Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier: yLIdBNbkaDrBC4OnmXhMLHi6KAFEMkcQ6m5NYwLNNE8=
Subject key identifier: 30:EA:CF:3F:9E:98:95:95:91:B9:5C:8A:AC:4F:CA:90:19:2E:7C:91
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 0197B70EC3A1B78D88C9338ED9B8EB64F68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number: 0B01
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: 0kfsOGsGfHDbGFGVz3XoKiINK/fXPTPM2yMRBQ+GnmE=)
2: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (hash: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c3:a1:b7:8d:88:c9:33:8e:d9:b8:eb:64:f6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=30eacf3f9e98959591b95c8aac4fca90192e7c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:3c:13:3d:ea:eb:a4:9d:4b:4b:bd:3a:33:
6b:f3:cc:01:fa:57:4b:17:0f:4a:d0:5b:e6:fa:6f:
3e:30:54:b7:00:09:a2:8e:2e:52:c6:c1:57:c9:ac:
b0:60:63:e0:da:de:5d:d2:57:1d:6c:91:64:aa:b8:
1f:be:14:12:b4:18:e3:9e:ed:a3:89:e3:f3:26:21:
7c:eb:df:4c:1b:d3:f5:49:ea:a9:3a:96:7a:6c:5e:
8b:f6:b7:e9:90:02:b4:e4:24:70:81:06:e7:a5:d3:
40:1a:00:ae:b1:cd:9d:cb:7a:98:5c:20:63:6e:0c:
f8:41:5f:75:4f:78:87:b4:fc:b4:fb:85:52:ed:ec:
6f:e9:1b:92:d4:f5:26:e2:52:a8:39:e9:f2:1f:67:
b3:30:17:ba:24:15:a6:23:a6:25:72:d4:6f:ae:c7:
ba:54:a0:9c:6d:17:4a:dd:d0:4f:47:97:9a:1d:73:
26:04:bf:63:61:a4:ca:9d:45:7c:05:3e:af:0a:00:
b7:7f:bb:48:c3:70:47:2a:93:e9:77:22:b0:39:6c:
12:e0:72:c0:c4:3f:01:90:72:0c:fe:0e:af:ed:64:
88:35:84:3a:1f:a1:d1:48:bd:39:61:51:d7:a2:cb:
96:3b:82:6b:9f:f2:86:75:d1:4f:ef:14:f6:e4:0c:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EA:CF:3F:9E:98:95:95:91:B9:5C:8A:AC:4F:CA:90:19:2E:7C:91
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:ce:8e:25:28:b9:49:98:57:41:3d:83:60:59:4f:ef:4f:
46:ba:f3:18:1b:b4:57:0f:44:01:32:a6:9e:f5:ec:02:37:6e:
3d:dd:51:5d:2a:aa:65:66:a4:9e:08:41:70:cf:5b:ca:56:18:
17:78:db:a0:1e:b2:e8:88:02:d2:b7:39:c1:30:38:82:4c:06:
36:1b:75:18:71:07:dd:88:4f:50:ef:a5:6c:a3:82:68:dd:59:
68:2f:10:51:1e:f4:a4:bf:11:32:62:01:ad:85:4d:da:2f:8c:
c4:b6:0e:98:a1:e0:f7:db:b8:30:36:f7:54:4d:59:46:3e:17:
c3:12:f5:6b:b6:8c:0c:65:14:1a:22:d3:a6:9e:1b:44:50:7f:
f4:39:53:ec:4a:5b:08:cd:64:5c:0b:dd:25:1b:9e:4c:50:3b:
f9:67:29:99:1a:a8:7b:5f:fb:fc:bb:4e:e1:b7:11:98:8b:66:
69:b5:98:bd:fa:97:02:38:05:d9:57:fa:58:79:9c:1f:05:c6:
e2:d8:ae:1c:81:6f:7a:c2:9f:d4:ad:fe:75:fd:0e:a2:57:db:
c2:ee:05:09:ce:bb:e1:fe:21:b3:38:1a:82:ec:30:ac:6d:9d:
04:51:5b:99:e1:b0:ad:34:7b:2e:39:89:de:f2:01:f3:0a:da:
d8:d7:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:30 2025 by rpki-client