Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier: UbSMSDeani1ykMlTNVfg37k66QfCP7g051Bb9rk/qL4=
Subject key identifier: DF:F4:8D:66:D3:1D:D6:3E:3A:5A:1E:2C:03:C0:23:B9:61:B9:C3:D3
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 0197B70F35C7B64077045937573CE7B17DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number: 0D57
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: Dv3hIwPJ/nxzh9OmYCXavaV0Frq2QvWo0ULk8uMxPLg=)
2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:35:c7:b6:40:77:04:59:37:57:3c:e7:b1:7d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=dff48d66d31dd63e3a5a1e2c03c023b961b9c3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:93:2d:55:9e:31:c1:d3:24:4c:bc:35:c9:
de:35:9c:83:9e:84:2e:03:5f:b5:49:1a:1a:07:f8:
6d:c6:9b:35:f8:f5:60:37:e7:82:e3:9a:9b:e4:c8:
8d:44:8f:28:6e:40:5d:50:7d:d5:b1:4e:a0:da:35:
bd:de:b2:88:f4:f8:1f:ac:90:41:06:8c:31:c3:9c:
cb:c6:61:16:74:32:05:39:e1:fa:3e:bc:dc:7a:28:
ba:6e:e5:bc:a2:80:9e:83:2b:55:03:c6:bd:c6:06:
0e:e7:ef:47:bb:db:12:49:45:7f:37:b5:6b:c3:0b:
87:a3:82:9c:df:d1:5f:8a:85:b7:73:05:39:4e:dd:
21:df:73:d6:98:cd:9e:27:20:15:e7:42:4b:a4:7b:
39:2e:41:00:bb:0a:de:50:38:c8:6c:83:26:63:0a:
e1:24:b6:fa:bf:9a:2f:96:60:8e:e1:53:2a:c9:e1:
fb:07:59:db:dd:70:49:11:ee:7a:ff:9c:f9:10:32:
f6:1d:e3:2a:17:8c:91:f5:b4:67:67:c5:63:8f:77:
1b:6b:d5:d9:71:71:d2:07:7c:9d:dc:a6:81:da:2c:
76:c7:58:ba:3e:11:9f:c9:f7:cf:37:02:f6:ba:18:
ff:b0:e1:8f:37:e5:8a:ae:99:97:3d:a2:b6:80:e4:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:8D:66:D3:1D:D6:3E:3A:5A:1E:2C:03:C0:23:B9:61:B9:C3:D3
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:62:de:28:44:21:ac:4b:e4:47:5e:e4:a1:3e:2e:8e:f8:88:
8b:b7:df:ec:cb:53:9b:41:3b:34:44:04:3c:01:4a:ff:a4:dc:
72:95:3d:e8:9b:cc:64:35:ad:45:b3:09:43:dc:e6:1f:4d:8e:
1e:05:9b:a4:34:d2:dd:b8:a6:cb:54:56:5e:86:cb:40:da:81:
a0:0b:bb:2d:cf:5a:ab:18:21:c7:38:fb:24:9e:95:85:7c:ed:
59:16:19:71:41:f9:a3:a0:a1:dc:ce:73:b7:d7:12:6c:91:b1:
d3:56:d8:8b:33:51:d4:97:cd:cf:9d:94:bc:cb:45:4c:46:9a:
f9:ab:7c:c5:99:57:2d:da:fa:1c:a4:02:3d:a8:ed:3f:d6:48:
e2:7b:78:4e:4d:62:b6:a7:ce:1a:9a:3d:bc:88:75:9d:9b:fa:
f4:8d:fd:29:e4:86:49:ac:48:76:83:93:6a:2b:c7:8c:16:af:
80:5e:e7:fe:00:cf:eb:11:74:96:1e:a2:17:86:90:6d:bd:e4:
48:75:d4:22:1b:5b:a9:84:fb:2f:e7:20:ee:bf:1c:07:44:8b:
fa:ba:35:0b:c7:13:8d:7e:96:56:e7:db:d2:bf:87:bc:81:36:
10:0f:fa:22:6b:d9:23:df:54:25:db:13:68:bd:82:f9:46:89:
cd:4b:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:26 2025 by rpki-client