Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: OWUZLh1vm4L+wDNyIjDR98BKlgwhLLy7QjPqoWEPgm0=
Subject key identifier: 5C:52:BC:65:3A:D3:98:EE:B1:75:26:2B:BF:4C:98:FC:17:B8:10:5B
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 0197B8900567CEE7EA21AC15F900D54B7AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0D3D
Signing time: Sat 28 Jun 2025 22:02:15 +0000
Manifest this update: Sat 28 Jun 2025 22:02:15 +0000
Manifest next update: Sun 29 Jun 2025 22:02:15 +0000
Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: FCTBSXzWPAgYvbjmM3rllBLwWnWow2pBBIQK1dr8b9I=)
2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:05:67:ce:e7:ea:21:ac:15:f9:00:d5:4b:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Jun 28 22:02:15 2025 GMT
Not After : Jun 29 22:02:15 2025 GMT
Subject: CN=5c52bc653ad398eeb175262bbf4c98fc17b8105b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:4b:8b:92:80:6e:04:cb:26:2d:7e:0d:f5:
e3:9b:85:ee:72:d1:92:7e:75:b2:e1:93:91:b7:1b:
fe:c5:d4:98:96:d6:d1:6c:79:4b:e0:8a:ae:04:a6:
68:f1:63:1a:da:43:86:6d:ca:74:ae:e8:4a:5f:02:
b0:ed:5f:68:a2:a7:fa:a3:8f:73:f7:c3:71:76:f2:
bb:12:7e:0c:ab:25:e3:c2:1e:a5:b1:93:88:cf:04:
74:12:e8:ed:2e:a0:42:2a:f2:5b:21:8e:46:b8:73:
6e:fb:ff:53:0e:a2:0c:e2:59:95:d2:f4:2a:2d:46:
29:55:ec:8e:3f:0b:1c:11:95:e5:26:17:f9:79:4b:
d1:77:5b:fe:38:8f:42:90:90:d5:a2:09:2d:21:2c:
11:bd:fd:d9:4e:6b:81:e3:9f:9c:40:7c:a7:75:e4:
bb:88:48:27:66:b0:fd:79:5a:c0:ef:0e:f3:4c:ea:
ec:35:af:32:92:35:f7:09:81:57:b7:ab:3f:b6:39:
82:21:85:8f:ad:7e:88:32:18:f2:87:1a:3e:e6:a9:
5a:83:ca:ab:a7:37:63:2e:eb:d2:6a:a5:03:09:41:
2b:00:50:74:15:56:03:74:62:01:36:eb:b1:55:14:
ed:34:69:de:24:40:b1:00:8d:02:f1:8d:43:67:f2:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:BC:65:3A:D3:98:EE:B1:75:26:2B:BF:4C:98:FC:17:B8:10:5B
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:75:76:e2:df:ca:27:70:6b:4b:6f:5f:3e:3c:f5:6f:b4:de:
54:ca:d7:db:81:4f:4d:b0:79:c8:4d:60:d1:30:8d:d0:51:09:
0e:cc:85:04:d7:b0:1b:3d:2d:46:59:83:82:73:06:d7:36:8b:
2f:24:80:d0:fd:3b:c8:8b:86:cf:bc:5e:c9:1a:0c:84:e2:f6:
9b:2c:9d:1c:d9:66:21:cb:bf:c3:a0:27:fa:68:75:76:20:13:
08:23:e4:13:f3:62:88:81:96:f4:3a:c0:db:76:17:6f:8b:f9:
20:96:a9:a6:8a:bb:16:19:27:af:21:67:31:58:fa:8d:06:83:
e5:e4:9a:ed:ff:c0:40:92:a8:0c:42:db:bd:a9:57:3f:4f:95:
93:f6:95:6a:4a:7e:93:23:da:f7:f1:b5:7e:2e:64:4e:04:b3:
0e:1e:cf:59:ad:92:e6:a6:b0:da:9f:cf:82:9d:58:8e:a4:a7:
6b:f9:6e:9f:31:fe:ae:d8:b7:f1:2e:e0:48:0b:13:21:32:e0:
1f:f4:6c:cc:83:ad:ec:4f:f2:ac:59:cb:ea:33:68:f2:b3:3e:
7b:ff:a0:2e:07:85:ee:7d:3c:a1:3d:34:68:ef:54:1d:eb:38:
3a:5f:17:cf:b1:65:6f:7f:d6:d3:a8:42:6f:d4:e4:70:21:57:
5d:de:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:12 2025 by rpki-client