Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File: 95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier: E1o1SIxHm3s0CoUWq2Dv39fCwrtgvJDOJizuqLFbgJU=
Subject key identifier: FE:49:EF:1B:06:14:E9:90:22:F5:30:63:08:BE:6A:B9:F7:62:41:6B
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 0197B63283846AD8B9663C4E99697B731E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number: 01A9
Signing time: Sat 28 Jun 2025 11:00:53 +0000
Manifest this update: Sat 28 Jun 2025 11:00:53 +0000
Manifest next update: Sun 29 Jun 2025 11:00:53 +0000
Files and hashes: 1: 5BPtNrEhH9Rw1aJqmYEkCzXkQjY.roa (hash: qBma49p0UmV3mrUVRqrsoQSZBl3jQDEOljuj/i+uqbI=)
2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: dj50pPmqd3NUjdF1U8egZSH4SvT06EjygBSu8tU74vs=)
3: OQ9RtML9G-ixWSm5EbGC_EQmqZQ.roa (hash: Jj0BQnswIB1ZHaTdvAdTXUICRNEwRPIUjy/LhMuocGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:83:84:6a:d8:b9:66:3c:4e:99:69:7b:73:1e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Jun 28 11:00:53 2025 GMT
Not After : Jun 29 11:00:53 2025 GMT
Subject: CN=fe49ef1b0614e99022f5306308be6ab9f762416b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:2c:8a:fc:16:0a:f5:f5:b2:c5:55:89:72:
fb:5a:ba:5c:32:e1:61:51:d6:d7:62:28:f7:a1:2a:
c0:e7:c0:64:a1:3f:6e:0a:f0:7a:6e:78:3b:d6:0f:
6d:8a:28:b4:01:a7:02:27:67:4b:e9:2e:a1:ea:63:
a0:9d:37:e3:ff:bc:29:f3:b8:da:1d:a5:82:16:d9:
a6:66:27:c7:a5:99:67:46:82:69:96:b4:cf:ba:17:
1d:5e:f4:38:cd:68:10:ce:23:2d:b2:9a:41:d0:7a:
69:e8:bc:6a:14:55:9d:d6:77:ca:a6:9a:7c:5c:32:
ef:b0:29:63:cc:06:cd:8d:58:76:dd:d1:92:63:14:
76:96:37:34:be:ef:1c:6f:38:a5:31:31:d9:bc:e1:
e3:8b:74:c1:63:67:fc:ad:44:c9:dd:6b:7f:5c:56:
ee:83:16:3a:bb:ce:bc:15:3f:13:2e:85:56:5d:87:
d6:d7:87:f7:ae:ac:27:8e:3e:be:d5:98:99:b0:7c:
f5:0b:8e:49:db:5b:a9:1c:54:62:ae:c3:ac:47:a7:
97:87:06:fa:27:a4:1d:05:8c:73:74:0c:0d:99:18:
5c:82:a1:af:6a:76:64:f7:2d:82:d4:89:5a:3a:73:
eb:0e:4e:47:23:17:15:99:08:1c:45:21:1b:ac:63:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:EF:1B:06:14:E9:90:22:F5:30:63:08:BE:6A:B9:F7:62:41:6B
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:91:29:83:c1:13:30:66:fa:9b:a8:c4:fd:ab:7d:76:93:0b:
a7:e1:1e:3c:91:d4:1a:14:53:c4:06:5a:98:c3:b6:a6:c1:ca:
e1:b0:49:05:85:6f:00:04:72:7e:27:fe:53:ca:64:a3:0f:27:
fa:c4:a3:c9:a8:9e:43:5c:62:03:ed:f9:81:5c:65:10:de:83:
34:fb:c9:f7:31:c1:a4:f9:0d:1f:1d:06:15:53:fe:69:da:dc:
ce:2a:7c:f2:e6:6e:f5:4a:c4:04:a5:72:96:04:e3:ac:af:22:
e4:e6:cb:4a:de:22:a4:7d:d4:a0:f5:d7:bc:88:e2:d9:0c:0f:
f5:51:8c:5a:65:a4:e2:36:39:3c:66:99:f3:00:0f:3f:d0:49:
de:11:e6:7f:be:bf:7c:0a:d5:51:04:24:69:65:67:24:c7:35:
e5:c6:a9:76:b7:47:3e:e9:6d:37:8b:86:fd:3f:ef:76:8b:86:
20:ca:80:68:d3:69:a1:4b:87:b2:c8:f6:1f:59:31:a1:ad:3d:
ae:b9:5a:16:1a:7f:a4:24:5f:7a:3b:ba:aa:ba:5c:42:68:64:
57:88:34:f2:de:c3:41:30:d6:dd:63:5d:dc:57:29:56:60:b5:
9c:23:46:b5:8e:f9:12:22:e0:13:da:52:a3:0a:57:54:2b:b7:
a0:39:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:47 2025 by rpki-client