Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: 3GO2vS072/wLYBFvEoOYyzectACe+13HJVApu7AyZQM=
Subject key identifier: 95:1A:4C:96:B0:2B:78:74:D4:87:E1:0C:1E:FA:B9:5A:7E:62:C9:07
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 0197B77C31A8EE06A54E341C1532117532A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 02B2
Signing time: Sat 28 Jun 2025 17:00:58 +0000
Manifest this update: Sat 28 Jun 2025 17:00:58 +0000
Manifest next update: Sun 29 Jun 2025 17:00:58 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: eYafkUD7wpGhnHiawcCoLui0N64dcdh1vCb6dh4ibc8=)
2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:31:a8:ee:06:a5:4e:34:1c:15:32:11:75:32:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Jun 28 17:00:58 2025 GMT
Not After : Jun 29 17:00:58 2025 GMT
Subject: CN=951a4c96b02b7874d487e10c1efab95a7e62c907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:81:17:34:91:7e:9f:88:22:bf:c5:fa:fb:
95:5d:8e:21:30:42:b3:4e:86:2c:a5:d9:95:9b:fb:
98:36:32:72:72:40:5d:ae:a1:9b:a1:10:ce:b2:ea:
69:34:2b:53:4c:c9:2f:56:26:bf:02:97:2f:c5:00:
89:a1:b5:c3:c0:d3:aa:7e:6e:27:a1:06:00:71:1c:
d7:12:9c:19:76:4b:08:6f:c3:6c:d4:13:0c:28:f6:
8b:82:48:78:a0:90:f2:53:64:31:7c:9b:0b:db:73:
00:2f:66:2a:d4:03:41:61:1b:15:07:27:c1:33:13:
df:b7:02:49:98:8b:92:91:10:ca:6a:5f:af:a7:f2:
45:6c:9a:bb:e5:ea:39:c4:ac:1c:94:fd:47:9a:7f:
1b:3f:40:fb:da:c3:23:60:64:be:4d:75:82:f2:1d:
7e:dd:59:44:cb:73:25:f8:df:27:e6:00:5f:f3:dc:
19:31:62:95:28:6f:75:97:24:cc:83:b5:bd:19:8c:
cb:ca:5d:f4:16:07:3d:2e:32:f9:df:42:6a:cc:90:
d5:a8:d5:fa:3e:9a:d1:83:be:53:41:c0:d0:e4:f5:
0a:0c:96:56:21:ee:f0:db:87:bb:a1:d7:9a:6e:2d:
b0:38:a9:c9:02:33:28:dd:58:d6:32:1c:ca:84:a7:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:4C:96:B0:2B:78:74:D4:87:E1:0C:1E:FA:B9:5A:7E:62:C9:07
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f1:33:18:b1:ba:4a:ae:2b:3f:66:ab:ae:fb:6d:15:50:13:
7a:2c:38:20:63:b3:a8:4a:7c:f7:55:6f:5f:eb:93:f5:e6:f1:
b8:28:c8:b2:a1:21:af:2f:78:2c:70:dc:c2:64:ba:70:5d:70:
5c:bf:fd:69:b8:6c:99:e1:57:42:c5:5f:53:0a:bc:f5:f0:3b:
ba:d0:69:b9:51:5e:bb:6b:c3:a9:a8:17:0c:40:88:59:f9:89:
c6:f0:b9:c1:11:bf:2e:26:03:db:67:06:a4:ec:8e:a0:a1:f8:
ad:7d:f3:7f:4d:86:42:3c:88:d3:ad:88:42:d0:ef:77:51:ec:
58:f0:f1:a8:10:4a:55:0a:38:b6:26:45:f1:70:f6:b4:bc:02:
36:cd:39:2c:25:8c:ac:fa:60:bc:97:a8:6f:d9:3f:36:b6:cd:
8f:d1:ba:2d:ee:40:02:09:f3:69:ec:12:2b:7b:bc:c9:13:b5:
14:15:e2:91:ec:d7:f3:17:ca:94:02:a4:d6:9d:28:dd:14:65:
fd:6e:b9:ba:0b:5c:49:60:0c:a1:a5:14:8f:f7:65:b8:81:77:
96:15:5f:50:c3:fe:e0:88:67:1c:b8:36:3f:17:3a:44:f8:fb:
b8:e4:f9:b3:99:03:de:07:f5:53:02:db:1f:8a:a2:c6:ef:71:
45:6a:92:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:29 2025 by rpki-client