Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: bjkPRqbGwRQTlpXrYl5196ghS9g56I+nadxHqQXG0ew=
Subject key identifier: 33:6E:FB:51:AA:31:5B:16:CD:B1:1C:07:35:55:53:F2:07:91:49:8E
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01974A0D0213031A83E39BA0DCB0EB80B8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0E7E
Signing time: Sat 07 Jun 2025 11:00:55 +0000
Manifest this update: Sat 07 Jun 2025 11:00:55 +0000
Manifest next update: Sun 08 Jun 2025 11:00:55 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: we0xQlcm6gvRAg93cjvzvQpWZMi/C5w7i8bifnXJRn4=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:02:13:03:1a:83:e3:9b:a0:dc:b0:eb:80:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jun 7 11:00:55 2025 GMT
Not After : Jun 8 11:00:55 2025 GMT
Subject: CN=336efb51aa315b16cdb11c07355553f20791498e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:88:c0:d8:c1:f7:07:4c:36:a2:17:2b:ef:
25:1a:3f:fb:69:af:6f:05:60:27:31:9c:a6:08:50:
03:d7:af:a9:db:02:bf:ff:45:a1:88:eb:db:39:9f:
8d:02:f3:98:12:0f:b7:a9:8b:6e:37:c8:95:8d:86:
a3:87:a5:d9:25:08:6e:01:3c:79:e4:dd:78:ea:c2:
5d:58:1b:34:4f:ad:24:f3:ff:1b:9c:75:ff:a6:53:
6b:b4:17:6d:b8:d9:64:33:9f:f0:8b:77:c5:67:45:
e3:8e:98:6c:bd:88:c9:25:8d:f6:fa:19:b6:67:be:
02:6a:8c:52:1b:e8:c0:2b:67:2b:8a:36:6b:0f:e8:
78:0b:82:71:27:53:88:a7:e7:f2:80:cb:b3:81:b7:
9e:05:fe:0e:d1:f4:59:36:2c:44:49:f9:68:f7:57:
26:de:95:4a:0d:29:40:7a:64:25:2a:71:6d:ed:4f:
6c:4b:f8:c5:fd:ac:bb:a3:06:3e:59:75:4f:d1:21:
99:46:26:31:7f:ad:1d:8e:e4:a5:43:af:d0:80:82:
db:44:43:bf:bb:a0:bc:2b:7b:99:ac:97:65:f6:94:
d0:12:c1:50:4f:29:f9:3d:58:b9:a8:95:1e:82:07:
8a:b1:0d:3f:56:1b:35:b8:3f:ba:05:40:a7:fc:09:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:FB:51:AA:31:5B:16:CD:B1:1C:07:35:55:53:F2:07:91:49:8E
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6c:f8:37:d9:00:d0:74:e3:57:68:d5:7e:1f:01:80:fa:0b:
d0:9f:f7:03:28:0a:b3:ca:44:94:2e:86:8f:17:40:50:04:1b:
d1:7b:55:0e:f4:30:cb:fa:2e:17:81:54:32:fa:3a:50:d7:17:
da:46:3c:4a:3a:67:5f:1f:55:26:56:32:1d:49:37:5f:d5:77:
12:1a:f8:a2:24:de:e9:2d:96:c9:1d:4b:3f:a4:b5:68:b9:5d:
35:d4:a8:95:b6:15:7e:49:20:73:e5:78:36:cf:5e:86:fa:87:
c4:f7:e5:61:25:cc:d7:87:6b:df:1e:11:e4:f2:3d:7a:9d:a1:
d0:76:c1:72:d6:7e:95:ec:1c:be:c4:a3:2a:e4:22:a7:80:33:
e7:6b:8b:b7:15:3b:29:c0:f9:de:7e:59:6a:5b:e4:bd:de:0c:
37:95:2a:a8:5a:21:19:89:5d:95:74:f5:01:8d:27:f8:0a:68:
61:cb:47:c2:f5:ce:d0:c4:ec:fa:65:30:2d:94:c1:20:ed:4b:
44:91:bc:3b:03:c4:26:96:0d:a1:5d:95:7d:c2:9b:94:c5:71:
94:2b:25:c9:82:9d:a5:65:c8:18:41:7a:88:b4:5c:6e:6e:61:
39:ce:83:a4:97:21:cd:6c:18:59:ca:2a:93:6c:2c:b4:74:6f:
0e:e0:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:23:23 2025 by rpki-client