Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: BsRpYCN1dR3XByDDutH0M1tcF5IqrI1v32+i680lNc4=
Subject key identifier: E8:A0:B4:51:A8:18:0A:50:55:64:F6:85:39:39:6C:8A:B1:79:7F:08
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 019844AC7C46337DCC1D7AE2A752BB0777D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0A26
Signing time: Sat 26 Jul 2025 03:00:11 +0000
Manifest this update: Sat 26 Jul 2025 03:00:11 +0000
Manifest next update: Sun 27 Jul 2025 03:00:11 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: oMLXGcpFjsb4yxsVlV7tQVhUk7H53TTL6XFLLq1Q+vY=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:7c:46:33:7d:cc:1d:7a:e2:a7:52:bb:07:77:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Jul 26 03:00:11 2025 GMT
Not After : Jul 27 03:00:11 2025 GMT
Subject: CN=e8a0b451a8180a505564f68539396c8ab1797f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c1:ac:0c:13:7c:9a:eb:d5:5b:19:9d:49:81:
9a:3b:8e:f6:69:6c:72:4e:3f:92:f0:1d:7a:68:da:
bc:78:4e:18:0b:4f:b7:78:44:81:7d:aa:4c:da:4b:
c0:0f:e3:51:6d:c2:99:29:a4:70:db:91:59:6d:bf:
65:df:0a:69:0a:86:5c:66:45:38:e2:fb:fc:68:f3:
07:48:d7:10:a5:15:b2:5c:cc:33:68:8a:a8:12:d4:
82:9c:5e:57:f7:30:a1:43:3a:5b:cd:10:31:9c:25:
c1:5d:3a:c1:7c:c2:8d:81:de:f7:db:c0:f6:14:2a:
98:3f:c4:eb:a2:bf:ce:82:8c:ea:13:03:d6:cb:a0:
db:3e:55:33:ec:4f:b7:94:ec:46:8a:51:e3:9d:43:
4a:6f:b6:bb:fd:6a:67:1e:0c:36:dc:9b:7b:91:cc:
3f:10:b4:91:68:90:b8:1d:4f:b3:06:72:62:c1:89:
92:ce:17:28:b4:28:a8:1b:0b:fb:69:bd:7a:e7:c2:
f2:2e:7e:1b:4f:83:1e:84:c7:0f:49:52:2b:45:39:
d9:22:06:a5:ae:85:58:0e:27:fc:8b:3e:2f:0a:36:
6d:91:75:8b:91:22:c2:72:5d:97:3d:65:4e:04:a7:
db:17:9a:c1:d5:fa:c2:00:e2:6c:0d:8b:8e:67:d0:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:B4:51:A8:18:0A:50:55:64:F6:85:39:39:6C:8A:B1:79:7F:08
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:55:a0:ef:45:a2:55:05:e2:d9:4a:d6:39:31:df:11:6d:c1:
e8:a6:6c:7d:e6:6d:cd:01:c9:8d:c3:03:b1:ad:6a:80:56:23:
f2:5d:6d:3f:27:b9:3c:2d:14:7d:48:b5:6b:8c:ab:5a:0f:dc:
43:fa:3b:b8:87:65:bc:00:66:12:c9:4a:8d:d6:26:97:7a:dd:
e1:7c:1f:5f:f7:a5:f6:3e:64:0b:e8:ac:5e:17:bd:0b:6b:f5:
65:19:91:7a:c5:31:02:38:b6:80:23:1e:3f:16:ba:3d:d7:b7:
af:b5:a6:d3:b6:1b:3e:3a:2c:39:2d:cd:ef:15:30:e9:8c:ba:
9c:fb:12:df:85:ad:b2:c8:f3:5e:f9:12:6b:41:a1:99:01:fc:
62:c4:61:4a:80:1b:bd:e1:04:56:ea:33:62:50:e1:98:67:47:
d0:8a:d2:65:47:5b:0e:46:3b:65:ae:6e:71:06:fe:38:15:87:
6b:98:3f:4c:c5:6b:de:1e:43:7c:f3:64:09:21:78:f3:88:a4:
84:cd:92:c6:60:69:43:50:76:ac:16:46:77:36:e6:63:6d:21:
3e:e6:f1:45:1c:51:3e:ef:1b:84:dd:93:a0:5d:de:61:7e:58:
d9:88:75:29:19:4f:65:51:e7:3b:3b:d0:47:2b:76:4f:d9:79:
7c:1d:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:23:46 2025 by rpki-client