Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: objNN42/PBHc52Y7sajk6rbPVUVSaSMkf4QbQPDLTuk=
Subject key identifier: 81:9B:F9:EF:E7:D6:B8:C5:43:F5:55:72:E0:0D:59:49:21:FB:F8:88
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 0197B7B3142DD7B73BA91FE5A51EB4F04207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: B3
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: Msj0SKB6iNO+Oj/kkvSlpk9jAur4ftrVjjnyjF2sCqA=)
2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:14:2d:d7:b7:3b:a9:1f:e5:a5:1e:b4:f0:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=819bf9efe7d6b8c543f55572e00d594921fbf888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:72:e0:4c:4d:fd:df:b3:b2:9c:52:a2:6c:
dc:bd:a6:78:cd:a4:b5:91:10:6d:a3:45:bb:0d:d2:
c7:0b:4b:96:17:f1:0f:a7:54:73:44:a4:a0:25:d6:
87:7d:f1:fb:d9:00:e8:71:f5:8e:7a:be:9b:bf:9b:
81:1c:c1:bf:a1:9a:2a:be:5f:9d:4f:db:c4:cd:72:
f3:74:92:7d:d6:26:4c:df:bd:a2:8d:b3:c6:3e:f8:
b6:c3:46:5a:57:28:7c:d8:37:6c:85:5c:4c:11:e5:
ed:ef:1b:7a:4f:03:9e:18:dc:b3:23:b3:7a:67:d1:
5b:68:3a:84:30:26:dc:7c:a1:58:0c:f7:df:4c:ab:
dc:65:1b:a1:f2:47:b4:29:c8:9d:72:f3:1c:cc:d8:
14:74:71:f8:aa:a9:85:27:f8:62:28:31:08:c0:ef:
88:22:7c:95:a4:1d:3b:3c:07:dd:ed:e6:d7:ac:2f:
13:de:be:e6:67:2b:90:80:65:5f:b5:0e:15:87:b1:
69:3d:1d:91:14:e6:48:26:7d:49:98:1a:b3:12:6b:
13:1c:09:6e:c8:53:4e:ad:92:0a:26:86:64:fa:05:
5c:e3:61:b4:1f:99:e3:c5:e8:cf:bb:5b:05:52:a5:
1d:27:c1:96:9e:1f:0d:ca:bd:da:6e:46:34:59:39:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9B:F9:EF:E7:D6:B8:C5:43:F5:55:72:E0:0D:59:49:21:FB:F8:88
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6d:21:32:79:c5:c3:ab:a9:b0:35:5d:70:a8:66:ec:24:16:
89:46:06:b7:74:02:15:8d:a0:70:66:98:af:9f:c6:55:26:60:
9b:3d:81:37:56:96:eb:ac:22:59:9f:9d:bd:e6:46:58:32:e9:
c3:fe:e2:c2:3d:99:59:83:34:95:4f:83:4f:c5:ce:13:c1:06:
a5:c4:b6:c0:19:08:ab:56:35:77:b7:5a:d5:4f:01:2c:96:dd:
96:c7:17:ab:e0:28:1f:22:6d:13:4d:09:16:88:dc:e3:fa:37:
30:a6:16:fc:60:5c:34:7c:b6:50:ce:42:9c:92:8c:73:af:fe:
2a:7b:dc:05:1b:55:0a:cc:04:14:fd:11:e8:a9:57:15:04:9b:
12:42:a3:96:8f:bc:83:a5:87:57:68:63:39:9d:89:3c:70:54:
57:94:65:2a:c5:5b:46:35:fe:ab:24:cf:c4:8b:bf:df:20:42:
6d:a6:83:cb:8b:9f:a2:fb:23:2b:43:b8:3d:59:46:1c:c2:b1:
25:7c:be:f1:1a:0f:b7:92:d7:64:e5:80:db:82:b8:ef:62:6c:
42:24:da:84:d0:29:18:92:a2:51:af:70:da:19:6b:96:03:a9:
86:22:fc:56:da:5d:90:db:3a:b0:3a:59:fb:96:17:bd:59:c1:
f7:1d:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:04 2025 by rpki-client