Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File: b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier: GehGnoujAJaFiNYpQTYBAKWI1mlj7Z3WfC4EfCS/rig=
Subject key identifier: D1:CB:46:EB:01:7A:9A:97:35:16:19:69:D5:C9:F7:A2:DB:A7:93:D3
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial: 0197B70F52C915585964FCDA0D12F867D904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number: 09C3
Signing time: Sat 28 Jun 2025 15:02:04 +0000
Manifest this update: Sat 28 Jun 2025 15:02:04 +0000
Manifest next update: Sun 29 Jun 2025 15:02:04 +0000
Files and hashes: 1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: SYSPzq0hqX4RPIwgYDN6iIHO/Q633EPDNpIW9uuceEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:52:c9:15:58:59:64:fc:da:0d:12:f8:67:d9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Validity
Not Before: Jun 28 15:02:04 2025 GMT
Not After : Jun 29 15:02:04 2025 GMT
Subject: CN=d1cb46eb017a9a9735161969d5c9f7a2dba793d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:c8:cf:c0:0e:f3:06:14:d1:63:61:26:dd:
29:44:72:79:23:fd:1c:c1:e8:40:4d:a5:3e:81:f4:
45:db:66:90:0d:18:08:d8:f7:0b:7e:e4:7d:8c:b1:
3b:89:d0:1b:72:77:56:b4:52:4e:b5:61:57:36:b0:
ab:67:78:af:52:b6:41:a4:8e:4b:36:34:27:90:1b:
37:61:cd:20:7b:13:77:21:e5:46:2c:6a:2d:95:9b:
9d:af:71:b7:1e:07:83:ee:60:0e:1b:3f:27:53:5a:
dc:b4:47:27:c5:e8:d7:93:45:57:95:ff:2d:c2:aa:
a5:05:58:db:61:3d:b0:89:08:c7:80:0f:79:ac:ba:
71:3f:07:09:46:25:b0:ed:56:71:13:0f:8c:01:92:
80:c0:87:48:79:bf:c2:26:92:e1:b5:e5:5d:16:34:
57:a5:30:86:bd:85:23:a0:8e:43:5d:7f:52:d1:4f:
34:89:ae:9f:a3:f2:81:e1:81:c3:17:93:9a:56:a3:
f6:ca:2a:a9:e0:44:95:94:95:92:10:a0:d3:92:8d:
c0:0f:07:e1:b1:7f:d1:14:76:8f:87:99:8c:66:9b:
52:56:95:69:af:46:8f:ce:5f:82:cd:95:c6:cf:02:
37:73:18:0a:9b:47:6c:c5:b1:c3:b4:eb:fc:44:c3:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CB:46:EB:01:7A:9A:97:35:16:19:69:D5:C9:F7:A2:DB:A7:93:D3
X509v3 Authority Key Identifier:
keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9a:b3:2c:e9:79:6a:20:46:38:74:be:80:88:0f:a0:4b:f3:
21:d8:a3:b9:8d:ca:3f:a0:d2:90:8f:87:ef:51:78:e9:3d:ba:
e6:d6:30:4c:27:a8:53:75:38:06:35:0c:93:e8:d0:0a:bf:b9:
d6:e1:c4:04:43:ac:5d:a8:a5:4a:96:ff:20:f5:45:18:6f:54:
14:b5:ea:09:6f:f3:34:32:38:f2:48:2b:1f:ec:bf:3e:07:39:
7b:4f:a8:65:56:56:b8:80:c7:ae:7b:bc:3e:53:18:9d:45:46:
0b:14:01:ef:d5:46:7b:16:15:32:7f:c5:51:ae:ee:36:84:f4:
a5:50:06:4f:d3:5b:8b:94:de:c2:13:80:0d:75:38:22:ce:ec:
ef:b9:c1:65:2d:d7:c1:e4:f0:f4:b0:fc:6c:90:40:22:40:d4:
c1:38:50:22:c5:f8:b5:f5:3e:03:8e:0d:a0:96:26:e5:74:bd:
f4:a1:44:b6:58:5a:59:0b:81:1b:83:07:18:8e:ae:40:73:bc:
4d:07:af:d3:dc:13:44:58:d7:d2:1d:b2:d0:bd:13:ed:2a:dc:
de:7e:cd:2e:37:41:65:87:35:6c:43:5c:ee:da:98:4e:f0:8b:
da:7b:78:cd:38:be:16:9c:62:19:25:28:1c:18:c0:6d:31:32:
05:40:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:04 2025 by rpki-client