Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: jiuQueLPLPaTMthVkXNrN7CbvFU6nKjs/MF+v7HQQP0=
Subject key identifier: AE:80:06:CC:22:96:5A:83:BC:C3:23:F9:62:F4:EA:1D:A9:41:64:61
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 0197B6A2027551799844A0AEE0EBE556FEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 09C9
Signing time: Sat 28 Jun 2025 13:02:40 +0000
Manifest this update: Sat 28 Jun 2025 13:02:40 +0000
Manifest next update: Sun 29 Jun 2025 13:02:40 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: R0b0o/8o2Dr+/QHbzcUUiQpfhbgF1Syrt8/cV43jL7w=)
2: RymBY7lnNBMXp_yUGm6cXmk9pIY.roa (hash: NXhw0vi4/QtrtywYV0kwabkAShMb2W3sLGUUgAEfvq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:02:75:51:79:98:44:a0:ae:e0:eb:e5:56:fe:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jun 28 13:02:40 2025 GMT
Not After : Jun 29 13:02:40 2025 GMT
Subject: CN=ae8006cc22965a83bcc323f962f4ea1da9416461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:22:56:7a:b7:87:8c:37:a1:7c:16:e6:73:
20:71:d2:eb:61:3b:dd:9e:32:67:ff:a4:0c:56:a0:
a1:0d:b7:6b:85:4f:d9:0c:26:8f:01:c9:c2:85:50:
7a:03:b6:3e:45:15:28:8a:e9:cc:96:a0:23:28:44:
4f:b5:60:4b:d9:5c:af:ff:d9:cc:d7:4f:b6:a1:5a:
9a:fd:c6:7c:3f:a5:82:07:b7:ed:91:ba:6f:10:22:
64:51:02:35:7f:06:4e:62:e4:95:5f:13:24:48:32:
22:30:1f:71:7d:74:87:c9:e2:0e:3b:ff:cb:4f:8a:
35:82:9f:20:16:ca:29:8e:0f:0c:61:a6:a7:db:06:
12:6e:ba:19:90:4c:68:26:ed:27:b1:59:39:81:bc:
15:3e:02:88:2a:ed:df:4a:d6:7d:c6:39:17:18:eb:
54:7d:87:ad:74:49:e7:09:12:07:d1:a3:0c:79:ee:
a1:a3:ed:8c:44:43:6b:f1:9e:81:01:5c:43:d1:ba:
7a:ad:d9:08:24:58:21:eb:6a:ff:bb:1d:d4:64:3a:
e8:d4:41:26:83:52:98:d3:f0:1a:ef:16:29:b0:08:
ea:25:17:07:60:bd:c6:18:55:b7:7c:e4:09:d3:f1:
66:86:d9:44:db:7d:55:da:d2:3e:5a:82:94:00:bf:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:06:CC:22:96:5A:83:BC:C3:23:F9:62:F4:EA:1D:A9:41:64:61
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:77:89:74:e7:29:6b:75:c4:80:e1:bb:ad:7c:ce:20:20:1f:
77:d1:f6:e8:ae:1f:01:f2:3d:cf:42:90:6e:73:32:92:bf:20:
87:65:a0:df:69:d1:e7:3c:f2:22:c6:b1:9d:5e:2b:d2:ad:bf:
6f:f1:ee:bb:5e:e5:17:cb:de:3d:2c:22:db:fa:bb:82:8e:b0:
55:27:99:7f:e9:e7:c2:02:d6:8f:65:66:06:f9:4f:8b:e6:4b:
3e:ee:7b:b9:28:e4:82:06:dd:0b:8d:61:5d:6e:ea:42:9d:cd:
7f:d0:0d:23:db:2d:c0:35:1f:86:1f:d6:6e:91:54:fe:ab:61:
fd:0c:7c:d0:f7:81:88:b0:28:4f:53:db:b8:36:eb:86:fc:8d:
ce:3a:77:7f:aa:9b:22:5e:e8:a5:96:57:b1:ab:b0:a1:3a:1f:
0b:53:7f:c1:2f:38:69:e2:1d:fe:e0:d8:cb:28:5f:18:07:85:
96:57:a6:a0:65:58:07:e4:e3:5b:27:87:4f:5c:06:71:f0:7a:
7e:35:4e:2f:3f:7b:fe:e3:58:42:65:65:6f:77:5b:52:4d:0d:
42:36:96:17:5d:9f:6c:65:5d:4a:96:59:a4:c5:a8:5f:07:14:
fc:93:7c:29:db:d0:82:26:18:30:e7:43:25:94:c4:72:97:1b:
42:51:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:51 2025 by rpki-client