Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: Jf5vcGTFSEpI2KPI2AOFzMKcPyeC398sxShR5MQHZbo=
Subject key identifier: F0:E5:F7:5D:7E:4A:11:4B:CF:7C:46:85:F7:72:9C:C2:B5:F7:E3:B2
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 0197B88ECDF9C035C7986A99612A4540B3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 22:00:55 +0000
Manifest this update: Sat 28 Jun 2025 22:00:55 +0000
Manifest next update: Sun 29 Jun 2025 22:00:55 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: Gsn3U2aZJjwnz2/ZQvYLwiK7cgcFwWrnpNLzGYyc+7o=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:cd:f9:c0:35:c7:98:6a:99:61:2a:45:40:b3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jun 28 22:00:55 2025 GMT
Not After : Jun 29 22:00:55 2025 GMT
Subject: CN=f0e5f75d7e4a114bcf7c4685f7729cc2b5f7e3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:e2:23:8d:38:dd:cb:a2:cc:72:a3:21:d6:
0a:c3:0b:08:82:33:5e:df:dd:b8:b6:ba:86:9b:21:
c6:88:7d:c9:aa:d7:3e:6d:77:a2:5e:fd:59:b5:3e:
9e:d0:35:a3:df:e8:b4:e4:fc:96:4e:be:26:8c:eb:
47:fc:35:65:21:a8:5b:f1:ee:46:3d:3c:00:41:13:
ff:be:b6:97:60:a6:58:e4:94:4b:9b:86:d4:5a:d9:
46:d2:f1:3d:49:d1:27:ad:5b:9f:49:d8:be:81:39:
2d:c1:b3:a2:d2:c2:e4:d4:0b:4e:c4:ab:4d:55:78:
c7:9b:cf:a7:0e:5a:62:53:03:9c:43:9a:be:ed:2d:
d6:23:cb:f8:b7:4a:a4:75:7e:c3:47:4e:b1:06:67:
27:80:0a:39:ad:ae:7c:9c:36:2c:83:c5:ba:4a:d2:
49:60:0b:29:96:b7:d4:a9:70:ba:af:fb:b3:f3:92:
9b:56:9e:a9:40:b7:7f:2f:68:8b:18:9e:b4:7e:03:
75:e9:5c:8b:13:5a:e3:fa:a2:53:5c:af:9f:b3:9a:
53:07:b1:14:12:55:11:5e:43:24:71:8a:d9:cf:e2:
f1:0d:21:9b:b0:e7:3a:6d:0d:6a:74:c9:b3:6e:ae:
15:34:cd:bf:1b:f5:27:53:63:b3:0a:f1:b1:8c:d9:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E5:F7:5D:7E:4A:11:4B:CF:7C:46:85:F7:72:9C:C2:B5:F7:E3:B2
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:16:22:17:1c:9d:b8:82:c6:38:b5:9e:24:74:43:82:8c:
5e:f7:96:7d:c4:23:5d:27:06:76:bf:df:a8:9e:06:bc:8a:16:
dd:fb:13:f6:9c:bd:41:f4:8f:6b:a9:e0:84:94:84:33:59:51:
af:e2:8d:b0:00:63:5a:91:77:e4:85:98:2d:32:6a:8a:6f:f7:
74:06:f3:81:38:6b:3d:b2:01:80:d6:d6:6a:be:1b:67:4d:80:
17:2f:f6:9a:f8:d0:b1:2f:1a:f7:69:04:7b:7e:d7:ba:58:c2:
db:58:26:a6:59:28:ba:ce:cb:60:90:eb:3a:a0:93:53:dd:52:
dd:47:d5:02:82:a0:ea:7e:a0:42:2d:4b:56:9c:11:00:93:af:
f9:6f:7c:0d:40:71:83:ad:81:69:4a:82:0b:db:3f:6a:e8:0d:
92:1f:5e:ca:e9:3c:d7:dd:40:28:5f:0a:07:09:75:f3:f0:b3:
48:73:2c:23:6a:b5:99:a0:7f:99:11:c8:d4:fb:d5:cb:b8:6f:
4a:3d:0f:00:f6:3f:c1:d6:e1:b5:94:c7:f0:32:22:3a:a1:0c:
c9:48:3c:f6:ea:f5:63:f6:47:9e:da:bf:1c:e3:ed:56:25:ba:
48:49:76:52:86:5d:cc:f4:39:ec:2c:92:4c:08:0f:11:c7:2c:
73:59:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:21 2025 by rpki-client