Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File: 95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier: Nq9/kRfbGWXJkYrswxq6rkoOJ3d2nbEkmtTKrX9WMEk=
Subject key identifier: 30:9C:A9:26:26:37:F3:C9:03:7E:CF:72:DC:2F:A0:75:FD:5D:F6:DC
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 01974B8D917D559C41949772484679C45BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number: 016C
Signing time: Sat 07 Jun 2025 18:00:58 +0000
Manifest this update: Sat 07 Jun 2025 18:00:58 +0000
Manifest next update: Sun 08 Jun 2025 18:00:58 +0000
Files and hashes: 1: 4l-Zv8K6ETH50yhj6WB6p_9kG5U.roa (hash: WZUkyIubye+CfD08jpYH88w+qgPDHpHskfJideChpzA=)
2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: VbGz36nmxEczZlskdHt/ZJN+XaTLWcWaylOXPk6Waqc=)
3: j3Oyq8JqDxuALVsoYZ8HUUlXRsg.roa (hash: sQk1B/xzqfsEvcOrYOl9cKYJ2dzcQHRmxEIBCkf00NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:91:7d:55:9c:41:94:97:72:48:46:79:c4:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Jun 7 18:00:58 2025 GMT
Not After : Jun 8 18:00:58 2025 GMT
Subject: CN=309ca9262637f3c9037ecf72dc2fa075fd5df6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:da:eb:ca:93:ca:e6:57:92:b7:b1:db:09:
fb:f4:3d:f4:d4:42:41:eb:68:a9:aa:fe:1c:e7:13:
e9:b5:2e:22:a0:80:0d:d1:32:63:a3:72:73:ba:ef:
e3:bc:82:0d:4d:54:61:70:4e:58:77:2f:96:db:ed:
7b:ef:ed:04:d6:60:e2:f7:8c:a9:a2:24:72:6b:2e:
a6:22:1d:45:46:ba:16:be:cb:a4:27:bf:9b:d1:d2:
6c:ce:2f:3d:bc:ff:f9:3d:8b:47:72:ee:da:9d:aa:
6b:e1:b8:26:51:d5:6a:97:7b:f7:c7:20:a0:25:d2:
7c:06:76:95:2a:e4:ec:99:e8:cd:94:da:fe:f9:a7:
8a:39:47:ff:dc:b2:1c:58:05:c2:f8:bf:4d:b7:e3:
26:5a:56:0d:58:d0:c9:17:f3:b5:c4:58:39:11:77:
0b:a0:bd:0b:47:1d:02:72:37:47:6c:5c:00:cf:6a:
26:6a:4b:6c:93:ae:6f:58:34:4e:bc:74:75:5c:9a:
57:f9:b0:dd:ad:7c:55:cb:58:55:96:f9:da:e3:b3:
2f:35:09:ce:74:53:d4:6a:fc:ea:0a:7a:0b:0d:6a:
40:3c:90:75:82:ee:ec:4f:19:66:6e:e8:fe:43:f6:
2e:6b:c6:be:48:b8:16:b5:00:41:fe:f7:e1:31:e1:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:A9:26:26:37:F3:C9:03:7E:CF:72:DC:2F:A0:75:FD:5D:F6:DC
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0c:f1:fb:09:14:1f:21:86:71:db:26:d6:61:3d:ec:23:00:
14:f6:38:26:1b:fa:0b:25:b0:b5:46:5e:4b:78:78:0d:bb:15:
59:1b:35:52:0d:61:78:26:59:cf:e5:0f:90:c0:1a:1b:3b:de:
9f:a6:87:48:cf:6e:a1:33:54:b7:3b:76:b1:ad:a5:51:07:82:
18:5d:7d:63:64:3e:56:7b:20:ad:c1:6b:f7:97:9a:d6:47:c3:
ff:fc:70:14:90:03:31:d7:02:98:87:bd:ea:08:d3:69:d5:bb:
13:22:72:73:f3:8d:39:18:c3:ae:05:f8:3f:bf:c8:87:f8:c5:
f5:18:aa:6c:78:af:c9:c7:0d:e1:79:b9:d4:38:45:3a:d9:f5:
83:38:72:2e:53:1f:05:29:60:7e:84:e9:01:27:7d:4e:45:e7:
3c:62:0d:24:27:4e:f1:7d:59:0a:d0:a5:13:8e:03:bc:af:69:
6e:8c:cd:e1:30:48:c9:81:ed:56:f4:a6:e9:61:fe:cd:6d:8e:
da:5a:77:77:cb:85:2e:c4:a8:78:7f:d0:82:86:b9:a7:b4:b6:
3f:53:8e:6e:2a:e7:65:ca:d9:dd:2d:da:36:79:89:c4:fc:4c:
ce:b2:ce:54:69:fc:0e:52:1f:f1:9b:c3:79:e5:5e:38:41:a5:
b3:92:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:16:52 2025 by rpki-client