Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
File: rO9NpWy5QNny99Ahryph-9OxTqg.mft (raw, json)
Hash identifier: kXFGrQCNIC4U1dzdqNj6/RCRO2A9lW4JY8HznYO9w0g=
Subject key identifier: 1B:F0:AB:7B:D5:B8:C4:F5:AA:EF:59:BA:5A:C9:2C:D6:9C:E5:71:E7
Authority key identifier: AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
Certificate issuer: /CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Certificate serial: 01976327F1AC45726034D7CDF53C3D30E0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
Manifest number: 0B92
Signing time: Thu 12 Jun 2025 08:00:51 +0000
Manifest this update: Thu 12 Jun 2025 08:00:51 +0000
Manifest next update: Fri 13 Jun 2025 08:00:51 +0000
Files and hashes: 1: csc62_075z-O1jbjAbm_rCnKZRc.roa (hash: Tb7p7/2jlLjl4/3NDouCmjK2S/QTfoZSS+7FIIdOEgc=)
2: rO9NpWy5QNny99Ahryph-9OxTqg.crl (hash: IHNSzWLANLccuFwqHOkpqyBbp/mpVoXS3Tsz9R1pFWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:f1:ac:45:72:60:34:d7:cd:f5:3c:3d:30:e0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Validity
Not Before: Jun 12 08:00:51 2025 GMT
Not After : Jun 13 08:00:51 2025 GMT
Subject: CN=1bf0ab7bd5b8c4f5aaef59ba5ac92cd69ce571e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:d1:1c:4e:43:a0:49:ed:df:46:8c:60:4c:
83:79:c4:cf:76:80:9a:d2:24:de:21:dc:c7:68:64:
ff:de:7a:79:1b:d5:6d:5c:54:1d:cc:75:3f:64:b7:
bd:c4:fe:f4:bf:f1:0b:89:d9:30:33:a8:a3:34:cd:
a9:04:ac:c2:60:06:a4:25:82:3d:86:ae:b5:d2:16:
20:3a:7d:8c:26:d0:80:01:77:63:52:05:1c:13:57:
f3:a7:87:7a:b9:84:a8:b0:8f:24:11:13:28:eb:b6:
81:e9:63:5a:b0:15:12:20:02:cd:d6:5c:f8:8e:55:
4b:9a:9d:69:d1:ed:9e:4f:f2:99:76:0d:f7:23:71:
6e:83:95:2a:02:d5:b2:36:13:03:b3:b6:8d:23:04:
f5:82:9f:28:80:5b:41:ff:72:6c:56:44:a9:27:03:
ba:36:38:20:c9:27:f4:35:88:c4:bc:3b:72:5c:4d:
91:74:a9:49:33:87:ef:fb:31:8d:0b:07:80:56:42:
8a:1c:56:17:0d:af:98:c7:bf:d3:4a:f7:d7:05:ae:
9f:07:9f:9d:31:ef:69:c8:f8:e7:45:a3:b9:62:3c:
9c:39:9d:8f:57:32:77:c1:3e:97:b4:72:d1:00:c7:
f7:9c:17:6d:d6:54:f5:7f:c8:ff:78:e9:b6:46:bf:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F0:AB:7B:D5:B8:C4:F5:AA:EF:59:BA:5A:C9:2C:D6:9C:E5:71:E7
X509v3 Authority Key Identifier:
keyid:AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f5:79:7d:44:bd:60:ac:2c:45:4b:4a:03:70:79:c1:09:f2:
3c:55:08:3e:6e:cb:44:e9:30:a2:ac:75:b3:c5:17:0e:df:9d:
29:45:49:18:ea:e2:63:3c:36:c6:c6:f6:08:32:dd:2c:5b:89:
7b:16:b1:0d:19:13:02:ae:48:7b:89:c1:4d:8f:8b:78:95:d7:
5c:1a:74:15:48:e4:ae:83:1c:e0:dc:75:e6:bd:22:fa:ab:92:
5a:dc:c9:d1:31:9c:b1:98:90:0a:d8:9f:27:1a:a2:7e:78:a2:
e5:42:f1:c0:ea:6b:7e:e3:94:92:19:fa:10:14:b1:e1:f4:a1:
90:8a:5b:cf:54:90:f5:bd:17:63:44:ec:30:c1:2c:fa:ff:81:
b8:65:cd:bf:4f:44:96:37:eb:40:7e:30:8a:0c:7f:a3:6c:13:
36:e1:a5:e6:ad:ab:c9:cd:38:f0:24:ef:68:53:cc:b6:6d:13:
79:a2:80:1c:37:e8:19:b2:04:01:70:aa:e0:28:bb:67:38:1a:
61:72:aa:1e:dc:f6:f1:db:08:96:8b:2b:e8:e0:39:65:66:dc:
99:ec:b4:ef:97:2e:cf:1e:1f:f3:43:05:32:cb:e8:f7:fd:7f:
0d:99:28:09:25:28:fb:b6:d3:19:0c:ca:2e:4e:34:dd:c4:2a:
25:14:ca:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:01:35 2025 by rpki-client