Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: TSvR0j701eKXPUctc6P4PMA7XS35cfDc67SijXqFtm4=
Subject key identifier: 6F:FE:AB:CA:B3:97:62:54:E1:0E:9D:2F:0A:B7:1D:AD:AE:78:4D:CA
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 0197B7451D698695646D00D912A24A928F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0BB9
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: RpIzLvylqdYy2LQd94BcE0ikV1NLfhrEwIZyCVXEtc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1d:69:86:95:64:6d:00:d9:12:a2:4a:92:8f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=6ffeabcab3976254e10e9d2f0ab71dadae784dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:c8:36:96:9c:50:ef:e3:41:72:bf:90:a2:
dd:db:85:0a:cd:7d:f2:65:70:f6:d1:7c:d8:fb:86:
c4:da:2f:aa:cc:c5:03:0d:4f:8f:0f:73:dc:98:db:
e2:06:4a:81:19:fe:40:0a:d0:2c:f0:f4:1a:79:eb:
23:39:12:76:f6:c6:55:b1:96:6c:33:b7:45:9d:b3:
0b:9e:ec:ce:cb:11:1d:51:e5:f2:ae:82:d2:27:76:
fd:a3:d7:36:84:f8:c1:cc:d5:fd:45:e1:22:a9:1e:
ef:38:e1:21:11:fb:be:0e:b7:09:69:c6:9d:cc:a5:
5f:0a:5e:d3:d2:48:4d:6c:1f:aa:41:12:a4:e3:f2:
b5:42:be:1e:f3:47:c1:da:32:af:ae:04:55:b5:fd:
dd:32:d9:8d:8f:81:43:a3:31:e4:e5:14:f7:9d:56:
aa:c2:d6:46:47:d6:64:8c:fd:af:32:f8:02:40:36:
86:4d:0d:df:d7:a0:b2:38:67:fd:64:8c:2f:52:14:
b0:7a:62:d8:0a:d5:eb:b1:8c:55:7d:81:0d:72:d8:
25:01:3c:b7:84:c2:e2:d1:32:20:5f:78:d2:a3:46:
90:4e:f4:be:d8:24:e7:95:de:df:8d:44:f7:9b:05:
5b:89:e9:b4:a4:c1:24:b1:1f:68:a4:d0:c5:c3:75:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:AB:CA:B3:97:62:54:E1:0E:9D:2F:0A:B7:1D:AD:AE:78:4D:CA
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:53:a2:02:93:68:bf:84:86:23:9b:df:61:37:49:34:3c:0e:
2e:04:41:5b:a3:14:16:c8:d1:28:af:ae:35:18:03:32:9c:52:
e0:24:0e:6b:81:84:2a:e8:22:da:28:2e:c6:f3:ba:9a:e3:3c:
6f:5e:fe:bb:f8:8f:3c:82:c1:51:f0:5f:c9:e6:a2:d0:b6:5d:
a8:22:f0:6f:bc:71:df:cc:96:bc:ac:dc:d9:db:34:de:f1:72:
be:33:24:45:c2:4f:8c:87:36:4b:78:5e:d6:80:53:4d:cd:da:
33:9d:17:3b:19:22:9f:36:e9:1b:fa:28:42:9b:78:92:b9:1a:
92:f4:be:91:24:e5:14:64:ce:8c:de:76:5b:d0:79:4e:2c:86:
20:21:3b:f9:22:60:c7:ae:dd:49:1c:40:7a:62:03:40:76:54:
e1:ee:01:91:0d:34:e3:ba:d8:f0:04:ac:44:b7:c1:53:e2:5e:
01:d2:3a:b6:4f:bf:28:19:cf:84:57:bc:7d:d0:2a:2a:a6:f4:
e8:e4:b7:97:64:48:93:3c:ee:c3:e1:d2:83:68:77:ac:29:c6:
94:f2:9f:8a:7b:6e:52:2d:a3:25:67:c3:01:76:e2:4e:b8:34:
48:bf:9c:03:3a:17:f0:dc:c2:7e:f3:01:70:dd:fe:63:89:91:
65:f9:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:20:57 2025 by rpki-client