Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: g5Sm9wnScrg3qw7f6g9YasW9zvje+a4aIkXM88J8y/s=
Subject key identifier: DE:4C:9B:9B:EE:E8:22:38:CA:B4:F0:E4:FA:63:36:3C:E5:5B:85:E9
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 01974CD79350BD2B68E7C05BEF36AA59EEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0A5D
Signing time: Sun 08 Jun 2025 00:01:25 +0000
Manifest this update: Sun 08 Jun 2025 00:01:25 +0000
Manifest next update: Mon 09 Jun 2025 00:01:25 +0000
Files and hashes: 1: 5z9bF-s7mwN_rrIwiP6BUqF8WSI.roa (hash: UYifmQ1R2PC8Hli/npCQiOLYGwkMeaviE7TQe/6mbAs=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: aroQiHFPuHIBd16abwWAZaQSkWINh5f9eFlZy6rHtew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:93:50:bd:2b:68:e7:c0:5b:ef:36:aa:59:ee:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Jun 8 00:01:25 2025 GMT
Not After : Jun 9 00:01:25 2025 GMT
Subject: CN=de4c9b9beee82238cab4f0e4fa63363ce55b85e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:33:8a:96:df:a2:b7:3d:c2:da:00:60:4a:
9b:2d:22:a1:e4:82:97:db:44:36:39:7f:97:f9:3a:
f9:73:3b:c6:d1:d1:1a:7d:e3:e9:13:90:0b:97:5e:
cd:26:a1:21:75:39:52:e3:88:8c:d3:ea:c8:a3:2f:
5d:9f:5f:3d:fc:e9:40:17:50:13:70:50:75:19:55:
8d:c1:8e:cf:5e:59:45:d1:bc:f9:72:aa:d6:50:51:
45:ab:ed:fe:f3:b8:c0:b0:c2:66:b1:e5:6c:18:ef:
41:98:43:89:41:0a:62:cd:91:e5:f3:f0:f7:19:67:
e4:c4:38:6c:13:be:62:42:13:47:c8:bb:92:1a:9c:
19:74:de:3b:e2:bf:cc:07:7d:95:ed:0c:12:c6:ef:
bc:4f:f6:61:40:d3:cd:91:86:0e:3d:79:be:96:98:
fd:3a:fe:f8:14:3a:ee:53:a1:01:f2:20:07:e5:b1:
72:af:be:f1:5c:d1:9a:82:54:7e:88:5d:29:39:e3:
80:e2:96:43:ca:28:c1:ea:6f:a4:4a:8b:ef:35:68:
e4:bc:93:38:06:93:61:91:0b:de:2f:6f:db:5d:a6:
35:ca:4a:6c:f3:a2:fb:45:4d:21:11:47:2f:3c:50:
be:e9:cd:eb:9f:16:14:1d:5f:d3:56:83:30:91:83:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4C:9B:9B:EE:E8:22:38:CA:B4:F0:E4:FA:63:36:3C:E5:5B:85:E9
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:79:ed:0c:a8:f7:cd:67:d3:68:74:8f:97:84:5b:57:97:92:
a5:72:16:99:f2:7d:bd:c7:08:e9:5a:bc:51:be:d3:33:13:86:
98:d8:a2:2b:ce:f4:50:b5:92:79:4c:70:ab:b9:a6:57:e3:b1:
4b:1b:b7:19:56:27:47:a5:0a:a2:6c:a6:48:44:8e:54:4f:8f:
21:a9:22:8b:f9:0c:aa:09:cf:63:13:fe:14:8c:c7:93:36:a9:
c3:91:77:0f:bf:40:1e:dc:ae:ab:5d:a5:34:55:2a:d0:bc:4f:
fd:ec:7d:e6:e8:0c:7a:61:e4:5d:15:5e:4e:01:79:6c:56:f6:
43:86:2f:2b:74:5d:59:4a:c1:9b:fe:d1:7a:a2:03:55:99:51:
ef:53:18:da:61:84:c1:ee:96:fb:be:22:7f:52:1f:82:cc:75:
99:42:2b:bf:c8:38:0c:a6:6d:bc:8a:d6:f8:db:e7:63:12:99:
5b:3e:0e:74:6e:0b:5c:04:08:5c:48:cb:8d:f8:8f:97:f1:45:
df:cd:f3:89:22:bd:e1:45:53:a9:9b:37:25:78:15:5a:47:07:
4a:a0:33:0f:6b:5c:d6:94:b0:68:00:c3:98:8e:fd:ac:06:3b:
ab:0a:8f:e7:72:8e:df:1b:23:08:4a:20:b1:e7:ed:26:42:ee:
44:40:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:52:14 2025 by rpki-client