Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File: RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier: ocFfC3qbAs+4R/iryY9Vcddgei0iiHilDsvzE0L4l3k=
Subject key identifier: 42:9C:2A:62:BF:56:BA:6C:68:1D:D5:86:DB:42:FF:04:83:1C:48:73
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 01974A43B8CDF63B4713D0E8CB496FD8E409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 12:00:41 +0000
Manifest this update: Sat 07 Jun 2025 12:00:41 +0000
Manifest next update: Sun 08 Jun 2025 12:00:41 +0000
Files and hashes: 1: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: 4VWP4JHAOIMZkbKDzJh5po5dfu/3G42Z24PVPb+j4Dw=)
2: Vf-4CzJnj-smUTzjUooDn_4kp38.roa (hash: wRrMrbdEgCzD+5xjbPsOA1jPdBf/YtdoCbQDeiSm5vU=)
3: si7sAmrI6LhMmBgdITfIkRaacMk.roa (hash: ySGkQgyQXdPJ9MCG+8CkylC78C7W6u0+iUG1Hsa05U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b8:cd:f6:3b:47:13:d0:e8:cb:49:6f:d8:e4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Jun 7 12:00:41 2025 GMT
Not After : Jun 8 12:00:41 2025 GMT
Subject: CN=429c2a62bf56ba6c681dd586db42ff04831c4873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:29:f2:46:21:01:30:72:c5:55:af:33:5d:
c0:b4:39:89:d0:21:a1:c8:90:c6:0a:13:b5:ab:ab:
02:7f:58:90:44:2d:f9:e0:0f:80:ab:8f:f9:55:6c:
a5:69:ad:82:42:36:c7:02:d6:c1:91:60:3e:cc:57:
82:79:fe:e6:39:ed:14:23:66:62:4b:3e:f9:cb:26:
bd:fd:9d:6a:29:79:b1:65:11:26:4b:39:0b:a3:26:
f1:1f:9e:a8:c4:fb:1a:76:65:c9:33:b1:c7:e6:3a:
28:66:6b:99:30:30:9a:c3:7f:e3:01:06:e7:cf:29:
c3:cc:fa:0f:8a:88:0d:37:e7:04:30:f8:6b:ac:71:
a6:dd:82:82:5d:fb:6f:c2:1a:fd:40:94:dc:d7:7b:
80:b3:40:cb:2f:08:26:bb:a0:e3:64:4d:73:48:19:
35:f4:81:fc:04:4d:f0:a5:0b:27:bb:40:02:d1:c9:
ac:d0:d9:7e:71:a1:9a:9b:81:cd:c6:0b:c9:98:08:
0f:15:5a:fc:fc:9a:42:89:ea:85:16:9f:94:b1:10:
96:ef:6f:31:fe:0b:3d:3d:cc:d4:b9:91:ba:b8:04:
d4:63:24:a9:fd:c5:c2:09:21:b3:4b:26:c1:72:1c:
dc:9c:35:3a:f7:a6:bf:32:03:ab:4a:00:c2:8c:55:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:2A:62:BF:56:BA:6C:68:1D:D5:86:DB:42:FF:04:83:1C:48:73
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:61:36:36:1c:ae:6b:ca:2e:18:82:ca:ac:48:83:18:1b:
29:7d:4e:0d:16:57:3b:1b:69:4c:cd:bc:1d:34:e2:9f:60:bf:
f1:da:31:86:19:af:93:e8:51:98:4f:a2:f3:75:83:96:07:67:
31:b1:02:df:3b:1f:dd:23:4a:12:cc:9b:6e:b2:3c:f9:17:ef:
d7:95:ab:3e:28:83:22:37:41:6b:18:db:7c:37:01:f2:91:64:
3b:78:06:e1:cf:ef:fb:c8:41:22:cd:e3:1b:5f:a4:d6:b2:a5:
6b:b3:fd:f4:14:c4:4a:e3:11:47:94:3a:b1:b2:21:60:b0:71:
2b:ce:63:ee:3a:27:61:02:04:f4:bb:0f:b6:b9:09:8c:c1:c7:
f5:c6:46:20:66:de:f0:0b:eb:68:b5:40:10:bc:67:ce:ea:29:
3a:1a:56:5a:4e:4c:90:1f:e9:e8:57:f0:cc:a0:6a:09:e5:c4:
d4:5f:40:3f:19:dc:1e:ee:8b:1e:d4:19:07:0a:1e:83:5e:f5:
ef:93:86:18:fd:ff:28:e6:91:e5:62:57:55:fc:72:b0:d4:a6:
3d:ac:b6:66:5c:8d:16:bf:5c:a5:a0:a9:af:eb:d5:d0:be:fb:
96:3b:7c:18:1f:3f:89:15:56:c2:db:26:37:e1:8b:05:bd:c5:
f1:aa:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:27 2025 by rpki-client