Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier: ZkFAdTd0k/1t0q65sISWxKR+n3QAeXuAylpJ71Om0BU=
Subject key identifier: DC:33:E7:1F:96:C4:D6:D2:A0:65:E0:DE:BF:01:44:B5:FD:DB:41:2A
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 0197B6A121D683AE1D7F6A40D56BE06BEA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number: 11B4
Signing time: Sat 28 Jun 2025 13:01:42 +0000
Manifest this update: Sat 28 Jun 2025 13:01:42 +0000
Manifest next update: Sun 29 Jun 2025 13:01:42 +0000
Files and hashes: 1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=)
2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: FyuAZiHK4rWfNucikngUR/VAshFK8a+U2MCQ5FgfPM8=)
3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=)
4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:21:d6:83:ae:1d:7f:6a:40:d5:6b:e0:6b:ea:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Jun 28 13:01:42 2025 GMT
Not After : Jun 29 13:01:42 2025 GMT
Subject: CN=dc33e71f96c4d6d2a065e0debf0144b5fddb412a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:fe:36:2a:fe:83:19:fc:c4:c5:85:45:da:
ae:f0:bb:78:bd:41:90:7e:e0:25:15:bf:fc:29:a5:
16:f0:6f:07:98:c5:9b:f3:0b:67:7b:eb:f8:4e:20:
20:dd:d4:1d:8a:2b:8b:8a:c7:86:ed:57:86:da:b2:
46:55:85:ee:16:28:23:d5:2f:d3:d7:8b:a5:30:51:
79:2d:ba:6f:e2:be:54:80:98:4d:13:27:cc:be:8f:
20:f7:3a:71:6a:26:b9:13:62:ac:3e:51:7c:5a:b6:
ab:bc:2d:aa:45:e9:ed:a9:f4:51:26:f7:19:aa:94:
3d:77:aa:8f:31:97:5c:b4:b2:fa:9b:72:64:39:c6:
47:c9:d0:b8:8d:d2:8d:79:ea:19:1b:9c:7a:fd:76:
19:db:fc:03:db:b8:a2:bd:7a:b0:b5:20:2b:7a:90:
f4:fc:c4:0f:ef:e2:e5:51:17:6f:81:9e:0a:64:4f:
02:3d:f5:c1:8c:11:03:25:52:f6:15:85:e5:3f:ff:
03:6e:01:86:74:94:6c:77:36:c6:17:9b:83:c3:fa:
99:dd:98:42:58:1b:43:ca:ed:f7:5a:54:80:f1:ed:
e3:38:83:a6:0c:58:b3:d8:73:ae:76:0a:13:cc:b4:
43:13:7a:c7:81:3b:89:7f:c8:07:6b:8c:e2:3c:19:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:33:E7:1F:96:C4:D6:D2:A0:65:E0:DE:BF:01:44:B5:FD:DB:41:2A
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:83:3b:89:9d:15:33:42:2a:06:ba:55:98:08:c3:18:05:7c:
b2:41:1c:e8:0f:93:c5:9c:1b:f0:b9:d3:e0:45:38:97:d1:3e:
13:a5:95:40:ce:da:b2:eb:bd:73:35:00:bc:80:12:55:c4:f4:
b1:d4:d9:14:3b:ea:e0:c1:a7:25:c5:43:81:36:18:f4:f2:e1:
37:f9:da:a3:93:b7:d3:28:10:54:6d:d5:26:9a:8e:6f:cb:b1:
46:7a:b9:9a:8b:06:4e:c5:00:7b:6b:ed:74:bc:1e:ec:9e:cc:
81:a9:a6:cc:98:54:d2:fe:66:e8:c1:4c:c2:15:f7:e3:03:9c:
77:ee:d7:ab:f7:29:35:92:86:97:7d:6d:95:05:6a:12:be:06:
6c:84:ad:d1:15:06:c6:0f:18:97:0b:8e:85:46:6d:8e:20:61:
21:2a:ff:72:e8:a2:54:20:ae:81:9d:ca:40:97:5f:d4:27:cf:
33:27:6f:64:e0:14:d9:81:7a:76:24:4b:8f:00:4b:00:ed:bb:
86:6d:3c:15:c6:3a:41:41:c6:61:b9:00:19:80:d2:7c:7b:35:
61:d9:49:81:5e:ca:91:7d:1b:bd:7e:1c:79:20:c7:6b:af:c4:
a2:b8:05:50:15:ed:78:92:a7:52:c0:1c:76:7f:eb:1c:00:69:
cc:2c:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:21 2025 by rpki-client