Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: Z/JwLw/EOWsuUz/lVq5H7JkTR7el7BX6xC5XRkYyiz4=
Subject key identifier: D3:BE:02:E6:E9:16:94:D6:F8:02:D3:09:7A:A6:D5:B3:2C:8A:68:73
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 0197B74520062FB456DE8B5525909C75CDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 1097
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: YlgtbdU2qOhywIa+9l07ZJk6oPGGiC8UReH9uzPV2Yw=)
2: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (hash: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=)
3: iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (hash: cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:20:06:2f:b4:56:de:8b:55:25:90:9c:75:cd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=d3be02e6e91694d6f802d3097aa6d5b32c8a6873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:67:db:60:08:be:b2:31:ab:20:21:13:2b:
6c:de:23:65:db:79:a1:d7:99:4d:f5:19:63:b7:80:
07:4d:b8:8f:61:a8:7b:ed:0c:e5:74:75:be:bb:2d:
77:6b:6d:2d:eb:26:3c:77:f4:fd:22:6e:22:89:8e:
ca:58:15:7a:2a:f3:7e:da:3b:ec:22:ee:74:26:e6:
28:bb:79:1d:72:3f:9c:99:2b:a5:8e:6a:aa:76:5c:
b6:23:cc:d8:64:a9:0a:c8:11:53:a4:29:ac:9a:92:
17:60:c1:c7:cd:4c:02:55:82:f6:7c:17:ef:28:88:
37:75:a7:3f:f4:58:a6:b5:cf:5b:b4:c5:9b:2c:0e:
08:c9:82:7a:1d:79:64:53:40:76:a6:8a:d4:c4:1b:
5a:29:78:01:85:e6:42:50:37:4f:a2:8a:b6:07:3c:
04:25:92:21:cf:5d:f5:34:12:8f:f5:3f:14:12:df:
13:9b:f9:76:53:49:30:b4:44:6f:ee:31:5b:17:60:
3c:ee:3e:61:96:12:e6:ce:a9:3b:22:b2:9b:a8:b8:
c0:a8:7c:e6:0a:b3:44:19:ab:7a:03:26:4e:45:8c:
d0:c1:1b:17:b4:52:aa:62:22:54:e3:a3:5c:0d:1d:
27:b8:d7:34:dd:b2:47:5f:8f:ab:60:73:f0:f9:88:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BE:02:E6:E9:16:94:D6:F8:02:D3:09:7A:A6:D5:B3:2C:8A:68:73
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:37:30:22:b4:74:59:47:c3:3c:11:6a:1c:7d:02:58:66:90:
35:e3:73:0c:f6:ce:7c:3b:41:bb:1d:2c:4f:db:54:29:63:01:
f7:67:ff:96:29:78:1d:bc:0c:96:53:df:0a:3d:86:38:92:0c:
28:e7:6e:99:f4:fa:ba:7f:ba:df:e6:8e:ca:b7:cd:6a:78:a3:
64:48:d1:25:db:71:bb:5a:61:ae:5e:61:d5:75:06:fc:71:d2:
0c:02:25:07:5f:1e:a4:74:26:d9:8b:99:73:bc:2b:d2:3d:52:
15:cd:25:8a:a7:ee:8e:2c:65:2b:50:08:10:c6:6a:8e:ad:96:
a2:8e:03:ca:4f:25:30:24:16:58:bb:2a:0e:19:7a:c2:e3:fe:
9a:2c:aa:45:19:68:b3:fd:3c:c1:78:73:ca:82:12:c0:f1:a1:
45:3f:f3:62:92:ae:20:1a:27:a4:f0:42:53:47:0d:b0:8f:00:
3e:52:13:b5:37:2d:50:dd:0c:45:f6:6d:72:d0:db:46:ff:37:
41:e1:d0:86:ec:52:78:c8:66:bf:43:b0:c7:9d:70:5b:6b:84:
e5:8f:64:2f:01:47:ee:3c:c1:63:24:3b:56:db:ea:09:7e:e8:
e6:c0:7f:53:a1:c7:e1:9c:97:45:47:16:78:78:be:b3:84:25:
ac:ab:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:55 2025 by rpki-client