Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: wLu5HbI/K2BjuUCLa8wOXV9lMacx8IuzF4p12K51ePY=
Subject key identifier: 07:CB:B5:40:59:BE:A5:66:39:4A:43:83:47:66:A5:7F:DA:FD:EC:C3
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 0197B6A1756DD83B04CCE06D4EABF54A40FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 06EC
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: CElBgFozqrII7iX51CfTpuUsO1xa/jLXE8Ud+7SoInE=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:75:6d:d8:3b:04:cc:e0:6d:4e:ab:f5:4a:40:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=07cbb54059bea566394a43834766a57fdafdecc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:47:db:3f:d2:dd:3d:cc:ef:0a:00:b4:a9:
a4:9a:e7:ba:65:20:8c:44:82:df:08:58:be:fb:8a:
a7:e4:af:a0:39:cf:40:c1:60:1c:0e:de:3e:07:8c:
e9:2d:50:15:4f:00:0c:2f:35:c4:04:78:00:d4:0f:
c3:5d:21:60:57:c9:11:de:c2:70:88:d4:ac:dc:2e:
7e:29:3c:a2:88:89:13:68:a5:95:be:85:cc:13:ec:
77:b2:b7:bd:ee:18:a3:5f:df:2d:cd:0d:c5:70:df:
32:f7:07:a6:4c:1f:7c:ea:67:85:15:d9:c5:51:6a:
86:44:54:e7:54:83:fb:48:2e:81:22:d4:7c:5a:3a:
03:e0:9e:8f:2b:6d:86:a3:19:32:f1:6f:e0:8e:95:
50:8e:05:48:3b:33:1c:58:9d:a7:9f:3f:e0:30:b7:
18:a5:65:c4:20:51:aa:42:5d:f4:38:9a:38:f2:b7:
1f:eb:65:11:ea:41:a7:e8:dc:75:fc:21:29:6a:dd:
50:a7:10:d9:63:a1:bb:56:74:d3:5e:02:24:1e:f7:
95:b9:52:95:fb:57:7e:ba:c9:be:ee:92:14:d8:bb:
72:94:13:ff:ed:23:3d:2a:41:96:57:d2:38:e7:03:
bf:5d:68:ac:fb:86:f5:6f:08:2a:09:be:52:f3:bc:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CB:B5:40:59:BE:A5:66:39:4A:43:83:47:66:A5:7F:DA:FD:EC:C3
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:dd:15:8e:d7:b6:f3:06:51:3a:b7:f0:a0:83:7f:3b:f1:7d:
35:0a:b3:2b:52:b2:fc:b5:86:40:47:c1:d6:eb:cb:c3:9c:6f:
b5:e9:a4:5d:3b:85:3b:ae:a6:ae:31:45:c0:70:18:a4:17:7f:
f8:88:fa:1d:63:9a:4a:71:8d:9d:b4:22:e8:60:06:f5:cf:6b:
bd:e1:14:18:85:26:6d:a1:12:76:90:85:78:b5:87:db:af:0f:
7c:65:e6:d7:84:e3:ed:32:eb:16:0e:80:13:97:d9:6e:33:5f:
f4:20:9f:1d:e9:a7:a2:48:2e:59:9a:4e:4e:3c:6c:ee:d5:d7:
e9:77:f3:22:35:eb:a3:94:9e:2a:b1:9e:ca:8c:05:c4:65:d8:
5a:f5:3b:f6:dd:0a:d7:59:1a:07:4a:75:0b:fb:e8:af:15:90:
2c:36:5a:6b:40:08:45:fb:99:4e:d3:ef:9f:53:e6:06:a7:01:
9f:b5:f4:88:57:14:61:c8:24:76:98:97:3d:3a:20:d8:f2:7c:
a2:64:0c:12:d4:10:3f:39:c0:75:49:dd:31:c9:4a:7d:a8:40:
69:9f:cc:fc:c9:b7:d3:87:4d:9d:59:fa:d7:fa:e6:55:f6:8f:
fe:96:de:9b:3d:f0:2a:fb:96:3c:81:76:7e:2c:9a:f6:4e:41:
f9:4e:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:54 2025 by rpki-client