Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: gDFdPD6PRQcK1FiPmIPMab2n0r9mV0scgTLEZXAbKfM=
Subject key identifier: D1:31:82:F9:73:77:61:EA:E7:CE:5D:8E:E1:B6:F3:C9:39:21:C8:7C
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 0197B632F5BB0BB2741DF53B59DF2542232C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0EB6
Signing time: Sat 28 Jun 2025 11:01:22 +0000
Manifest this update: Sat 28 Jun 2025 11:01:22 +0000
Manifest next update: Sun 29 Jun 2025 11:01:22 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: 1sOcQd1ojX2UObVjhZoW1Auq2mrtt6RlhpKUiccvKqA=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f5:bb:0b:b2:74:1d:f5:3b:59:df:25:42:23:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jun 28 11:01:22 2025 GMT
Not After : Jun 29 11:01:22 2025 GMT
Subject: CN=d13182f9737761eae7ce5d8ee1b6f3c93921c87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:b0:cc:12:21:14:54:02:51:c6:f9:19:fb:
8e:42:7c:b8:8f:b8:ed:67:d1:02:11:3e:e3:b8:12:
71:f1:c0:44:58:56:da:2f:81:51:1f:ec:68:a9:eb:
5d:f4:ab:ac:18:a6:66:7d:66:4f:ed:08:c9:f0:a4:
2f:af:62:dc:d5:1d:5b:e5:98:d6:ee:01:2c:33:8b:
e8:0a:be:d9:56:06:26:6b:dd:20:a3:5b:45:60:2b:
b8:34:79:fb:49:8c:63:4c:f3:6a:60:5b:7f:f1:02:
92:92:27:3f:87:42:37:2d:4e:1e:a1:c6:8b:eb:49:
d3:b3:56:d4:26:fe:af:e8:07:e6:a0:e0:4a:02:3e:
1c:d5:5b:2e:ed:9e:b6:9f:58:7c:c2:0e:77:8f:56:
7e:06:3d:57:fe:d2:0d:1a:a9:25:14:4e:2d:11:0d:
42:5e:48:d0:38:b9:ba:7a:95:03:54:0f:bd:ab:28:
75:8c:68:cf:84:d0:c1:ee:3b:cb:81:72:9b:8e:08:
2d:11:61:aa:30:b6:69:47:9f:2f:a3:ef:c2:5b:69:
58:48:b9:f3:41:5f:8b:a8:b0:2c:63:b5:cb:b5:13:
72:c3:05:93:f4:82:2d:c5:e3:15:a3:3a:cb:a8:1e:
37:63:22:24:bb:91:8d:18:f8:97:12:65:40:f6:44:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:82:F9:73:77:61:EA:E7:CE:5D:8E:E1:B6:F3:C9:39:21:C8:7C
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:dd:64:48:bd:cb:44:ea:a8:83:28:3a:ed:3b:87:d7:e6:d5:
19:38:53:8b:2a:17:86:b6:f7:5e:90:82:93:ec:3d:b0:19:bc:
2e:3b:0c:61:51:8a:ac:69:71:66:94:1a:7a:10:4a:a0:d4:d6:
8c:83:a6:0f:47:55:cc:c3:4e:a1:f0:76:1d:9e:20:a4:cf:d1:
88:78:72:d8:82:43:cc:9e:32:8f:ab:ce:57:2f:e2:5e:3b:90:
f5:a1:a2:2e:46:e2:07:8c:97:ca:f3:05:23:dc:0e:c3:51:ee:
2f:64:06:5f:07:5a:e5:d9:ad:c3:20:5a:ee:6f:3c:63:5a:bd:
a9:fc:58:2c:9e:84:b1:a8:8a:aa:be:08:7f:0f:ac:60:73:90:
b3:48:39:13:28:5d:88:48:9f:4e:d8:5e:20:4f:b8:6a:e2:99:
aa:7b:ce:38:26:97:02:4e:f8:78:db:9a:8c:42:0c:92:1f:9c:
e1:0f:44:fb:cc:4b:42:fb:01:78:9b:47:cb:17:09:ba:6f:e8:
35:19:68:3b:49:18:ca:4b:fa:ed:c8:ed:45:5d:f0:54:e8:af:
4e:1e:d4:99:cf:34:3e:b6:35:2d:97:36:81:8e:41:30:15:e4:
bf:a7:5c:f0:20:6d:0c:96:3e:ad:72:43:be:9b:4e:9b:19:dc:
de:8d:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:24 2025 by rpki-client