Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: y0/mToOTM5bAnLBzouvyZeohiMbjw7tZ0lF/gy/uwmU=
Subject key identifier: 6D:DD:C0:FD:5F:19:23:3B:4D:A0:33:66:98:7F:5D:E4:52:5E:F6:BD
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 0197B7B31A0126DA371C45445233B26E85D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 09D0
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: J3YQdcbfpZzTMf3Pqj177V1ZW1txQ/1GVsigkvSpTzs=)
2: rs9tHLr8zyXOfjLVtvASmrQRyII.roa (hash: TPmV5eCt75VU6HkVEIxwqSqz2UP53y06YcldQPwtkco=)
3: yrE5IOAO5wezku-a_RJR7TB3CkA.roa (hash: 7HAAXilZN5MLFA2Yt1+6x9clHUzDWGtePYkFTFw0/Hk=)
4: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (hash: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1a:01:26:da:37:1c:45:44:52:33:b2:6e:85:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=6dddc0fd5f19233b4da03366987f5de4525ef6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:6d:44:b1:1d:3a:8f:5a:0c:09:24:49:b4:
16:42:a8:48:d3:3c:22:1c:5d:b1:13:15:86:f1:50:
c9:7a:89:78:00:35:98:81:35:cc:f2:44:86:36:73:
86:e4:3a:9b:43:05:0f:18:3c:93:aa:f4:db:3c:96:
97:25:be:69:21:c7:f3:77:f7:e4:bd:17:ba:f7:e8:
06:78:a7:85:53:69:01:a1:7a:39:5e:62:e2:fb:9c:
78:18:96:0c:45:e3:cb:29:c1:a9:97:ec:40:95:4a:
2f:8a:b8:0a:ca:82:81:29:14:57:42:13:97:a4:11:
51:f7:ea:1a:48:bf:7c:21:11:76:d4:cd:d3:6f:e5:
66:b2:01:bb:95:29:b6:ec:27:11:03:16:4f:97:bf:
20:2b:53:71:e3:b3:5f:17:94:ce:c4:67:84:95:cc:
fd:a8:0f:60:d0:4e:8c:ba:ee:40:76:10:9a:8a:2e:
a1:4f:71:36:7c:8a:45:ad:59:ce:ef:05:00:cd:04:
5b:66:2c:07:ec:7b:70:31:56:88:7c:34:ae:49:6c:
a8:cf:02:6b:32:3e:9c:60:32:49:b9:cd:2e:20:9e:
b4:7f:8c:99:03:7c:b2:bb:59:89:8f:6f:74:46:2b:
33:c0:a5:1a:7d:34:ce:57:97:67:c9:64:71:43:f3:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:C0:FD:5F:19:23:3B:4D:A0:33:66:98:7F:5D:E4:52:5E:F6:BD
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d2:69:2b:30:df:de:7e:cf:e6:8e:53:bf:99:2d:da:22:61:
c7:2b:d5:22:c1:73:0a:dc:49:84:41:7e:f3:bc:3e:1b:4c:97:
ed:32:a0:3a:01:f3:00:4e:0f:a4:24:26:26:5e:a6:58:2c:f2:
f2:10:82:16:0f:af:8d:41:8a:63:5d:08:05:cf:24:0d:0f:91:
09:f9:25:94:51:f3:de:fa:03:c1:03:38:6a:d8:7d:4d:36:9e:
2b:0e:40:3b:f7:4e:c6:d4:f2:c8:b7:ed:8a:29:25:b0:e4:06:
7a:d1:44:6f:48:34:a2:ee:89:8e:c6:4f:67:ba:d9:6e:f0:66:
e5:af:a4:ca:14:7b:a9:3b:4a:b8:8d:b0:8f:09:6e:cd:0e:ed:
be:92:9c:b5:b8:05:cb:45:68:53:ae:38:81:8a:e8:53:1f:de:
98:22:81:24:3d:3a:94:ab:c9:e3:51:97:e2:29:ea:75:13:03:
d3:5e:f6:9d:6c:eb:c3:2a:82:56:07:c0:c1:23:5b:17:ac:52:
04:ab:de:cd:22:4b:50:e0:9d:e9:46:42:62:8e:8c:57:30:80:
ea:82:8e:ea:40:fd:7b:f5:7b:52:b9:b4:12:fd:e6:07:85:8b:
00:17:c7:71:80:ad:ce:9f:6d:ed:ad:d2:20:a9:20:80:61:f4:
59:5a:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:37 2025 by rpki-client