Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: qo3oc4ybO58VSUXdz7k3e5B7YlBouuJVBmWNsY5l1b4=
Subject key identifier: C1:EF:12:A4:F0:8E:B0:46:33:57:C5:44:EA:52:E3:49:16:56:F9:EB
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 0197B9A1D9301C494B4C126B0425A6F10E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 03:01:21 +0000
Manifest this update: Sun 29 Jun 2025 03:01:21 +0000
Manifest next update: Mon 30 Jun 2025 03:01:21 +0000
Files and hashes: 1: 0SO2bdDSFS2jl_PJgU_l_j97XeY.roa (hash: b5x4PF/4pc6ecIpAqqWDUvsSnbLqRaDPB8YvR8rbRKg=)
2: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: u7VJzyjV/cHtQ45ftobJHx/vykjsfbzhbAd/yfGBhUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:d9:30:1c:49:4b:4c:12:6b:04:25:a6:f1:0e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Jun 29 03:01:21 2025 GMT
Not After : Jun 30 03:01:21 2025 GMT
Subject: CN=c1ef12a4f08eb0463357c544ea52e3491656f9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:bd:4c:88:84:02:35:15:f4:20:d2:a9:64:
eb:38:7d:20:8a:ea:ea:86:67:e6:8f:b8:e1:75:92:
5c:12:28:7f:83:5a:3a:5d:2e:55:31:6a:58:61:c2:
92:8d:3c:67:34:40:f6:de:a7:aa:85:d2:23:b9:76:
73:73:c0:d2:71:5b:e1:84:03:21:55:e8:80:82:4e:
9d:8c:d0:7a:20:f7:74:69:6b:ba:d8:dd:c2:e0:e3:
6a:df:f3:93:af:90:d7:05:05:11:16:2b:0e:bb:b3:
d4:9b:78:a4:3f:6b:37:73:37:a2:ba:0b:4f:79:db:
6e:53:79:8d:2a:4d:6f:eb:51:b6:2e:a7:25:97:cd:
b0:15:93:35:74:04:07:2e:b8:a1:3b:d6:68:4c:9e:
f1:6e:ca:85:7e:98:bf:77:14:6a:71:04:1c:3d:93:
5d:8f:94:34:4e:d9:92:69:bc:bf:80:c9:a9:7c:97:
b2:c2:cd:2c:6e:cd:d1:74:39:54:00:37:11:ae:45:
5a:a3:a3:b1:cf:a0:9b:ea:4d:75:d8:9c:08:91:df:
f1:31:cb:6c:e2:5c:4c:9e:4a:43:49:53:2a:33:ee:
f9:4f:fa:57:2a:81:ce:f4:97:ba:88:7f:87:bc:e6:
22:f0:f4:f3:c9:49:05:75:df:08:3d:0f:90:ee:d8:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EF:12:A4:F0:8E:B0:46:33:57:C5:44:EA:52:E3:49:16:56:F9:EB
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:be:f2:5d:c5:65:d3:6c:59:46:6a:4d:09:f0:02:25:c7:f6:
46:73:d8:1b:16:e0:18:03:ec:1e:3d:84:15:5d:df:8a:4c:7c:
5b:3c:54:78:f3:59:d8:95:90:e7:78:80:30:78:82:fb:ae:a9:
30:6b:50:c2:7e:31:2c:a0:e3:2a:60:a8:bd:61:9d:aa:b7:58:
34:a7:fa:51:c0:12:d1:a6:7f:38:62:e0:97:bf:5d:34:53:9f:
6f:5d:07:65:62:d5:aa:e3:85:09:bb:64:77:99:fb:3d:94:dc:
1d:b7:f1:bc:68:0b:e5:bf:51:88:de:68:ee:58:8c:cf:f8:d8:
67:e1:a2:35:c1:1f:25:d9:6f:f3:32:1a:04:ec:c4:07:1b:5e:
e6:9f:1d:48:72:91:30:2a:cf:36:84:74:7a:bb:c4:78:ef:2b:
f9:c8:b3:a2:38:84:dd:ca:2a:73:fb:92:e2:db:cf:98:1d:f6:
b5:b3:84:d5:af:83:6e:36:2f:01:6b:fc:27:e7:77:86:3a:13:
69:b8:d5:92:e3:09:f8:b2:aa:4d:ee:32:2e:72:36:0e:85:c2:
46:b0:3f:db:34:7a:a7:9c:01:d3:fb:86:a0:7c:31:8d:0d:4f:
95:0c:ff:6c:57:97:fb:9f:ab:04:b7:3e:26:7c:a3:7d:ce:06:
47:ac:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:47:35 2025 by rpki-client