Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: X9CMF2isrLGGjS15f+QGsnN6KhmlptYcdAQLAPWGtxg=
Subject key identifier: 17:44:57:C7:5C:84:8E:B7:9B:B9:31:FE:F5:D9:B6:33:56:DB:08:BF
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 0197B8FD2D8EE01D9FC630E5A7D4A0DC597F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 084B
Signing time: Sun 29 Jun 2025 00:01:29 +0000
Manifest this update: Sun 29 Jun 2025 00:01:29 +0000
Manifest next update: Mon 30 Jun 2025 00:01:29 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: QwIR4wwduU2T+Ga6/prBrTmQkb1WHOhAVelM7Tjk/y8=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:2d:8e:e0:1d:9f:c6:30:e5:a7:d4:a0:dc:59:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jun 29 00:01:29 2025 GMT
Not After : Jun 30 00:01:29 2025 GMT
Subject: CN=174457c75c848eb79bb931fef5d9b63356db08bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:2f:f5:4e:f2:ff:c2:b9:ca:0e:e2:c7:59:
b5:6a:9c:f0:9d:b9:e7:a7:f4:43:af:e6:49:d4:37:
8d:1a:0f:a2:3e:37:9a:8e:ec:ad:04:83:cd:4e:e6:
73:96:dc:93:4a:c6:e7:ac:c1:8d:a1:a9:69:24:30:
e2:21:b6:66:f1:aa:4d:27:5f:32:06:46:c6:f5:df:
13:02:22:8b:47:bc:5b:58:f6:97:2b:5e:50:de:18:
d3:da:43:0c:89:7d:95:c7:fb:c4:7e:e5:37:e3:67:
d0:2e:63:86:bf:e9:80:a9:ce:fc:98:de:0b:13:c4:
23:93:9a:ad:1c:02:9f:a7:91:cc:d7:1c:0f:16:25:
32:38:ed:c9:17:1f:9f:44:fe:26:5b:35:5f:23:c5:
42:67:c6:c5:f6:13:7b:b4:6a:e0:e3:9e:dd:ce:a9:
91:65:c0:57:c8:71:7a:8e:d1:39:63:f3:01:79:60:
4c:a7:96:41:e2:b4:4b:1b:5f:0c:79:c6:54:31:27:
22:83:54:42:c2:4e:b6:05:d1:bd:c5:15:62:71:52:
9c:48:da:18:7e:d5:95:72:f5:78:ae:56:ef:7b:96:
5c:b4:74:96:2b:d9:7e:da:7f:b3:46:e6:b1:e1:5f:
79:42:5d:2e:ce:e5:7b:9f:0a:0b:96:38:e1:2a:43:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:44:57:C7:5C:84:8E:B7:9B:B9:31:FE:F5:D9:B6:33:56:DB:08:BF
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:ae:89:d2:de:45:61:c3:ba:74:b1:23:ed:f6:15:e7:16:
14:8f:0d:52:86:4d:7e:b8:19:dc:c9:19:86:3e:06:56:ed:4d:
8f:ed:89:e3:75:54:23:bc:be:df:74:bf:1b:1a:24:9c:b3:ea:
54:7e:e6:e4:e7:36:d5:8f:f6:a0:1d:b5:c6:46:d6:67:46:38:
5a:8f:7d:28:e1:d2:d4:62:09:e7:34:dc:f1:cf:3e:34:f0:57:
64:53:e5:e3:7b:64:f4:16:82:3a:dd:1d:f9:a1:27:0c:03:d3:
15:05:58:53:1a:b2:8b:80:64:d2:04:db:ac:79:22:78:77:e6:
77:52:28:7e:2a:58:86:ca:a4:c1:df:05:40:1e:7d:6a:b3:98:
0a:67:a8:90:fd:f5:96:68:32:d7:8d:9e:ee:f3:1c:04:40:5d:
2e:3c:3f:41:6f:fe:66:9b:4f:ac:a6:c9:75:82:22:22:8e:70:
ab:cc:46:68:46:0d:d8:69:52:42:2d:5a:66:cd:56:b9:51:7a:
b9:18:9f:8f:e2:a2:a9:28:10:7c:49:68:c0:69:72:99:b4:c2:
7b:76:f7:37:a8:86:a9:45:3e:39:47:7f:8a:16:e9:7e:50:15:
c6:37:c9:8b:df:c2:fb:d9:99:36:4d:63:fd:8c:09:95:12:9b:
ee:d9:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:03:24 2025 by rpki-client