Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: AqYQoccAqSCy4AGdfSzVubddUde8tpGUWWJApj7XgZ8=
Subject key identifier: 7B:1B:AF:27:5A:BE:5C:A4:4E:1E:D0:A6:BE:ED:FC:A7:1A:CB:2A:E9
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 0197B70E5726AC31982FB90A036A8C040B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 0E1D
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: DRCT6JOEWsSDdRCnGzrky/T41t4Kfr7goZVXkozUars=)
2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:57:26:ac:31:98:2f:b9:0a:03:6a:8c:04:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=7b1baf275abe5ca44e1ed0a6beedfca71acb2ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:d2:09:8d:0d:e7:84:06:b7:14:8e:d7:1c:
8d:27:cb:6a:c3:25:41:2e:c4:cd:ed:0e:7d:20:e0:
ba:40:9e:82:3e:c8:8d:fc:c3:8c:72:59:ac:5c:4d:
eb:1c:dd:c1:8b:7f:36:a1:8e:72:aa:5e:61:ac:04:
0e:cf:17:c0:c3:c5:1d:17:e6:08:a1:1a:71:db:09:
ba:de:fc:ca:84:e8:5e:84:68:4a:9d:e8:95:8e:37:
19:7c:14:d2:a2:e3:62:fd:03:0f:d8:fd:db:f5:47:
f9:1b:cc:72:b4:3e:90:33:d3:40:1d:f5:b1:8a:92:
c1:40:0f:11:c0:bd:ac:a9:32:27:b0:2e:02:fc:10:
88:7a:23:07:5b:54:c9:57:c5:cb:09:58:72:d9:43:
55:af:0e:fe:4b:b0:a7:ad:1f:5a:d1:72:32:3e:c1:
8d:6a:0d:98:2e:5a:5b:5a:c1:80:34:7e:13:d9:87:
1f:ac:ef:ec:f8:55:51:72:ff:c2:94:f1:c0:de:b1:
a1:fb:7c:21:be:42:d5:96:6b:7e:a8:33:09:ac:46:
9d:7c:8a:ad:20:42:a8:b7:5e:b6:bd:dc:7b:e7:6f:
0e:ec:f4:e8:df:d0:b0:20:d1:68:30:c7:24:3d:de:
25:cd:a6:21:ab:27:fa:4e:34:69:5e:53:d5:d9:95:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1B:AF:27:5A:BE:5C:A4:4E:1E:D0:A6:BE:ED:FC:A7:1A:CB:2A:E9
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:94:77:3e:59:b9:31:54:c7:c3:9b:00:8d:fd:ea:94:ef:9d:
a9:b5:2c:7b:e3:86:5c:43:fa:8c:40:40:18:3d:15:45:01:d8:
f5:96:bc:df:5c:12:c2:17:4c:54:f5:4e:3f:0b:81:8a:af:fa:
e7:d4:6f:21:9f:29:62:d7:30:b6:f6:c9:a4:f1:c6:a2:34:42:
96:d0:80:fa:59:70:4c:28:00:ae:87:56:ac:d6:d0:6b:1b:11:
b7:fa:8d:f7:86:dd:49:86:38:e9:11:d1:21:32:41:ec:92:b9:
f6:09:d5:46:5f:2d:77:6e:f0:af:8e:fe:35:90:85:b9:59:cd:
6a:e4:ed:9a:af:b4:b3:39:35:80:df:6d:b7:eb:a2:ca:33:80:
55:c2:fd:1e:7a:ff:f5:8a:b1:59:87:e2:83:b7:b1:1d:53:eb:
f8:e4:26:f7:00:13:d2:60:19:1e:b4:e1:e7:89:6a:74:55:4c:
83:55:43:31:2c:19:cd:ba:aa:1c:2c:aa:95:d6:76:82:bc:81:
f0:c3:a5:0e:17:1d:3c:33:d8:ce:90:ee:17:2f:95:25:cb:43:
26:3b:90:f9:e6:65:d3:16:8d:58:11:73:cf:43:a1:c6:9a:ea:
da:f3:14:08:02:1b:6a:a0:0f:8c:0a:b3:95:28:3a:49:18:0a:
c6:09:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:25 2025 by rpki-client