Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: xk5cfvQs/IcIm2bCeqwr9KNPPqmam4Ack/nAIU1qWnk=
Subject key identifier: 70:E1:C8:DA:2E:97:A2:CF:97:0A:13:1D:F4:18:11:C9:63:97:6B:07
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 0197B77C6B77EE71379E4AFFCA007CBC0A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 08F8
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: 6Nr2VmGKQ_jUJpF9yPeLEUnYhF4.roa (hash: /MpCkrj9yQfDhYflTljevFhsZA0Mv2nTgQM1DqiGD3A=)
2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: mot3dP2EVcck+OZPV9RmESQim0Ow7ksCTAxmPp0/G3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6b:77:ee:71:37:9e:4a:ff:ca:00:7c:bc:0a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=70e1c8da2e97a2cf970a131df41811c963976b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:17:56:f5:81:c4:5f:d3:2b:01:ae:e6:04:
e1:de:b8:c6:d0:92:16:6d:e1:f3:1a:b4:cc:6f:22:
79:c2:82:8a:9c:9c:e2:21:8c:bb:53:4c:92:ef:b4:
1d:3b:70:9a:9c:61:da:10:4c:19:36:e2:4b:12:1b:
12:aa:18:f1:0b:e5:38:c3:cc:4a:2e:a2:b7:da:9b:
4a:62:9e:d4:be:3a:ff:7a:64:b3:7a:3d:9a:5a:d4:
76:be:f0:14:8f:6e:b4:ea:1c:37:0b:91:7b:86:4a:
e0:bf:e2:be:52:6d:64:a3:7f:d7:01:00:a9:31:7b:
0d:fe:80:9b:11:8d:06:32:8d:ef:15:0d:71:d2:c2:
40:e3:02:0c:e7:18:48:aa:1f:c3:df:9e:cb:4b:e1:
61:bf:9d:76:6f:25:b7:29:94:3e:de:48:08:87:45:
6a:41:3d:11:73:71:d8:f6:e9:ff:30:f4:a9:0c:4c:
01:62:0d:2b:6f:a3:23:46:fa:f4:c2:16:e7:81:44:
90:14:13:27:49:d3:22:d8:4f:0e:e8:75:e8:14:0e:
f2:58:77:1d:d2:12:0b:6b:99:a2:0e:eb:40:76:04:
33:fa:39:a4:a6:96:1c:38:bf:5e:90:a3:29:95:e0:
dc:8d:53:b9:8b:e2:14:97:3a:86:2b:07:e7:ef:b1:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E1:C8:DA:2E:97:A2:CF:97:0A:13:1D:F4:18:11:C9:63:97:6B:07
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4f:36:e8:fb:48:4f:88:fb:2d:31:4e:70:ca:09:a8:f7:1c:
2c:a8:ab:31:9f:35:01:52:33:b1:b0:63:0a:50:84:d5:c6:2c:
e6:63:9f:e6:5e:b2:f3:49:96:fc:1d:e5:ec:7d:62:70:c1:8e:
55:79:64:f8:bb:8a:41:6b:a2:0f:fd:af:7c:cc:e3:85:df:37:
52:9b:b6:5e:e7:2e:3a:9a:7b:50:c5:4a:a1:61:14:54:47:9c:
f4:6d:6a:5e:13:13:f7:7f:42:9e:39:2e:c0:09:f7:9b:97:55:
ea:3f:cb:49:a2:1a:84:53:1b:54:e3:ff:b0:e2:01:ee:13:9d:
fd:0b:24:37:f5:ca:3a:72:26:40:f8:6e:8d:e6:60:16:9c:ee:
41:20:81:72:e2:b0:af:ec:7b:5f:25:1b:51:c2:bf:03:f9:fa:
f4:c9:33:59:09:4c:2d:da:89:22:46:5d:ec:ee:d7:cc:0a:f6:
3c:20:10:d2:b1:33:f6:d6:00:8e:99:37:5c:79:df:38:35:80:
56:d7:f1:09:ef:d4:59:3f:e4:66:84:a0:f7:0e:15:f0:e8:28:
05:cf:e6:bb:46:63:83:d1:a0:b1:5e:86:c0:e3:c7:9d:b8:0f:
1c:39:22:e4:5f:77:14:4f:22:1a:9c:62:59:c3:60:9f:92:6a:
2d:f4:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:17 2025 by rpki-client