Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: YRqyXhEEZTvFZYaDAD/rm9UDjkCm64uL9schLGFy8HE=
Subject key identifier: 3B:3C:16:A2:66:4E:70:DD:73:0C:E6:F7:EB:D7:B4:F3:E0:C1:2E:8A
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 0197B88EF6F4D01F4A92DF9A1189F6AB920D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 114C
Signing time: Sat 28 Jun 2025 22:01:06 +0000
Manifest this update: Sat 28 Jun 2025 22:01:06 +0000
Manifest next update: Sun 29 Jun 2025 22:01:06 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: 5jXzmjojc1nl4TOSl6oVq7T6DnimnT70oic+XoOuFKI=)
2: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (hash: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:f6:f4:d0:1f:4a:92:df:9a:11:89:f6:ab:92:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Jun 28 22:01:06 2025 GMT
Not After : Jun 29 22:01:06 2025 GMT
Subject: CN=3b3c16a2664e70dd730ce6f7ebd7b4f3e0c12e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:1c:ae:6f:89:8e:b8:7c:9a:4e:58:53:00:
e8:7b:0a:6f:4d:48:6c:5e:63:c3:a8:40:85:de:1e:
e7:ae:6f:03:e0:3b:73:33:47:93:ca:2c:a0:04:ab:
ab:c6:d4:e7:bb:00:1d:c6:d4:00:12:ff:3a:e0:c5:
b3:0f:89:6d:f4:dc:90:1f:35:38:9a:b7:f5:71:01:
5c:2b:79:df:54:c4:02:4a:97:af:82:39:7c:79:55:
9a:03:cf:7e:0a:4d:35:bd:c2:d6:4e:ad:a2:ad:13:
75:ec:b6:b0:6c:6f:a8:a1:df:94:83:c5:7e:b0:7a:
fe:5f:f2:9e:04:73:b7:39:45:90:03:19:60:49:f5:
60:0f:c2:ea:45:2f:ae:d1:cc:63:41:de:89:6f:d7:
da:7d:40:5c:1b:77:fb:fa:16:96:4e:84:27:1e:24:
d7:82:b8:02:29:10:10:3d:58:c0:45:47:ae:f2:1f:
31:29:3c:df:bf:9c:d8:15:89:49:96:44:72:af:f3:
08:99:32:a9:7c:d1:30:a1:81:19:43:56:24:91:fb:
aa:7c:ba:c7:48:f7:bc:40:59:e7:12:46:92:fd:69:
3f:c0:ed:f1:00:0f:8b:3d:ed:8e:8f:71:34:74:27:
8f:09:6b:d3:77:b7:d5:0a:d4:4b:2d:64:42:ba:99:
38:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3C:16:A2:66:4E:70:DD:73:0C:E6:F7:EB:D7:B4:F3:E0:C1:2E:8A
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5d:ca:62:0a:f0:a8:cd:fb:fe:55:08:17:a5:da:b1:ae:ed:
74:05:75:46:b9:a1:af:00:84:cf:1d:2d:a8:78:f7:7f:d1:b9:
f6:94:a4:2f:9c:45:ef:6d:4d:ef:4e:51:f2:b3:30:ff:57:37:
a9:1b:19:57:fd:0b:1f:e7:ae:51:4f:16:04:33:61:c1:e0:13:
1e:4a:19:8a:19:bd:73:76:be:43:0a:39:d0:94:7f:da:f1:69:
8e:db:ed:43:53:31:59:bc:7f:ef:82:5a:88:21:4f:cc:7d:6e:
f6:c8:9e:6d:ed:d1:f5:23:4f:07:3d:06:ae:b6:bd:07:52:03:
5c:48:a4:4a:cd:f1:ab:2c:2a:56:64:cf:7a:d4:d3:03:8c:d0:
f3:dc:a7:f2:e2:87:f7:ee:c8:1a:ca:f2:9c:dd:50:ab:dc:f7:
4a:60:ed:ba:ec:21:3d:2c:43:6f:49:6d:03:71:1e:d0:3e:e4:
a0:11:06:3d:d9:13:85:d6:e7:3b:69:f6:f3:e2:27:bd:07:1f:
2e:de:2e:36:13:62:c2:62:02:7a:7a:f2:2d:5d:ec:72:ef:7c:
c7:df:74:09:7c:39:1d:1d:ca:f1:65:22:4f:22:e0:08:b3:25:
36:6b:17:94:1c:8f:83:cd:97:03:e2:77:14:41:cb:a3:f3:d3:
df:2d:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:31 2025 by rpki-client