Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: FYMaWxVmbYXiKUl4ihPBZN8QEEPQMnAUyQ39WzGw5uE=
Subject key identifier: 57:95:EB:82:9E:2F:39:A3:21:50:0B:37:CF:67:DB:7C:A0:92:65:00
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 0197B7453862503E0ECA4340128D3D129A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: IDHJPWMkGInVJNmiFW94idq88M3zitToaWXo3rp0v0k=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:38:62:50:3e:0e:ca:43:40:12:8d:3d:12:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=5795eb829e2f39a321500b37cf67db7ca0926500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:50:9d:a6:fb:be:c1:f4:94:f0:29:48:f9:
6e:6d:90:fe:8f:dd:11:52:c6:6c:a3:c6:a0:2a:12:
af:5b:08:bb:ca:88:d0:03:35:a6:3c:94:d8:dc:a7:
e7:55:98:8c:d8:11:03:a2:c4:85:a8:1e:b4:c1:4f:
56:45:b2:5e:50:85:c0:f2:15:79:fa:0f:4b:62:ed:
d3:14:b3:27:9c:cd:20:a7:05:21:ee:e6:73:fa:f1:
9b:17:78:b7:65:cd:2e:6d:59:da:2c:73:34:87:d2:
66:25:92:9b:9d:d2:93:0a:d8:9d:a2:3c:c0:96:62:
34:8a:c1:87:8a:03:3c:65:de:7d:fb:1b:40:32:f8:
5e:4b:e2:40:8f:16:5a:c1:ac:9a:67:a5:b6:bc:ab:
b5:bb:80:a3:6d:8f:25:9e:92:78:a9:fc:85:dd:46:
65:d2:73:69:7b:46:4e:a5:56:49:a0:3f:b1:e3:6f:
04:c2:ba:1c:12:c4:c8:e8:bc:52:60:23:08:49:2a:
81:41:27:19:42:b1:b7:5a:d7:73:2b:ce:ea:be:df:
8d:bd:19:e6:2d:9e:26:5b:2f:95:4a:26:c4:38:06:
dc:1b:b5:4b:91:66:fc:96:67:34:5f:f4:3a:fa:9f:
f8:05:07:0b:00:b5:b6:eb:1a:69:84:0c:9a:d0:57:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:95:EB:82:9E:2F:39:A3:21:50:0B:37:CF:67:DB:7C:A0:92:65:00
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:2b:a0:06:fc:dd:ff:d9:1c:b4:bb:0a:10:7d:7e:d7:0f:
4b:e9:69:5e:a2:cc:45:cf:0d:27:48:9d:70:08:35:ec:26:d8:
9f:6d:ac:d7:1f:9f:3a:16:d2:dc:1b:1d:d9:a5:25:37:72:fe:
45:15:cc:b7:0e:ce:cc:ba:17:6d:19:44:08:04:b3:cc:c0:68:
50:4d:ee:e1:3b:67:6a:1a:d3:88:b6:b2:1a:8d:3f:db:c3:ee:
21:74:3e:ee:d4:d0:5d:ac:3c:23:a9:80:51:3a:03:4e:a3:a8:
5d:48:8e:d8:09:5d:d5:15:f2:db:01:ee:68:da:c8:93:ab:e4:
37:64:2f:d1:bc:e8:3d:cb:90:22:31:cb:33:74:de:b4:ce:e5:
2f:6b:da:d1:b7:44:88:6c:b2:47:76:4e:bf:64:45:e7:b3:0f:
10:c2:e1:94:69:9e:f1:86:09:be:20:95:49:42:45:7f:89:e8:
38:fd:35:3b:1a:b3:b0:77:63:cb:4b:ba:fb:69:18:89:34:a1:
75:9e:2d:f3:6d:67:00:cc:88:86:60:1c:3f:45:d0:0f:8c:b8:
71:f5:ea:e6:9b:c0:ce:fc:5d:a7:b6:f4:7d:cc:e0:75:08:a5:
2b:80:ac:f3:80:4d:6d:0a:44:e9:80:61:55:38:25:72:ed:c0:
3b:ba:46:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:03 2025 by rpki-client