Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: D9y1f9JIZWnPwgazCHrwBpHpuMVvYKQIGSOR+1asEhg=
Subject key identifier: A6:2B:8D:70:F5:5A:D6:4E:6D:77:DA:37:6F:D6:A6:F2:BD:F1:21:32
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 0197B7459FF7E464C6EA2E5884147B7B6F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 12EC
Signing time: Sat 28 Jun 2025 16:01:22 +0000
Manifest this update: Sat 28 Jun 2025 16:01:22 +0000
Manifest next update: Sun 29 Jun 2025 16:01:22 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: qvIFXXrboPUX4bfv20at1lzeaVt0tx7ui10SYNwU1QM=)
2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9f:f7:e4:64:c6:ea:2e:58:84:14:7b:7b:6f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jun 28 16:01:22 2025 GMT
Not After : Jun 29 16:01:22 2025 GMT
Subject: CN=a62b8d70f55ad64e6d77da376fd6a6f2bdf12132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:e3:5a:d8:39:86:70:33:81:b6:0f:d7:bf:
6d:07:f6:b5:ef:51:36:80:d0:5c:e3:d8:c1:a6:67:
09:13:0b:55:8b:6c:d2:9f:7d:c6:e2:d6:3e:06:67:
4f:5b:c1:e6:ab:02:15:19:7d:28:d5:d0:f0:7d:a9:
9b:30:90:5f:66:a8:0a:87:a5:23:4d:d8:07:31:92:
60:5e:1c:fb:e1:46:9d:b9:29:2a:9f:f6:d6:8b:5c:
81:f1:26:92:05:63:0f:f4:aa:30:10:1d:d0:3e:87:
ef:c5:74:55:37:1d:13:09:bc:47:9d:0a:26:94:c4:
a8:05:01:5a:da:0e:37:14:7e:41:b9:64:1b:ea:2e:
43:7e:5e:7d:6f:32:3f:10:fe:d0:d2:7b:bc:56:54:
a9:4c:10:6e:78:09:88:5f:17:b7:91:f9:fa:47:12:
ce:af:3a:8c:39:ac:06:f7:b5:25:1f:04:d2:b7:39:
a0:fa:fc:d1:98:fa:9d:45:eb:2b:1a:9f:6a:37:d9:
17:2c:da:e3:66:94:9c:40:93:e2:94:8d:db:dd:d3:
67:6c:68:be:14:4c:96:66:f7:c6:fb:22:12:52:50:
14:b8:f8:c2:39:eb:4b:8c:fd:ee:33:d5:53:c2:c0:
cb:fc:52:c6:b4:50:00:10:41:34:f4:eb:6f:fc:ff:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:8D:70:F5:5A:D6:4E:6D:77:DA:37:6F:D6:A6:F2:BD:F1:21:32
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:46:3c:51:78:71:71:f6:90:77:85:f6:96:46:b3:77:64:bc:
36:f5:16:36:fe:98:a9:de:e0:4f:46:f9:d3:1f:e5:f8:3a:f1:
bd:cb:55:e3:c3:4e:f5:69:94:10:8a:a1:4e:1c:67:0e:22:ca:
ea:c5:76:b9:02:7a:3a:12:f6:19:14:f9:36:fa:d8:f1:b2:0f:
13:cb:0f:a5:e7:74:86:11:bf:11:fe:19:ac:c3:c6:03:f6:75:
a6:f5:32:c3:9f:60:1c:3b:d1:b2:13:9f:73:70:f0:00:4d:f4:
e3:73:cf:f9:94:58:09:c9:c7:c5:11:87:35:de:f4:f2:fb:1c:
15:5f:7c:09:e9:2b:16:32:c4:04:8d:8b:b8:bb:ff:51:5e:5c:
ed:fa:fa:e1:a8:43:1f:77:87:6e:68:bd:e0:90:b4:90:ac:d3:
0b:da:f4:e2:56:f7:bd:a9:06:84:10:ad:6e:f8:34:7f:55:04:
3b:23:44:3a:2d:18:9f:cd:45:46:00:26:62:e5:dd:38:8c:b0:
00:08:e8:bd:1b:69:32:46:52:c0:73:71:ed:6a:c5:c4:a5:65:
a6:9c:e3:0e:f9:9e:c9:87:dd:87:bc:63:2f:f9:29:95:30:30:
83:73:d0:af:76:b5:67:e5:c6:3c:39:5b:95:55:62:ce:58:05:
96:86:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:34 2025 by rpki-client