Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
File: p-cKBbmGOc165X_rGkCzZ-ycQ60.mft (raw, json)
Hash identifier: F3OD9Vz/euvzSkf7gqecCH3+KfhJYZiakO5OEIanbWo=
Subject key identifier: D9:8C:D3:25:DE:C8:B3:65:82:23:64:A8:CC:7E:75:F1:85:EC:1A:3D
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 0197B70E739CA031E02EC88842098F841CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
Manifest number: 09F9
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (hash: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=)
2: p-cKBbmGOc165X_rGkCzZ-ycQ60.crl (hash: msir9vvYVV+7igvtS5Up6yLoy9Ta4PGRwGNindjulpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:73:9c:a0:31:e0:2e:c8:88:42:09:8f:84:1c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=d98cd325dec8b365822364a8cc7e75f185ec1a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:e1:a7:f4:e9:bc:2f:91:be:5d:96:3c:5e:
fb:36:cf:c0:f5:4a:a3:dd:57:6c:7c:96:e9:22:6c:
38:6b:ce:89:b3:e6:1a:05:d4:af:23:ea:6e:93:39:
bc:3d:d6:40:d9:0b:1b:a9:e5:55:3e:46:76:eb:4f:
2c:f7:4f:45:e8:26:28:9a:90:ac:a2:6c:61:a2:be:
82:16:db:be:ff:9c:26:5c:d0:32:7f:23:40:2b:fe:
6b:44:c8:c6:99:b8:4c:54:61:94:e2:ca:04:07:a3:
60:96:72:60:e0:55:c2:88:87:16:f2:63:70:34:b2:
65:35:c5:cb:db:48:17:29:b1:14:5e:4c:7f:a6:12:
4d:b8:05:1c:c7:7b:ce:67:7f:50:75:fc:84:f5:c5:
14:cd:64:f9:4a:5f:4e:ad:ec:bd:12:3e:af:1f:8e:
22:a2:5d:ae:c2:66:45:bc:44:b7:2b:50:15:89:23:
2c:ff:12:ba:be:4a:31:cf:df:d3:aa:e9:0c:61:72:
b5:bf:01:2a:b2:d8:6b:fb:34:7a:82:a9:26:65:3d:
7d:bb:a7:02:8d:97:c8:c4:66:f1:87:8c:9b:13:22:
85:73:aa:28:31:fe:e4:fd:14:7f:01:3d:b0:51:9b:
ba:bb:74:9e:84:30:25:87:cb:86:6e:a3:c2:17:e4:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8C:D3:25:DE:C8:B3:65:82:23:64:A8:CC:7E:75:F1:85:EC:1A:3D
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:68:aa:dc:32:c9:35:46:27:11:3a:ed:d6:ab:62:87:32:78:
d5:58:5c:9c:ef:d7:8b:78:3d:ad:c6:b5:94:a5:e9:19:66:05:
6b:f1:58:4e:cf:e9:62:57:ed:a2:bd:ce:b6:29:ec:75:d3:74:
9c:77:f3:ff:e1:c2:57:bc:35:dd:1f:a0:1f:be:5d:dc:58:f8:
87:59:d1:cd:cb:93:e8:ba:f6:01:df:56:23:fd:44:69:de:9c:
d8:2e:ba:f7:99:0f:9a:1c:05:2b:e2:68:c7:00:df:b3:57:dd:
26:9f:86:f1:5e:6f:f8:ba:14:7d:67:66:37:97:5c:eb:55:52:
70:fc:5a:4a:2f:fd:14:4b:93:ab:9a:f3:2d:eb:1b:5f:9c:e5:
e1:dd:18:2b:7a:79:7d:26:df:16:72:b9:ed:0f:df:ce:17:7e:
66:c4:96:62:61:ff:97:22:9f:f7:1c:07:2b:0b:64:7a:c7:bc:
7f:5c:4d:9e:1b:e2:12:c7:60:c1:d5:75:19:ad:b5:9e:91:0e:
4e:99:16:4e:51:d7:fd:76:30:43:7c:71:b0:bd:8e:7c:4d:53:
0e:21:af:a9:66:46:7d:71:3e:e7:2b:91:9a:bf:75:32:29:5c:
af:7f:86:e9:b7:4a:73:cd:36:cf:21:04:ad:31:3e:4f:73:a8:
10:f6:35:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:56 2025 by rpki-client