Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: o7kC5Y9+NO+li7kHoFkidr6Ebg7yo6JPvO/NxsxDnw8=
Subject key identifier: 2D:99:4F:11:FC:92:56:2B:B3:CA:50:57:BE:0D:68:E2:BE:5F:1B:88
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 0197B820FF06D524D6786BCBF12975E5504F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0C9A
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (hash: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=)
2: XLNp588BlhjTzq9wL8KooDNiDfQ.roa (hash: yqzj3pa+xK6sQ61wkjeNUDLd0sOcE9ePSDM9S9DIM0g=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: xPUuX6V3GyMZMvV6DNtNItZouH/2VtxzBk1yQwojppA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ff:06:d5:24:d6:78:6b:cb:f1:29:75:e5:50:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=2d994f11fc92562bb3ca5057be0d68e2be5f1b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:a3:85:73:f9:41:4f:be:b6:cb:af:27:30:
64:a4:69:5d:d8:83:b6:03:33:0f:76:32:85:91:9f:
15:f2:c7:13:40:3d:89:70:8f:b1:48:08:72:48:81:
56:ea:dc:44:5e:54:d6:53:4a:46:52:51:78:d3:a8:
66:4f:f2:9b:8c:5d:21:8c:87:d8:10:16:66:4d:3a:
00:68:4c:aa:5e:a4:41:cd:2a:9f:00:68:7d:f6:a5:
b3:a6:e9:fa:84:80:40:8e:83:97:df:da:b5:14:6d:
11:a0:07:b2:1b:86:d7:5f:b5:21:6d:30:f4:38:fd:
ae:38:84:cf:e9:d9:9a:ab:33:45:58:e2:85:34:56:
1d:47:f6:36:a1:7c:b9:47:a2:d7:b6:1d:fe:83:9b:
d8:c1:5c:d7:e2:2d:6f:b9:5f:71:5f:df:6d:76:79:
27:f4:75:38:71:6e:0c:ac:b3:ef:aa:a1:b1:87:50:
18:e4:bf:73:8a:c4:eb:e2:39:11:3f:16:ad:2c:43:
f4:c1:c3:b5:3f:91:2f:b0:b0:13:bb:75:f5:48:97:
78:37:bb:89:37:6f:01:df:e9:c5:cc:b5:49:02:56:
82:a4:30:3c:00:c1:7c:fc:d2:9e:2b:52:b0:69:dd:
3a:3b:4f:13:67:83:9c:95:c0:fe:43:b1:e6:36:53:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:99:4F:11:FC:92:56:2B:B3:CA:50:57:BE:0D:68:E2:BE:5F:1B:88
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7c:20:74:16:4c:90:79:3b:07:d9:dc:ca:f5:d3:f5:94:1f:
c4:fc:53:dd:49:28:62:e3:75:d7:2f:6a:f8:b3:21:a5:7d:44:
38:0b:71:73:20:ec:1c:53:91:f7:9e:81:4d:a6:24:6e:1c:d0:
59:fd:43:fa:d1:74:ae:15:79:5e:a9:5b:03:29:2b:a9:e8:f5:
2f:f0:11:3b:8f:56:19:a0:a2:94:04:01:8e:a3:86:3e:ba:24:
19:df:c8:52:fb:a8:83:d7:d5:b5:70:e2:a4:c2:bc:3f:22:ef:
36:8f:98:81:57:fc:50:ba:ba:a4:71:a0:16:49:bd:c1:b2:2e:
1b:4b:83:4f:c4:0f:eb:8a:ea:a4:6d:3f:44:1e:be:12:01:66:
db:f1:aa:aa:c1:0c:07:ed:d2:0c:a6:6f:c1:08:0d:91:9b:05:
17:99:32:94:3c:36:38:d9:32:12:81:89:bc:8b:42:33:9d:bd:
6b:0a:89:f2:cc:52:c4:c8:e8:20:2a:03:fc:ec:f8:7b:a8:58:
05:5d:37:8a:35:69:76:ec:70:0c:6f:15:a1:65:fb:7a:55:ea:
b0:35:e0:74:f9:eb:91:4c:84:11:93:5b:79:5e:4a:b4:b8:41:
20:05:15:25:13:a8:7e:20:ff:b4:bf:3c:15:85:cd:c0:ee:c8:
49:fe:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:03 2025 by rpki-client