Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: NvB9Pn/weHnxwGkvUKYfyeEMXRQ9Qmo2tOMOd2Uhfv4=
Subject key identifier: CD:9B:87:39:45:F0:52:46:63:98:01:CC:27:C7:E6:0D:D5:4A:82:F7
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 0197B6A0A66DAA3C4C1FBE50A8A5A8BCF67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 03C9
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: 4wXTzP5gdkIqlyGKVpN1cDWGPAXi/xfD5hYDWV6LkkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a6:6d:aa:3c:4c:1f:be:50:a8:a5:a8:bc:f6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=cd9b873945f05246639801cc27c7e60dd54a82f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:20:e2:82:06:7f:d1:4d:42:f2:49:0c:49:
40:ac:18:8e:53:57:1f:a2:55:7c:c1:d5:62:67:ab:
2d:ce:4c:92:51:17:b2:19:ce:67:f2:76:18:34:d8:
62:ef:bc:35:cb:04:5b:44:a5:d9:58:d4:62:cf:4c:
db:23:de:11:e2:ef:4b:2f:36:ef:97:c0:e2:fd:3a:
8b:f3:4d:08:8c:2e:4e:45:24:df:54:eb:7a:df:3f:
b1:82:d9:93:af:47:5d:4b:61:96:6c:10:5e:95:90:
48:0a:08:37:a4:0a:df:1f:80:ea:61:6f:5d:de:3b:
6d:e5:38:31:5c:d9:63:67:13:83:02:1c:45:a4:d1:
e0:56:a4:29:e5:1e:76:09:e6:8f:54:14:7e:0e:32:
5f:4c:96:8f:e7:c4:2c:06:50:72:09:56:da:46:a5:
7c:b5:6c:35:3f:d8:a3:68:fa:dc:83:3d:7f:36:0b:
f1:0b:f5:26:da:fd:5b:1b:49:ab:76:66:de:96:f2:
49:5c:ec:0f:5e:70:1d:ad:59:ab:d7:41:14:a2:0e:
a6:c4:6e:ac:8a:d6:23:f1:41:1f:a2:54:bc:a9:47:
b3:7a:ac:3b:bc:34:9a:1b:53:5c:93:d7:4d:9e:c3:
2e:a8:67:a0:8a:10:4c:2d:d4:b9:ba:52:6d:52:50:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9B:87:39:45:F0:52:46:63:98:01:CC:27:C7:E6:0D:D5:4A:82:F7
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3f:b3:5e:39:71:ee:5c:39:c6:10:88:51:e1:c8:79:89:a2:
ba:a5:d8:f2:26:ea:b5:a5:23:36:93:dc:3b:2e:a0:a0:8f:23:
0c:60:3d:ac:40:25:41:fd:ec:eb:46:99:6f:56:eb:fc:76:2e:
d1:06:0d:8b:7d:24:c2:e3:6b:d6:8c:af:e6:ae:32:3a:c8:b9:
16:7a:94:2a:1e:23:54:b7:02:39:18:6f:67:62:a2:47:35:9e:
18:c8:91:7d:d5:45:71:88:98:e2:4c:47:17:71:2e:18:ce:a4:
f8:5c:0b:5b:b8:b9:29:78:2e:b2:e6:18:8c:90:72:b5:dc:06:
f7:44:45:8f:21:28:cc:cf:ae:02:ae:b7:30:30:60:16:a8:bb:
0a:75:0e:47:27:c9:b4:a4:8f:62:92:cc:84:1d:b2:45:fb:51:
44:fe:a2:4b:07:d0:1e:b5:c3:28:ab:7a:e6:6b:62:fa:4e:d3:
08:56:a3:07:92:ba:6e:f7:b1:d5:70:f4:a5:b5:5f:d7:a4:42:
12:ca:0a:39:81:78:0b:ff:b6:66:b3:f0:87:2d:0c:53:0b:9e:
00:8b:e6:bc:a9:af:2a:bc:e6:4c:1c:f3:21:c0:91:6a:ad:50:
a5:51:bb:a1:7c:e0:ae:28:ed:1e:a7:7c:19:dd:ca:e6:fa:b3:
5e:90:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:57 2025 by rpki-client