Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: SOJG3sd6VYCh9isY0mnQXeBriLTJQGg7+BMPCzHkMfg=
Subject key identifier: 39:4B:49:00:CF:AE:C7:95:65:18:0F:B0:A7:DD:CD:5D:A8:B2:DF:7E
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 01975A24E20E69106E521DAB9BE3F3AAFC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 09F9
Signing time: Tue 10 Jun 2025 14:00:55 +0000
Manifest this update: Tue 10 Jun 2025 14:00:55 +0000
Manifest next update: Wed 11 Jun 2025 14:00:55 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: rklDQgDPBlguPJMJfiBBx8xdTbPFOkCh1sSFpO9GDVE=)
2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:e2:0e:69:10:6e:52:1d:ab:9b:e3:f3:aa:fc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Jun 10 14:00:55 2025 GMT
Not After : Jun 11 14:00:55 2025 GMT
Subject: CN=394b4900cfaec79565180fb0a7ddcd5da8b2df7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:6d:d9:00:fe:eb:e9:9c:4d:c0:08:f2:0c:
da:9d:bf:f1:39:5d:07:fd:34:f4:e2:a4:eb:6f:e7:
e9:06:12:61:6f:31:f9:fa:6e:69:1f:cf:0e:3a:12:
fe:be:15:90:37:a8:8e:92:e1:4f:40:4b:11:c6:7b:
cc:83:20:bb:0e:ab:91:85:b2:d0:b8:bc:44:fd:5b:
91:41:13:6d:33:af:4e:52:db:c9:fb:c7:4d:6d:23:
58:52:08:42:e8:e7:05:8a:f4:b7:0c:e7:94:44:db:
dd:7f:f3:1c:84:91:6b:95:fd:0b:79:10:6c:40:95:
2c:5e:56:0b:18:ed:28:38:b6:88:db:b2:b3:0b:13:
97:07:d5:6a:01:49:e8:b7:ec:dd:7f:50:d8:a9:21:
72:8e:fb:fa:2d:65:d9:3b:e3:57:25:7a:e5:64:ad:
15:e3:c3:ba:6c:bc:05:58:ea:df:4b:5e:2b:62:3c:
2d:fd:8f:8d:3c:b2:0e:e0:c2:1e:56:77:98:b6:49:
7e:71:14:5f:45:73:e9:50:77:d0:09:42:a8:13:d3:
48:fb:4a:60:a7:b7:a1:47:04:43:ed:7d:6e:6d:35:
81:d3:47:91:43:de:a6:e4:39:42:70:25:ef:c2:ef:
97:97:46:a0:d6:59:3b:5e:a6:9b:2e:65:08:f5:b0:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:49:00:CF:AE:C7:95:65:18:0F:B0:A7:DD:CD:5D:A8:B2:DF:7E
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:90:fc:ee:17:99:3e:bc:38:26:a3:02:54:49:e7:39:7f:0d:
28:38:67:b8:e5:29:e7:05:c8:35:89:72:b2:d9:9c:eb:c0:73:
9c:61:37:e9:23:0a:05:98:80:6e:c4:4e:33:09:81:66:da:01:
7f:fe:7c:2a:3c:fa:08:2a:97:99:31:dd:4c:a1:6f:d5:d8:cf:
94:27:2b:7c:2c:de:ab:64:ca:cb:98:a7:21:41:51:63:d1:e4:
2f:95:e3:2d:5d:9e:91:69:55:66:b2:9d:68:99:66:57:9a:c7:
92:8d:6f:07:f0:16:45:20:b6:4b:03:d3:47:41:ab:1b:95:52:
9b:07:a2:67:6a:66:c5:82:4a:8d:7c:80:e5:fb:1e:19:ae:d1:
65:f7:ff:44:59:12:02:52:14:44:4a:ef:40:65:81:9c:1e:e6:
6b:a8:85:6f:7d:32:d5:fd:0b:57:a1:12:ca:fa:73:cd:9c:00:
22:a9:1b:ea:fc:1d:b9:4a:bc:e2:bf:c7:7f:8c:f9:6e:94:6d:
25:62:a8:70:44:ad:7a:67:c3:b8:01:22:92:8d:dd:e6:0a:d6:
00:a5:9a:aa:23:3d:a2:39:00:4b:93:30:05:f7:af:ed:c4:f5:
fe:54:e2:32:47:a6:a3:46:cb:f1:d3:d1:bb:04:f2:63:77:35:
6e:b9:16:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:23:58 2025 by rpki-client