Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: T71LSNl4yVNB/FaBHmbsRhGW8CJILF/ca8XDQC83WDU=
Subject key identifier: C3:41:7F:F2:C3:68:C9:D0:8D:42:A8:DB:A5:D8:02:EE:A2:B3:E0:22
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 0197B6A0B577C4EEDA08CFCA70E5CC82B1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 128D
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: 6wHj9AnkPKdUsC4KwzlgXer5uvO17RDkcQQ1crXS0eM=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b5:77:c4:ee:da:08:cf:ca:70:e5:cc:82:b1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=c3417ff2c368c9d08d42a8dba5d802eea2b3e022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:9e:6d:12:7b:c8:5c:1c:4f:9c:87:ec:5c:
19:75:73:c8:ec:af:c8:00:46:e8:9b:90:1e:5a:a8:
6d:8c:b8:05:3d:56:f2:d3:17:15:b5:b4:75:52:0b:
3a:16:b9:df:25:db:9e:28:61:2b:5a:3d:ee:bd:fe:
a0:af:a0:67:e4:d0:8f:5e:af:2c:6c:77:f7:61:ab:
7b:cb:cd:80:2f:cb:53:79:94:60:88:3b:23:50:a1:
8c:1f:56:1b:6a:29:95:43:b4:30:19:b3:ca:a9:79:
39:a3:b1:1f:f6:44:08:9c:88:4c:e7:9b:e4:67:42:
57:0e:56:a9:70:d1:05:89:56:44:1a:e8:4a:3a:9e:
27:4f:42:26:74:ff:73:58:04:cb:bc:b7:02:d8:c1:
87:e4:b8:b0:e7:6a:d0:9b:17:85:c0:34:3f:4c:51:
56:8a:d9:66:a2:4c:57:e3:9f:37:86:63:9d:f9:0a:
97:1f:c3:d9:b9:a9:93:22:c6:fc:59:10:e0:78:a3:
fa:6b:ff:af:bc:96:4d:7e:9b:a9:fc:f4:37:75:f6:
49:9d:85:e3:58:b5:8c:f4:b3:b5:8e:bc:3e:db:fd:
95:39:0e:d5:12:8b:26:6f:53:08:4d:6e:07:2e:1d:
44:06:9f:3b:8d:03:a4:60:28:f3:dd:56:62:8d:39:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:41:7F:F2:C3:68:C9:D0:8D:42:A8:DB:A5:D8:02:EE:A2:B3:E0:22
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:09:4b:ba:e7:fb:4c:5a:b9:39:df:6b:0a:97:ff:78:dd:25:
04:d3:39:fa:47:ff:0b:4f:a9:81:eb:0d:bd:82:db:e3:50:d0:
4f:9d:ec:a8:9b:78:87:1a:e0:30:49:a4:41:3a:ed:cb:eb:85:
ee:ba:a8:36:e0:07:cb:f9:71:93:27:cc:c0:05:8d:05:d0:cf:
14:91:7b:c4:3a:ec:16:b2:a3:aa:6f:79:b8:b7:03:81:44:5e:
5b:65:7a:1d:4d:1f:b7:2e:24:d0:8d:24:aa:3c:7e:1a:b4:01:
53:2d:f9:93:dd:fd:e9:75:77:e9:9f:fa:96:74:0b:09:e3:1f:
77:ac:fe:e5:11:20:76:4b:05:5f:7d:68:44:55:35:4b:2e:9c:
94:89:50:1d:fc:db:38:99:79:78:c7:5c:9c:a0:5e:59:1e:62:
3f:b7:b6:6a:96:1a:67:4a:2e:05:e5:45:44:f9:95:e1:e6:42:
7e:df:2e:cc:39:32:27:2f:4b:ce:f2:b5:b6:10:78:bd:7f:e0:
75:69:90:bc:c3:d2:e4:72:22:63:ba:86:35:76:e9:e5:c8:46:
ba:6c:62:bc:2f:42:42:93:97:fb:71:bf:39:32:5d:f3:4d:08:
36:45:1a:c3:73:e7:92:50:e7:63:4d:47:4c:1b:c9:d7:d5:00:
5a:2a:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:14 2025 by rpki-client