Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: ow7DmkzLiOxaxmoGeRF2E/BRob2VNSwGMXw927jBhOg=
Subject key identifier: 5B:AD:80:7A:EA:9F:2B:63:BE:1D:CF:B0:56:B2:FA:B3:78:1F:C2:A2
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 0197B88F28054EC9EC017FDC74BA2BE92755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 0665
Signing time: Sat 28 Jun 2025 22:01:18 +0000
Manifest this update: Sat 28 Jun 2025 22:01:18 +0000
Manifest next update: Sun 29 Jun 2025 22:01:18 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: 79O3GX5wx8gxdWjpCAe1myxQOJuyVERza6129y77H84=)
2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:28:05:4e:c9:ec:01:7f:dc:74:ba:2b:e9:27:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Jun 28 22:01:18 2025 GMT
Not After : Jun 29 22:01:18 2025 GMT
Subject: CN=5bad807aea9f2b63be1dcfb056b2fab3781fc2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:25:41:1d:a8:e3:69:bf:51:3d:db:46:77:
d5:10:6d:95:a0:66:32:b8:99:40:54:6c:08:b9:1c:
13:a1:2a:99:70:2c:1d:55:6a:d1:09:93:ca:4c:c2:
8c:17:bd:23:00:04:59:c5:f4:ec:d3:b1:c1:0a:5f:
8e:d2:34:f9:97:0f:35:1b:d2:75:c6:a1:11:44:6d:
20:65:37:f6:4a:61:d2:08:71:c1:99:e3:74:51:1d:
cd:a7:fe:d3:d7:8f:0a:44:c3:f9:c6:c8:c9:be:fc:
4b:01:66:f3:c1:f9:45:13:02:f6:99:56:7d:69:f2:
67:75:f9:3b:10:55:b4:b4:0a:34:04:c6:d8:dc:7a:
8f:b3:46:e1:6e:0f:bc:97:9d:1c:ec:bd:5d:21:9d:
6d:da:55:58:ab:ff:bb:05:99:dc:c5:05:4a:e4:8c:
9a:b1:a1:e2:4c:71:17:d3:db:30:41:20:1a:29:7b:
41:98:b0:f0:f0:c5:17:af:85:7b:ae:a6:15:b8:0e:
61:19:2f:21:67:8b:2b:57:7d:6d:97:7c:9a:30:3e:
55:59:e6:f1:1e:16:85:f2:53:4a:87:31:61:d3:42:
56:68:9e:3e:43:1f:4b:db:19:2e:74:29:55:26:89:
98:24:47:98:33:ff:5a:3d:8b:d9:ac:42:88:ce:b4:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:80:7A:EA:9F:2B:63:BE:1D:CF:B0:56:B2:FA:B3:78:1F:C2:A2
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:01:6a:23:6b:b3:64:ff:2c:94:3a:1c:81:33:ce:e0:07:d4:
0d:c0:c6:10:5e:b2:38:97:8e:73:e1:da:cc:53:44:2a:b6:7c:
d2:ad:94:58:2e:3b:2a:02:59:cb:d5:2a:17:20:d6:a8:1c:49:
b4:cf:c4:cd:d2:46:a5:f2:38:aa:76:8a:f0:f6:68:56:4a:97:
39:bf:70:25:24:9a:93:55:4c:b3:8c:f2:17:47:79:d5:ec:36:
39:8a:5b:26:38:1a:5e:3f:36:a7:c5:2b:d7:12:3b:a6:b0:60:
f6:54:4c:54:9c:f4:cc:ed:f4:79:c7:97:09:7b:16:89:3b:25:
0d:4b:71:c2:5c:62:91:25:59:50:1f:72:e5:25:e4:52:1d:d3:
17:39:90:87:80:ea:48:bf:5b:e7:ba:50:7e:ad:b2:78:a9:21:
90:43:f2:83:55:29:5b:c2:83:3a:03:a8:ed:df:a1:aa:bc:b0:
fa:13:a5:14:d3:e3:3d:ef:58:d4:bf:1d:9b:86:d9:22:2a:04:
34:23:cd:f4:2c:82:b4:77:e3:fa:12:83:46:26:27:e3:03:48:
00:bc:38:f3:fe:4b:42:4d:b7:8b:81:e4:65:2e:21:22:08:99:
fc:c1:40:72:b0:d1:f2:0b:7b:14:61:80:02:8e:b2:42:09:41:
07:c2:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:37 2025 by rpki-client