Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json)
Hash identifier: ys9uSU2UpKYwLIvGx2RklgXs0NHK2dtHrg6/Ps+JpsE=
Subject key identifier: 26:BD:AC:04:15:FB:98:85:23:9A:E1:06:CD:55:51:49:B2:32:55:79
Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Certificate serial: 0197B6A0E458DA87D394ADB37E0C463244C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
Manifest number: 1108
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: RaM_OWQwVXsafD9lAhumGxuaVJ0.roa (hash: 9wqEU77JRh8FONfv1sMAYtuNvig1s1ZaVt3dre8RnDg=)
2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: PljTBsI/946PFtrfb6+ACAAkXKQLGERvXo2x2W3KiJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e4:58:da:87:d3:94:ad:b3:7e:0c:46:32:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=26bdac0415fb9885239ae106cd555149b2325579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:78:b6:41:f4:78:5c:de:3c:74:c2:5d:2f:
9f:03:33:14:c6:9d:5b:6c:0e:6e:73:20:a7:9d:82:
cb:1f:f6:a9:34:0b:8f:f3:fa:74:73:51:2f:89:ee:
79:93:2b:80:ed:3b:43:76:ce:e1:3e:16:21:f1:55:
d4:fe:cb:07:52:d5:c0:56:21:f3:d3:3f:00:ef:bf:
49:7e:c6:ba:c6:bd:7e:eb:8c:47:72:1b:a4:07:8c:
9a:fa:a0:2c:9a:7b:8b:19:6e:ff:69:64:36:97:3f:
6e:27:6e:65:d7:97:4d:ed:1e:96:ec:9f:8e:b8:55:
b3:5c:8f:bc:29:31:d9:ac:d3:4e:de:52:44:43:1e:
35:6a:fc:36:63:7f:98:bf:f9:bc:1d:5b:0a:80:26:
be:c6:a2:ae:95:b4:cf:f0:18:c2:96:e3:be:01:b5:
5a:1d:3d:48:fb:66:e1:43:7f:ab:29:da:12:cc:2f:
f2:4f:f3:f5:ca:9a:e0:23:3d:49:46:71:21:c7:fa:
c5:da:60:a3:fb:a6:f6:04:37:f6:e9:f2:a6:70:30:
3d:5d:e3:8d:ec:c6:1b:95:b7:a3:ca:d7:fd:c1:11:
64:f4:ed:fb:11:b1:e3:e1:5e:1e:70:eb:98:ac:9c:
ec:1b:e5:00:92:b1:0e:9c:99:b2:90:bf:dc:ac:cd:
8a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BD:AC:04:15:FB:98:85:23:9A:E1:06:CD:55:51:49:B2:32:55:79
X509v3 Authority Key Identifier:
keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0f:a7:46:cd:bd:47:d0:12:46:40:56:75:b0:b0:27:d4:ad:
bb:42:be:d1:82:96:82:ef:48:5c:74:40:ee:86:bb:0b:36:f3:
4e:5c:d4:fb:ff:79:02:44:04:8e:0a:92:32:14:9d:d8:f9:cb:
49:01:32:97:6f:87:e7:66:19:5b:62:ca:e3:9d:be:7d:35:7c:
1c:4a:f5:01:a6:0b:78:1c:27:22:ea:69:3c:65:0a:37:52:2c:
47:94:1a:57:20:04:ac:ab:af:ce:8b:f8:eb:92:66:d5:ff:3a:
f8:04:e0:9e:f9:0e:46:f3:b8:1c:45:de:26:f7:6c:61:74:3b:
25:7d:e8:19:65:a5:f3:be:1f:64:33:13:88:fd:68:a8:dd:fb:
f0:85:85:d6:7c:29:38:d1:2a:67:38:0a:56:25:e2:0f:0e:7e:
ef:5f:02:32:61:0f:6e:67:79:4e:4b:e5:1c:25:90:ac:2c:07:
8a:1c:0a:97:dc:02:00:ca:a6:c3:a7:8f:f4:a8:83:f5:56:5d:
5a:6c:08:4d:f4:b6:21:f2:26:64:f3:a5:66:c5:c8:e4:82:12:
92:56:45:f1:63:02:f9:63:42:64:a1:db:28:c8:87:2c:51:7d:
7e:1a:4d:3d:ba:5b:b8:f5:98:6d:b9:fc:d0:72:0c:7a:9c:ca:
58:a2:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:24 2025 by rpki-client