bb:6d:4e:1b:2d:65:ed:f0:21:06:2a:34:50:9a:3b:e3:f6:
33:76:be:76:d8:cc:bd:63:8b:15:f9:b9:ab:e1:71:28:c8:38:
33:ec:c6:19:03:86:ad:33:fd:ef:eb:a0:04:39:74:fc:49:0f:
05:f9:41:63:a7:d6:e4:76:a2:90:cf:d9:60:e8:d9:52:78:c1:
c9:6e:a6:ec:ad:77:aa:bc:e4:01:7c:00:fb:db:06:c7:ce:21:
f3:03:eb:be:0c:5e:f0:8a:81:98:95:7e:2b:31:e5:36:f4:00:
55:ef:4d:21:25:5c:2f:a2:39:59:79:ff:69:97:24:4b:ab:39:
1d:95:79:a7:d2:c2:8a:95:3c:52:73:0c:af:4b:17:f5:d3:69:
d2:2e:dd:5c:59:de:a3:a3:c5:5e:18:30:15:40:76:40:c4:a0:
94:78:bc:c0:67:9c:7e:db:8b:c3:54:42:1e:30:b5:1d:ac:43:
dd:0f:d9:3c:ac:dc:c9:de:4c:fa:70:6b:6d:84:d6:13:d9:f4:
4d:c8:db:df:c6:72:26:91:a0:bc:e1:77:c9:7d:66:50:41:9b:
a3:29:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:42 2025 by rpki-client