Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: elOYrlKvjq6zyhY9rO7S6GQruBSljPA3zWUbOUeRMMQ=
Subject key identifier: AB:BC:11:0B:5B:51:98:DB:EF:F2:0C:98:2E:93:5C:18:22:DB:E0:C1
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 0197B9A1699EC464DA1C860888914AFD8A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 09C4
Signing time: Sun 29 Jun 2025 03:00:52 +0000
Manifest this update: Sun 29 Jun 2025 03:00:52 +0000
Manifest next update: Mon 30 Jun 2025 03:00:52 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: AzWLC9lnDV7rnW1XZyqMvM8Sf0sCXC2YnlZi9KxG8Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:69:9e:c4:64:da:1c:86:08:88:91:4a:fd:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Jun 29 03:00:52 2025 GMT
Not After : Jun 30 03:00:52 2025 GMT
Subject: CN=abbc110b5b5198dbeff20c982e935c1822dbe0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:3c:c1:27:d9:51:e6:9f:8a:ea:51:e0:00:
d7:be:24:0a:5e:74:72:e9:62:ba:6b:db:6d:ae:e9:
0d:20:27:c5:d4:78:41:e3:91:0a:d4:68:91:94:b7:
39:bb:b2:7c:47:39:fa:29:a6:57:06:51:6e:39:be:
16:93:b7:27:4f:e1:4d:30:9a:79:e3:c3:b0:71:cb:
e5:16:2c:34:f1:32:fe:01:aa:bc:be:ad:2d:3d:e1:
d5:fa:cf:1c:bc:d3:9e:ad:a2:a2:b5:7c:c7:d3:5c:
65:9f:7e:6e:2f:28:2b:af:23:3c:b2:c4:49:36:d5:
d3:8f:21:92:71:8d:0a:63:bb:98:57:15:9b:5a:8e:
2b:99:69:a1:88:9a:c8:67:68:62:b8:98:ac:04:67:
93:bc:ab:e4:26:91:14:25:54:25:1b:d4:d5:ba:da:
b0:ed:02:28:8b:7f:bc:80:7a:c0:73:35:47:4c:bb:
08:3b:ad:45:92:94:af:42:0b:08:53:5e:bc:95:66:
79:54:54:97:d1:6f:6f:87:82:47:7c:bc:fe:8c:3e:
3b:87:e2:ec:e8:0c:67:cb:86:3e:33:cb:e3:24:2f:
8b:e6:49:b2:6d:d0:66:db:38:cc:d1:c5:3d:00:fa:
06:a5:70:9b:ec:bd:3f:d5:12:dd:28:29:04:78:65:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:11:0B:5B:51:98:DB:EF:F2:0C:98:2E:93:5C:18:22:DB:E0:C1
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:00:f8:c0:8e:72:5e:d6:9b:2a:7a:55:a5:5b:ee:b8:da:a7:
ec:05:0b:bc:80:0c:33:c2:94:8c:73:1f:0b:74:9d:5c:5e:c3:
20:6b:71:93:9e:9a:b6:f5:d2:94:3f:22:76:bb:04:a8:f6:c9:
1b:ea:03:8c:2c:ad:59:34:69:58:7f:ac:89:0e:bf:35:64:5d:
0d:f0:61:d2:3f:ca:f7:4a:55:dc:3e:c7:e9:d0:9d:24:f1:f1:
65:60:13:20:73:d6:58:2b:c3:71:56:fe:12:68:b4:24:9d:c0:
f2:c9:be:a4:28:1e:fe:e2:72:04:4a:3d:63:63:23:19:3b:96:
52:5f:c4:cc:ca:77:71:02:5a:35:b2:e9:18:f6:2c:96:f5:81:
18:18:e6:46:8e:a6:cd:70:cd:6c:9d:5a:d5:75:06:a3:39:c5:
5f:9c:e5:8a:a2:72:46:e3:18:53:50:39:c0:1a:77:ce:95:d4:
7b:1a:78:bc:8d:d0:c0:d7:aa:ae:94:fe:e6:17:0b:61:db:36:
18:f0:3e:88:6a:67:f3:a4:ae:07:4c:78:cd:44:1d:60:8b:63:
d8:73:c8:b6:7a:85:6a:e5:70:9f:37:85:ab:b7:f5:91:ac:61:
20:77:93:cb:2e:e6:34:71:bb:ce:f1:7c:42:90:a5:ed:62:b5:
0e:a6:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:41 2025 by rpki-client