Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: OFwz7TaggAABbiQEdtX9R5LCQYtI2HompxCpXy8y5o8=
Subject key identifier: 0F:C9:CB:16:6F:1D:85:DD:9B:EB:86:44:F3:72:4D:EE:58:20:F1:72
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 01974D7BB359B5039B9512990173790C3950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 0473
Signing time: Sun 08 Jun 2025 03:00:41 +0000
Manifest this update: Sun 08 Jun 2025 03:00:41 +0000
Manifest next update: Mon 09 Jun 2025 03:00:41 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: MiL9l9ZDWkh+azDbMZnaNYgBqzM+amBLaGTevbcwPog=)
2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:b3:59:b5:03:9b:95:12:99:01:73:79:0c:39:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Jun 8 03:00:41 2025 GMT
Not After : Jun 9 03:00:41 2025 GMT
Subject: CN=0fc9cb166f1d85dd9beb8644f3724dee5820f172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:c8:17:63:30:02:ed:14:77:fb:57:1d:2a:
da:b4:01:ce:90:a2:bb:11:ee:21:ce:27:85:92:ac:
61:81:21:1a:9d:bc:5e:2c:96:f7:e1:d9:0e:2e:fc:
3d:e4:a5:c8:a3:a5:11:b6:83:02:db:e5:7f:b5:c6:
fc:7d:cd:89:3b:e5:7e:09:19:80:86:24:f4:d6:27:
23:5f:bb:73:cb:5e:0b:c0:6f:52:75:bd:fe:fa:73:
ee:3f:29:5f:72:c1:a0:5e:0a:dd:98:2b:d6:c0:66:
0a:cf:e6:67:3e:9b:45:9f:6e:ac:da:e8:7c:18:9d:
a2:9e:ef:18:df:b6:39:65:a0:f1:49:2a:88:fb:52:
3b:77:c6:5b:9e:7a:41:14:b8:49:4f:c4:6c:92:20:
10:b7:49:7f:12:ad:d8:a4:e0:3d:ef:f6:0e:d0:67:
ac:8d:6c:f0:f0:ee:f2:ab:86:76:1e:dc:14:5f:1c:
fb:1a:25:5a:05:7a:39:d8:e5:95:b8:bb:51:ba:3c:
75:49:98:ef:45:92:c7:6e:c6:e3:97:bb:7d:cc:73:
f7:c2:d3:96:2e:77:31:d0:43:dd:9b:a1:28:99:15:
c6:91:6d:8b:c2:c6:24:6d:0e:35:6a:ce:48:87:37:
b7:e6:d5:a1:17:ba:31:9c:08:18:f8:cd:62:74:40:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:CB:16:6F:1D:85:DD:9B:EB:86:44:F3:72:4D:EE:58:20:F1:72
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b8:95:f7:9c:58:26:69:a2:61:f8:e6:1f:9f:fa:40:07:f8:
1a:66:de:11:2d:40:db:7c:13:fe:d5:a9:0a:05:20:22:96:cf:
6f:78:e6:4f:19:13:3e:80:2b:4d:07:62:6d:bf:67:c9:69:d7:
ed:28:0c:da:ed:e0:e5:d8:e1:85:66:3c:10:2f:4b:22:fb:60:
cd:e3:3e:54:e0:51:a2:85:32:bd:f2:2a:26:26:2c:67:52:a2:
18:90:34:73:b4:4d:70:05:d5:3a:eb:d8:95:48:62:99:1c:71:
15:42:74:33:f7:96:19:1f:83:87:76:0e:dd:c6:30:b8:f0:c4:
79:72:56:a5:c2:93:58:be:1f:87:2b:2a:d9:4f:75:b0:9b:ae:
73:3f:fe:d5:1b:d1:e5:4f:4d:91:80:0e:4c:4b:16:e9:1b:25:
e8:76:15:41:df:2c:91:0a:c7:80:7c:42:9e:37:00:92:fe:1a:
f2:2b:80:de:19:06:87:e5:9c:8d:62:d4:ea:e6:49:cc:2c:9b:
95:4c:af:82:46:b9:ab:b4:17:23:1d:d1:75:14:07:30:a6:6a:
aa:af:af:ee:e5:7a:d2:21:03:ca:6c:2c:ab:13:3e:64:5d:33:
10:86:3c:36:c9:b3:dc:cd:08:fe:ac:d6:eb:64:e4:b7:0c:a5:
2b:a3:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:52:31 2025 by rpki-client