Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier: c0xqKO2fRGczKmb5JJ7IVYqymfnM1MqH6evsT+SoeXg=
Subject key identifier: 69:AF:66:CA:31:6B:A8:85:94:C2:7C:9B:85:FA:31:51:2A:F8:54:E2
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial: 0197B70EA12BF412982C8C43456C35321F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number: 10EF
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (hash: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=)
2: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: 5nmNH1zknzitQXwpM1fQygScNT3y2+9XYk1HLH1hXOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a1:2b:f4:12:98:2c:8c:43:45:6c:35:32:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=69af66ca316ba88594c27c9b85fa31512af854e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:e8:38:06:3f:fe:0e:37:66:e4:82:93:54:
59:03:85:a2:8c:10:d7:b5:e6:88:7c:58:55:d7:79:
f8:99:1f:76:8c:9e:56:2e:c0:ba:cf:15:76:d5:5a:
c6:f8:4a:d7:51:09:30:82:81:85:24:24:45:8b:a6:
34:8d:e8:e6:0e:10:8d:78:e7:11:b0:a1:24:9f:61:
f0:1a:5e:b2:c4:61:09:99:9e:9f:bf:cd:d8:8b:1b:
b3:70:b1:ea:be:0a:ec:61:ca:0f:8e:b9:e9:21:ba:
72:22:cb:d2:e3:ec:79:9f:59:49:b1:57:5c:26:06:
98:9a:93:d2:86:86:8d:4b:e4:e9:65:5c:74:f2:84:
21:28:2c:1a:84:5c:04:9e:b8:de:14:02:4d:92:e6:
9a:6f:44:06:52:71:d6:ab:a6:7a:0e:b3:7f:1b:dd:
f0:c0:30:94:bd:38:3a:32:cd:65:fe:69:2f:20:79:
05:0f:0b:8a:72:0f:9d:f4:e5:c7:f3:ca:f5:f0:e7:
41:94:dd:1f:d9:80:f0:60:72:07:a6:b5:4a:38:4f:
8a:99:10:6b:6c:a3:2a:2a:d5:f5:48:ea:c9:55:fa:
50:c8:da:99:93:f2:49:43:25:0d:65:2f:bd:f4:71:
f1:d0:b4:ae:f3:80:c7:64:c8:10:8d:c7:7d:a7:6d:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:66:CA:31:6B:A8:85:94:C2:7C:9B:85:FA:31:51:2A:F8:54:E2
X509v3 Authority Key Identifier:
keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c7:f8:b3:50:f4:44:33:39:3f:29:6d:ad:97:4c:bd:da:c8:
19:62:c0:e2:ba:43:2d:f7:3e:12:c4:8d:9e:41:5a:7a:1c:b8:
90:88:d9:4e:96:a2:93:44:b0:35:60:6d:3f:c9:15:0b:90:70:
91:e5:56:0e:d4:c8:01:4b:3e:f6:d1:c1:e8:97:27:c2:80:f0:
4a:e6:55:40:c8:ad:05:0d:ad:81:1c:27:89:05:92:c1:ca:12:
e4:48:d8:6a:ac:88:4a:57:c5:f5:9e:d1:42:fd:0c:36:05:99:
a8:d1:2d:e3:53:e2:6f:70:90:ea:6e:1b:95:bb:8e:94:99:fb:
ac:8b:99:c5:c5:74:14:f2:85:2e:38:32:1a:ee:ed:c3:ac:49:
59:4e:29:cf:15:e6:ca:ae:cc:71:7a:1b:58:db:98:0b:19:f3:
aa:5b:d4:3f:2c:4f:50:24:dc:23:35:9c:ee:b2:d2:cd:d6:63:
7d:2b:40:1d:18:45:ea:69:83:d3:03:d5:60:61:88:8b:ff:3d:
ca:dd:05:47:35:e5:c2:60:85:3a:62:83:db:14:37:02:e6:c5:
cd:79:7c:ff:21:c4:df:e6:50:a6:e6:9c:a0:7a:6f:4d:e6:da:
90:e2:9d:7c:37:43:7c:36:3b:ca:45:36:96:ff:04:ea:96:b3:
cc:15:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:15 2025 by rpki-client