Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: Pjc105FxJ2uJtKG+4SqsrPgM8iPnfwLFFOuahZn1KZg=
Subject key identifier: 89:9F:69:1A:B8:FD:EA:C4:C7:2C:C5:9E:B7:7C:BA:7B:F8:21:60:3B
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 0196C15D53A415039D58047D2422CE41FEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0C09
Signing time: Sun 11 May 2025 22:00:40 +0000
Manifest this update: Sun 11 May 2025 22:00:40 +0000
Manifest next update: Mon 12 May 2025 22:00:40 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: K0aLiuW/GPw0VEHHIffXQVpeEMy+zUrjxCk5WSacLoM=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:53:a4:15:03:9d:58:04:7d:24:22:ce:41:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: May 11 22:00:40 2025 GMT
Not After : May 12 22:00:40 2025 GMT
Subject: CN=899f691ab8fdeac4c72cc59eb77cba7bf821603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:a3:6f:19:c8:3e:25:83:9d:26:95:1e:d0:
2a:23:7b:8b:84:ab:18:ab:09:27:64:82:43:55:0e:
39:ed:41:65:c5:80:e9:9b:f9:9a:76:10:7d:13:ca:
32:3d:64:4f:3a:12:8b:ee:39:aa:8a:ef:c0:d7:45:
0a:91:4e:16:86:bb:2d:00:9e:13:19:fb:3f:74:d1:
01:39:7b:4d:39:7a:ed:58:6d:7d:b2:bb:05:8a:cb:
29:31:d7:70:ad:bf:b0:d6:79:2f:b6:ea:d6:e8:85:
ec:da:be:dd:f1:68:2d:7f:5d:d9:a9:17:d8:36:9f:
7f:be:f5:a0:14:a0:8b:cb:eb:1f:fd:df:3d:87:f0:
31:02:c9:e7:94:90:f7:a5:3e:e2:b6:73:5d:b9:8c:
7c:d4:53:bb:40:23:cc:94:d3:d7:24:24:f9:5b:33:
20:24:bc:2f:8d:9e:84:d5:57:89:00:ae:ad:91:a9:
26:a0:81:13:1e:f4:2d:c1:9f:5f:48:d6:5e:1a:63:
d6:07:80:dc:ee:39:b6:68:37:87:99:7e:2d:15:8e:
c4:5d:55:72:60:97:cd:46:e3:bc:79:ad:5d:80:ab:
db:51:1f:27:c7:79:57:7c:b3:68:6f:b2:52:42:54:
5c:03:f5:d0:bb:af:80:6d:b2:40:1e:9c:22:f1:15:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:69:1A:B8:FD:EA:C4:C7:2C:C5:9E:B7:7C:BA:7B:F8:21:60:3B
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7c:dc:be:69:2f:be:a0:68:58:d8:4d:cc:a8:10:5e:59:db:
ea:84:9f:c0:46:24:6c:14:ad:46:00:75:1b:30:1f:40:0f:74:
05:44:ad:c6:10:d9:8b:06:7e:e2:f2:94:8a:71:61:7b:bf:ae:
65:c6:c0:3f:86:40:9d:a1:c2:14:83:0d:b2:3d:c2:f3:1b:b0:
01:52:9e:e3:50:57:c4:8d:89:d4:d6:52:d3:27:7e:03:2d:5d:
b0:8b:35:f9:32:14:26:b4:99:9f:dd:7f:53:71:5c:32:50:e6:
d8:48:98:cc:21:9b:6d:3e:6e:ef:81:0e:d2:68:f8:3d:52:34:
17:d6:fa:ae:68:94:c5:14:cf:46:07:3d:20:ae:91:61:d2:55:
33:29:f1:aa:76:41:ef:0c:99:34:1f:83:0c:c9:24:03:80:cf:
b0:48:dc:cd:d5:fb:53:a8:fc:e5:a1:5d:b7:c7:8a:7a:6d:a3:
3f:b1:cc:2a:c3:6d:af:7b:4a:43:fc:e6:0d:ac:46:14:a8:57:
30:1d:28:d9:c2:ac:8c:28:78:8e:d0:65:53:3a:90:b8:ee:d9:
00:a3:3c:8c:10:2f:25:b8:e6:e7:51:e0:06:38:05:b8:22:94:
c1:a2:05:54:c6:44:57:a8:60:b1:14:58:2f:0a:2b:c0:fb:9a:
32:e2:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:29:50 2025 by rpki-client