Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: /CDxwVPPkHrJtUR7UQpbTyY1C2G50nxC3eGpXXhm+E8=
Subject key identifier: AA:E2:09:BF:4D:A0:28:FF:D4:34:92:C1:CE:CE:5B:2B:FD:D9:9C:1F
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 01974855610483F3339EE69D5BCF0F093E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 07FD
Signing time: Sat 07 Jun 2025 03:00:44 +0000
Manifest this update: Sat 07 Jun 2025 03:00:44 +0000
Manifest next update: Sun 08 Jun 2025 03:00:44 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: iaFiNaJ0BzusjGqVPBqEf2SVq1C9llQKwUK+/FP+Txs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:61:04:83:f3:33:9e:e6:9d:5b:cf:0f:09:3e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Jun 7 03:00:44 2025 GMT
Not After : Jun 8 03:00:44 2025 GMT
Subject: CN=aae209bf4da028ffd43492c1cece5b2bfdd99c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:4f:34:98:d8:29:5b:06:07:4e:c1:d5:8d:
da:be:f5:54:d1:6e:1a:bb:da:9a:72:d6:e3:64:ac:
e4:3c:a3:d0:c2:0f:4c:fe:1b:50:f3:97:14:d3:e6:
de:6f:54:fd:cd:9f:9e:da:e9:70:1c:d6:92:4c:66:
84:ba:29:a6:93:c1:eb:ee:9e:2d:8f:ca:c7:d6:f8:
50:d4:c1:13:5c:a6:66:8c:bb:8f:04:2d:53:f9:96:
5a:6e:a2:f0:86:b0:8f:a2:b7:9b:15:45:e0:a6:61:
78:0a:11:d5:9f:64:70:27:39:e0:86:7b:b5:e7:e5:
d4:f2:f9:43:bf:39:8d:05:64:50:0f:18:9a:71:7a:
2e:72:a3:a0:67:d2:dd:92:1a:c3:a9:13:e8:b3:98:
a0:24:e2:76:f0:56:e2:be:79:2a:b6:74:77:f8:2d:
ca:42:89:60:3c:9a:96:67:09:19:1a:11:0d:f6:4e:
fd:8e:e8:e6:c0:c9:ca:7d:fe:80:09:ba:17:3c:46:
82:13:71:d9:ce:c9:c4:12:64:31:8f:3f:40:dc:fe:
84:19:5c:8e:bf:e6:f0:9b:ae:4c:14:7e:b3:06:fc:
f8:6b:cc:17:be:b8:c1:a6:e5:fd:b5:ae:33:01:42:
d1:cb:1f:7f:df:b6:b8:95:94:81:7e:a1:40:8c:e9:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E2:09:BF:4D:A0:28:FF:D4:34:92:C1:CE:CE:5B:2B:FD:D9:9C:1F
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:97:33:c1:a1:c5:05:58:fb:37:3e:a8:b9:98:c7:d6:c3:78:
f1:42:65:76:02:15:ab:09:07:c0:be:9c:1b:50:40:22:ea:7f:
fa:c9:1a:52:de:84:da:87:33:25:8e:c6:c3:56:41:95:26:b6:
d8:92:36:89:09:cc:44:01:56:62:1e:7a:a4:61:da:23:95:bb:
47:8d:17:70:4f:28:b9:db:9b:9b:ca:3a:97:be:b8:bc:eb:41:
bd:a2:64:0f:7a:13:31:51:a6:89:27:d6:6a:91:75:34:79:55:
8d:33:44:c3:ba:45:35:cb:49:03:41:9a:4e:a8:6a:b0:bb:ce:
60:0b:d0:3d:d5:e1:69:96:4b:8f:01:f1:cb:f8:38:73:b1:32:
28:75:f3:5b:5d:46:09:31:19:47:79:d0:ff:dd:54:d7:bd:ed:
c8:dd:21:6e:a8:3c:21:6f:2b:e1:d4:c6:61:ac:bd:42:c7:21:
0d:e1:cc:73:4a:c7:a3:f1:ab:1f:70:89:64:6e:20:2c:75:c0:
15:2b:82:94:83:f2:26:e4:90:6c:2e:e9:8f:0b:8b:4b:45:e4:
45:70:fa:81:d7:60:74:1a:f8:b2:15:3a:b3:ca:9e:d4:f7:15:
db:2e:3d:b2:d0:b4:ef:75:f1:0b:c5:3b:d7:52:94:f0:61:c9:
37:bb:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:45:28 2025 by rpki-client