Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: Cd9tFJAD74Fl3sZKhg8y8oLv3WNbPjdiRefze57T3bc=
Subject key identifier: F0:69:A1:00:32:6F:61:E8:FF:00:76:CD:CB:5C:1D:6E:D6:7E:0E:E4
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 0197B6A0ED1B2A1CE10C44E8E740E9630022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 021B
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: 1-LEezNtaqjy169gIk46UkSGODnI.roa (hash: FRFupvefU0HUQnLO8y2fwT4i2INskAlpIVZPmaI9wtE=)
2: IrF-9wkj7eNtv0srLfHPyI1GtTA.roa (hash: mAMlIob8u84HdQAxB78nZwUMGcefLJXlEaHY1RBkM0I=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: 8xNfa04cgtzoOJXtrtKHFozRCFHXcI+DX/zc4+Lk3eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ed:1b:2a:1c:e1:0c:44:e8:e7:40:e9:63:00:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=f069a100326f61e8ff0076cdcb5c1d6ed67e0ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:c1:96:1e:79:ba:ed:e3:11:d9:8b:09:fb:
5c:64:41:c2:2c:ad:37:59:f5:b8:7b:7a:f0:fd:be:
d6:81:31:2a:9e:22:6b:e1:ea:1f:ce:f4:78:f5:ca:
0b:42:8e:4b:ee:94:52:29:24:8a:4a:87:df:c4:f1:
27:39:d1:64:1c:c4:41:72:2a:1d:31:bd:74:de:02:
9c:db:17:5c:d8:0b:f8:1a:3a:5b:88:72:27:36:60:
92:34:ab:83:cc:f5:69:16:94:1c:cd:d1:05:e7:a3:
80:54:e7:e8:46:82:9f:79:8e:39:49:da:76:49:e2:
d2:05:f6:f8:a2:0d:73:9c:9f:dc:4c:aa:10:e0:6b:
15:9b:7f:d0:40:b6:8b:90:86:91:8b:e0:bd:40:b5:
3d:1c:e1:47:90:7c:88:a5:79:e7:7c:28:8c:5d:09:
74:f2:4b:f9:81:ea:a3:6e:e8:35:65:e5:44:ff:ad:
17:90:90:bd:ad:e7:c5:59:0c:c3:01:24:71:4f:23:
cd:bd:07:5a:e0:bc:ec:a1:85:fe:b0:05:ae:b0:83:
e6:85:4e:c1:2e:06:e6:a5:68:07:72:1d:87:f8:35:
cb:af:38:26:76:3e:8c:9b:27:1d:4e:5e:17:0f:e5:
6a:4d:79:74:2f:d1:07:99:0a:f8:40:78:c0:74:04:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:69:A1:00:32:6F:61:E8:FF:00:76:CD:CB:5C:1D:6E:D6:7E:0E:E4
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:70:83:d9:bc:fd:ab:9a:8c:ed:c9:7d:40:df:0f:7e:95:45:
24:99:0b:26:78:ef:5a:1a:8b:de:32:d1:e9:14:c7:12:f4:6a:
69:d7:2b:0e:aa:2a:19:b8:d7:9f:aa:1c:13:0f:d6:62:97:01:
90:28:44:e6:db:fa:77:22:96:6f:e1:5f:72:c2:37:9d:17:75:
ad:3e:dd:5c:29:19:74:d7:74:06:c1:40:89:d9:9a:87:2e:3c:
21:40:d6:7b:ba:32:a4:83:15:02:b8:d7:d5:6b:b0:f1:fb:15:
b4:71:a5:09:e6:7f:62:cb:41:6f:1b:a4:7d:ea:93:e6:32:4b:
85:5b:fc:48:ba:b3:49:22:62:67:70:da:5d:75:d3:a4:5b:2c:
36:85:3c:9a:bb:50:08:14:94:88:d7:43:f4:56:00:a8:79:f0:
b3:0e:ea:1f:2f:85:68:ad:a4:c4:4f:6a:9e:b8:e9:cd:17:ab:
0c:81:37:28:4f:ab:15:3b:27:ea:23:1b:f9:31:ea:2d:4d:b2:
02:69:b9:8e:85:dd:30:29:49:8b:f9:a7:c7:2b:25:23:40:e1:
e2:8e:30:38:db:17:bb:e3:59:cd:94:87:af:f3:a3:70:33:7c:
ab:c8:56:ec:b9:54:54:1d:df:f2:f1:e9:5d:a0:8f:28:f7:91:
41:22:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:08 2025 by rpki-client