Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
File: sIrODrPi30n9u3dyZxb7Zed3eWQ.mft (raw, json)
Hash identifier: HNY5aboGVFcGz1TBwSo0w7cR7ts65AAlmdSqy4gp9pI=
Subject key identifier: 29:16:DF:82:F5:37:80:F5:75:76:F6:D3:F7:C4:44:FA:25:75:9C:2D
Authority key identifier: B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
Certificate issuer: /CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Certificate serial: 0197B745572F93C1EDDA1DCF453B763ECD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
Manifest number: 09A9
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: diUYpUKMIXz1gLgZaNSVSKV18U8.roa (hash: 2LacqRpLn+KwsMEDop6qn6ZSkweQldM8ZPPhx+K/olo=)
2: sIrODrPi30n9u3dyZxb7Zed3eWQ.crl (hash: gAFGvN8NXuD8Xe3TZihIX3VAIjGF6/MyAyMI/4Me6qU=)
3: ypDy4xS2R6Ye6aWBkCNFAdcm0wI.roa (hash: hjIAAkji2+ZqYHRNKyPRkJEyLfHtgHEfz/xpi/TOXR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:57:2f:93:c1:ed:da:1d:cf:45:3b:76:3e:cd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=2916df82f53780f57576f6d3f7c444fa25759c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:0f:01:06:b4:08:a3:cc:89:f5:d2:31:fe:
0f:7e:b7:2e:fe:4c:a9:4e:a2:4a:8f:8e:47:55:9a:
23:c2:6c:97:90:f4:ba:cd:91:08:ac:00:c3:06:63:
aa:d3:21:7a:c3:a5:44:61:63:51:c7:0f:8b:f2:dd:
51:a8:07:f2:ef:6e:0d:41:4f:1d:19:44:5b:b7:60:
4d:af:da:66:0c:15:e4:0a:35:5e:db:f2:ce:e7:5e:
b1:c8:dc:d1:83:4c:96:24:42:23:85:c9:4b:7d:9f:
3c:20:74:5f:57:fa:5d:fb:5d:3e:fe:77:74:be:c8:
47:05:af:45:62:3c:b6:26:2e:92:bf:ea:5f:e4:93:
7d:d8:4d:bb:e8:eb:7f:b7:c8:d6:2c:aa:23:23:eb:
ab:2c:99:5b:44:e4:8b:6b:e9:a2:db:75:2e:eb:0f:
25:66:13:24:a3:49:93:22:71:f6:70:7d:d6:b6:cc:
7c:64:42:10:b8:f7:44:05:71:33:00:a2:fe:d5:8e:
1b:97:5e:da:4d:28:d4:25:a5:37:18:3f:b2:18:c2:
c1:f4:78:1a:c6:7c:50:94:24:b4:36:02:03:89:ec:
c3:94:7a:ea:b4:2a:cd:79:df:cc:0a:a6:94:fa:10:
b0:7a:7a:80:7b:f3:23:d0:f3:6f:0d:95:88:d0:b5:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:16:DF:82:F5:37:80:F5:75:76:F6:D3:F7:C4:44:FA:25:75:9C:2D
X509v3 Authority Key Identifier:
keyid:B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9e:52:48:3f:cf:f4:ea:7c:29:26:4c:ed:d4:a7:d0:af:c3:
a0:c9:71:c6:59:8f:d3:78:72:19:71:23:d0:c0:cf:3e:be:9f:
d0:26:a8:e6:6f:d5:e6:55:91:4a:4d:dc:d3:b3:26:5a:a6:79:
9c:ed:89:e9:38:78:05:c6:d7:3f:da:a6:57:e4:4f:1a:98:a7:
ce:39:cd:8b:ab:dc:66:77:96:ae:ae:54:a2:f1:52:1b:a0:31:
d3:ff:a3:e1:a6:44:17:ec:fc:0a:99:88:46:47:f7:3a:76:d3:
79:5a:37:76:4b:da:b0:df:fe:64:8e:ee:5b:ff:06:6d:3c:60:
12:3c:81:40:b1:f7:23:e3:d6:20:17:27:99:e3:3d:da:3c:69:
96:b4:9a:40:fb:d7:89:82:8a:b8:d7:f3:f3:20:b9:28:9b:54:
c3:1f:3b:20:09:11:65:29:49:76:ee:66:2c:ff:a9:3a:72:e8:
74:b0:e9:ef:9a:70:e7:94:c5:c7:69:05:e9:5b:c1:f7:06:42:
f0:72:79:24:aa:a0:34:31:72:41:0f:bf:ad:43:65:aa:6e:87:
95:01:28:ac:c4:7c:c1:ed:0e:1b:bd:aa:de:7c:25:84:43:93:
29:27:e1:21:49:60:63:8a:cd:cf:c7:a1:95:1b:6f:e2:dc:b6:
4a:a6:07:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:38 2025 by rpki-client