Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: /aWc4pPJ92ZzC4xclygOdGdBH7fsH5AdO2O4ngjDnNM=
Subject key identifier: CE:64:BF:51:4D:57:A0:16:CD:04:0F:98:34:68:2D:75:1A:4D:3A:BB
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 0197B6D7A2E268B826FFD9C5ACD7EA1BEF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0C38
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: GS7HD5x802DRwmCx5c/9qI3VrbUcCIIwjP5nXkG6NYQ=)
2: xNx96Q3CalEzxDDmWGhbb3xTorI.roa (hash: gvLi2++gvNdVJ+GZ37QZOorhQSEvCo36oQwUoZic47Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a2:e2:68:b8:26:ff:d9:c5:ac:d7:ea:1b:ef:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=ce64bf514d57a016cd040f9834682d751a4d3abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:de:d3:53:4c:54:44:b7:52:5c:26:41:72:
1a:dd:2c:39:96:de:0b:81:5b:b3:74:1f:f7:7c:c5:
d9:5c:32:0c:09:8c:68:d4:46:02:a9:4f:1b:a8:38:
45:56:36:55:df:7f:84:5c:d5:f0:68:00:8d:3d:77:
69:c3:bb:c0:80:d6:7f:c6:41:7b:71:63:78:fd:48:
0e:67:b8:49:6a:66:9f:52:75:b9:f3:c2:aa:de:72:
de:ec:98:bb:b3:ca:b3:6d:9b:33:48:10:be:af:e8:
e5:0a:f3:7e:1d:9c:a4:db:fd:f7:68:cf:99:4c:30:
f0:3e:46:d5:ad:7a:12:f3:8b:2e:29:de:26:29:21:
ff:b2:57:de:72:26:8c:8a:79:a4:58:cc:6e:a7:e3:
82:88:25:50:f2:f6:12:ff:02:b2:b1:da:eb:83:42:
6f:48:a9:bf:2a:87:42:b2:3a:48:44:da:72:9b:a1:
72:bb:a4:dd:68:3a:45:f1:9a:d7:69:93:87:8a:ef:
b7:ba:3d:5f:35:7f:8a:e5:b7:95:6a:81:c6:08:ab:
b7:88:87:af:9a:74:22:34:ac:dc:9e:83:e9:49:48:
87:48:d4:d4:3b:da:3f:db:8b:d9:bf:aa:1b:4c:89:
c1:40:7b:4c:bb:4d:8f:b5:19:93:b7:5a:af:b3:23:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:64:BF:51:4D:57:A0:16:CD:04:0F:98:34:68:2D:75:1A:4D:3A:BB
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:31:58:3f:f5:bf:1c:bb:ef:e4:6c:e2:e4:cb:b6:e1:ab:1b:
8a:05:9d:12:e9:49:64:66:d3:ea:96:be:0b:f9:d4:bd:62:00:
fe:c2:44:04:dd:ca:88:be:c3:47:05:15:b7:4c:2e:c8:73:82:
15:2a:30:5b:10:54:c4:1b:a6:a3:9a:09:62:64:ce:34:16:dc:
ff:75:d2:fe:79:a3:fb:a4:79:ee:81:42:c9:4c:5a:f2:52:f9:
d8:58:0e:27:7e:b9:d1:06:46:d6:ab:e6:10:7a:0b:00:15:ee:
42:e1:03:70:63:d1:70:bb:50:f7:3e:dd:45:da:30:3d:d0:fb:
40:b0:55:0f:0d:0a:83:b8:90:96:75:96:0e:75:8e:a8:53:70:
30:1e:0c:73:37:02:33:51:47:d4:0d:7b:85:55:b5:e6:71:8f:
de:12:ba:7e:5d:56:2d:13:3a:4e:95:07:b6:4b:13:f4:6f:37:
85:9d:5a:44:65:24:ed:42:8c:9a:b8:f8:b9:d2:da:c4:2a:6f:
a9:e9:a9:93:28:2e:34:fc:7b:e8:83:cf:10:d0:21:8c:a4:c2:
bb:4b:3c:f9:ee:40:49:8a:f9:c0:87:fa:44:32:8e:13:bf:f6:
35:aa:d3:5f:0b:a7:88:e4:12:31:9c:69:8a:7e:fb:ca:78:60:
0c:02:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:11 2025 by rpki-client