Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: +0HaAKBs6PdPik3pRzKRznJ4Om5Ih8eNkTuG+4wUeLE=
Subject key identifier: EF:0C:F2:DC:32:C0:BE:0C:4B:DF:75:9D:81:DC:A7:5D:34:B5:5F:63
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 0197B5C4F6D545B6986C6ED1BD590A585421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 09DC
Signing time: Sat 28 Jun 2025 09:01:13 +0000
Manifest this update: Sat 28 Jun 2025 09:01:13 +0000
Manifest next update: Sun 29 Jun 2025 09:01:13 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: EzuNUuQCWT/T/7oiMHiFU5Mc1ATSZfedZL0AoQuvEZw=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f6:d5:45:b6:98:6c:6e:d1:bd:59:0a:58:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Jun 28 09:01:13 2025 GMT
Not After : Jun 29 09:01:13 2025 GMT
Subject: CN=ef0cf2dc32c0be0c4bdf759d81dca75d34b55f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:d0:2e:cf:51:26:f7:a5:94:d6:4e:13:e0:
d8:07:6e:4f:08:4c:de:0e:ec:8a:21:bf:87:b3:cd:
6a:50:37:95:8e:c7:21:ef:7f:e4:02:e4:4d:bd:ba:
56:72:41:bd:d6:0c:c4:d0:c8:9e:b8:ed:53:c3:20:
34:49:68:e8:22:ff:13:b1:aa:13:50:7e:b5:f1:74:
83:c1:07:c3:42:e1:83:93:b1:49:d1:ef:9e:ea:f1:
0e:31:3d:a7:3f:0a:b5:64:2e:01:b9:2b:d5:45:69:
91:11:41:a9:10:2f:ee:50:63:64:89:26:d3:9e:c6:
4a:82:af:eb:ef:ab:46:a0:24:d7:39:07:77:ad:80:
55:e8:ed:1b:f9:6e:a7:0e:7f:85:be:82:e8:e6:0a:
9d:69:d1:a9:58:21:78:2f:6d:b5:64:41:6f:32:d0:
d4:59:6f:1e:24:30:cb:8f:b5:b0:b8:17:a4:c2:d5:
8a:4a:8f:64:73:d0:71:a7:eb:60:2d:ef:e2:38:e2:
83:1f:b0:48:fb:e3:13:f0:51:ac:8e:17:84:f0:d2:
09:2f:aa:78:05:92:60:a2:2b:36:70:d6:2d:59:1d:
bc:c6:ba:02:73:2d:6a:57:0e:2b:d5:fc:44:34:87:
89:d8:25:dd:73:a7:7a:8f:32:74:1b:57:ce:ca:52:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0C:F2:DC:32:C0:BE:0C:4B:DF:75:9D:81:DC:A7:5D:34:B5:5F:63
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a8:58:a2:9c:74:f7:ac:28:99:66:17:d3:f6:e2:e4:9f:6d:
20:47:74:37:45:f8:ba:da:64:b9:4a:7c:13:be:27:ed:54:12:
fd:18:91:3d:f2:e3:af:d1:1f:24:32:a9:af:e9:75:95:84:2b:
f4:bc:25:72:4b:03:e4:bb:2e:65:69:97:2f:eb:a2:0e:6a:2f:
09:42:77:7c:75:24:a7:88:a0:1b:3e:83:cc:01:68:8a:b2:32:
39:fd:d9:a9:81:0a:7a:86:d6:34:3e:c5:6a:3c:5c:99:04:68:
f2:0e:6d:14:1f:03:b6:46:d5:27:3d:a4:e5:15:d4:1a:73:a5:
24:c6:b3:01:1b:a6:1c:9d:6f:58:c6:52:aa:00:39:38:76:3c:
64:6c:7f:7a:a9:98:2f:01:b6:f4:56:10:11:c3:55:a5:1d:e8:
11:f8:98:29:15:a8:c1:fe:d7:3d:d9:a3:68:3b:1e:76:15:07:
1e:51:fa:63:4b:70:23:de:85:a3:42:d5:15:8c:e9:a3:75:74:
b4:2c:f1:48:be:04:2d:76:cc:86:ff:e0:e1:90:c8:b9:ad:75:
df:38:a4:67:6e:fd:d2:00:13:db:60:a4:4d:fe:3c:22:5b:0d:
e5:cb:01:10:b0:18:f9:26:10:46:eb:c4:23:13:14:cc:e3:10:
5d:3e:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:56:00 2025 by rpki-client