Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier: jfIG1L9rMeO4H7XlIW3r6pQqsdjcqOBbEgTJZyAKwyE=
Subject key identifier: A0:24:91:8A:C7:25:0C:1B:9D:68:B4:F6:0C:B9:F4:71:C8:98:27:50
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 0197CA94EBBB060B3099EFA1DF2B80958AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number: 0C77
Signing time: Wed 02 Jul 2025 10:00:46 +0000
Manifest this update: Wed 02 Jul 2025 10:00:46 +0000
Manifest next update: Thu 03 Jul 2025 10:00:46 +0000
Files and hashes: 1: Z94Es0pJzdNNFG_pvtxbCrg0w94.roa (hash: uXR+OJPAQJAMUd3RxLmxlHyff75ZTmhyAoVDvTJyktM=)
2: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: vsLXLLHgDk2Qc6Rfqeck0f7U/Op/0idjbJWESuCheO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:94:eb:bb:06:0b:30:99:ef:a1:df:2b:80:95:8a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: Jul 2 10:00:46 2025 GMT
Not After : Jul 3 10:00:46 2025 GMT
Subject: CN=a024918ac7250c1b9d68b4f60cb9f471c8982750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:9e:94:41:b5:e3:ea:1f:5d:11:e0:ae:c8:
b7:d7:97:a9:33:5e:6d:4a:cb:77:2f:c4:cb:69:e0:
a8:a5:a8:4d:30:42:7d:f9:50:54:31:fa:0e:fb:28:
e7:15:47:de:40:0b:23:53:d1:ce:65:91:80:19:5e:
ff:10:14:61:f7:5a:44:00:82:73:4b:2b:88:6d:d5:
0a:3e:4d:44:f9:01:19:38:1b:e2:ce:46:d5:a2:5d:
6e:4e:2c:c5:94:78:50:87:0c:47:20:5e:bf:5c:19:
42:03:0d:f5:5e:34:98:7b:7e:78:dd:e9:77:5e:6d:
9c:1d:9d:60:01:54:1d:7b:59:f8:a1:d0:a8:7a:a7:
40:e0:bd:8c:64:6b:b3:60:94:61:16:eb:c1:2d:d6:
6a:11:a3:de:80:d6:cc:f6:5e:cd:6e:94:e2:b7:c5:
25:17:ee:00:72:8a:52:b4:3c:21:79:ec:0f:d5:f2:
c4:29:01:97:61:0b:0d:08:1e:24:43:1e:34:2b:c1:
a2:50:36:eb:a9:d0:64:79:1c:09:99:1c:56:23:74:
c5:35:35:c2:52:a4:8b:e0:25:30:ab:ea:5a:a7:28:
e8:bb:65:a0:e7:ff:ef:fa:cf:e3:e9:8f:17:df:c2:
cb:89:17:02:27:e9:4c:fb:19:d3:7b:1a:1e:f6:75:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:24:91:8A:C7:25:0C:1B:9D:68:B4:F6:0C:B9:F4:71:C8:98:27:50
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:72:ed:be:41:88:ad:ef:46:2e:93:70:f3:3c:df:4e:65:8b:
4c:2d:e5:4b:9d:c1:da:11:fd:39:8e:67:25:a6:4b:90:60:03:
f0:66:e5:b4:4e:99:f0:21:06:43:71:02:7d:d8:90:8c:bc:a8:
44:14:31:e2:0f:d7:ec:88:23:aa:8e:aa:9c:4a:7e:08:bf:83:
65:f1:e8:82:e8:7c:92:51:5f:a0:e5:c7:fe:2e:d4:1f:25:8d:
34:6b:9e:8d:f4:d9:76:a4:84:4d:09:c3:32:91:c4:7c:6d:c1:
12:06:fc:a2:93:61:2b:77:13:39:ee:bb:a6:ec:0d:fe:47:7a:
6c:cb:be:88:5f:7b:c8:3c:ed:c4:ab:2d:b6:68:f8:bb:38:de:
9f:27:43:d9:56:8b:f3:ca:08:08:6a:da:67:dc:18:e1:df:36:
3d:3c:3c:9b:5b:be:a8:f4:e2:e2:a6:26:59:91:ec:a3:49:46:
14:3f:98:1c:09:11:60:1c:07:ab:50:51:87:f7:a3:77:ed:bd:
d4:6b:db:08:2a:99:c8:85:1d:e9:73:a1:c7:c9:c0:99:8d:85:
2a:90:5c:b2:01:d7:53:3f:85:06:f6:f4:49:80:56:b8:82:60:
20:23:71:6c:47:2d:67:7f:5d:a0:97:1b:d4:a7:0c:ac:ee:1f:
62:50:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:53:21 2025 by rpki-client