Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File: Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier: 9/ZBZS+wAt2e/BAKWhh5l+JJ1NV1VOuk5lv5B1mMrX8=
Subject key identifier: 08:AC:23:BD:2E:20:EF:15:BF:F3:6E:53:B1:D0:96:63:54:CB:87:94
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial: 0197B77C0D758935E2DCD761C8BCEB80D5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number: 0A16
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: YuvM2qkwjpb26JPVfeXAb1CxLiIryVmBYvU3z8eBgrI=)
2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0d:75:89:35:e2:dc:d7:61:c8:bc:eb:80:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=08ac23bd2e20ef15bff36e53b1d0966354cb8794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:bb:58:51:54:84:0e:76:eb:b9:bd:b5:0f:
68:7a:58:ee:bc:5c:4a:a5:b6:32:78:68:bd:a7:a3:
f5:9a:d6:78:80:57:47:d6:b1:70:de:c8:c6:79:f7:
c1:27:4d:3b:ea:0b:b4:2d:a0:5a:14:92:43:92:0e:
f5:c7:a1:14:4a:06:29:2e:6c:1d:b6:db:52:11:07:
2d:0b:83:e5:28:0c:22:18:49:f5:29:7c:b9:36:c4:
04:c6:e4:c4:62:43:c5:6e:3f:ad:f7:0b:2c:41:72:
b5:88:36:84:ce:3e:47:e2:70:75:50:2d:79:44:e4:
fd:00:e8:a7:50:dc:18:4d:5f:47:39:55:14:7a:8a:
99:06:fa:df:04:fd:23:ab:3f:b5:d0:05:97:04:c1:
e0:c6:4c:f4:10:32:1a:04:0c:a6:8b:ec:20:80:32:
82:9f:b1:39:ff:d0:18:dc:32:3d:a7:de:cc:e6:38:
e4:65:93:f4:b0:c1:3f:37:49:92:71:42:24:cd:0c:
e1:7e:1e:1f:19:70:3b:10:4a:ea:07:5f:cf:53:be:
e9:d9:10:66:4b:3b:7a:23:42:dd:ba:d4:77:d7:ba:
c8:68:98:fb:23:69:2b:48:ba:43:59:d0:1d:e9:ef:
92:eb:96:99:10:94:db:2e:3f:df:ca:0f:4d:fa:59:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AC:23:BD:2E:20:EF:15:BF:F3:6E:53:B1:D0:96:63:54:CB:87:94
X509v3 Authority Key Identifier:
keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d3:a7:01:33:5e:cd:b9:e5:2e:55:a0:ce:77:ae:b9:70:e9:
e8:03:de:4c:44:de:f9:62:ed:b9:de:c8:c8:01:08:d1:db:ec:
9e:28:d7:78:8e:d9:d2:32:3f:d7:f4:4c:9a:58:12:7e:f0:0b:
51:12:15:bd:08:69:9b:1d:22:d3:92:48:70:94:26:3d:6a:15:
a6:24:54:21:f0:c2:32:16:00:54:be:29:db:9a:45:0a:0f:f7:
e7:f7:b8:99:74:6b:45:7f:db:e7:03:4a:5c:21:85:0f:a2:0e:
7f:5d:b2:49:32:58:e8:f4:d8:86:d9:bc:08:11:dd:f1:4b:a7:
45:3e:45:f9:09:ec:62:0b:c6:48:ef:8e:94:d9:df:78:0b:53:
d5:7e:8d:91:b1:b6:98:44:c8:53:c2:83:f0:b8:ca:d3:32:16:
45:dc:71:b4:8a:3d:d1:3e:4b:61:4c:91:28:50:11:f0:be:87:
3e:d5:16:5e:4b:1f:95:ff:30:90:9c:a6:6d:7f:7a:d5:1c:4a:
fa:07:ac:5a:7d:43:69:72:e0:a4:56:57:d4:d8:15:69:86:ef:
3d:66:d3:bd:36:a0:7b:c9:18:63:92:d8:8a:f7:b0:87:15:c1:
4f:08:2a:5e:c6:85:24:d3:2d:7d:35:52:b2:3c:32:53:e4:c3:
6e:d6:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:10 2025 by rpki-client