Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: pbR8OSGJMeAI6cIGGZyRhnAxrEz2JKbGrn6e9jDKzLM=
Subject key identifier: 09:95:20:DC:1C:65:C0:44:9A:43:71:B7:EB:0F:9A:C4:30:E4:D2:AA
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 0197C982A67668377B8F75F4687FB0094F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 12CE
Signing time: Wed 02 Jul 2025 05:01:12 +0000
Manifest this update: Wed 02 Jul 2025 05:01:12 +0000
Manifest next update: Thu 03 Jul 2025 05:01:12 +0000
Files and hashes: 1: 7IOpXXsSdgZOXKMUMqGRoYqSO7Y.roa (hash: eWhYbG4w7zhq0NpzbdSAGZQzXbPmck0Kggk9IJsP8fM=)
2: 8McigDSjzbaDusYUdfACWlAEraE.roa (hash: 8SiJAwZ4dMuVXUj8DbNfpd2t9t4+7zlehuNbJBAbbw4=)
3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: DL61Hp/aPlxfDoz7UOYqJ8KHv22mEIvqKIBsNHJFfE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:a6:76:68:37:7b:8f:75:f4:68:7f:b0:09:4f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Jul 2 05:01:12 2025 GMT
Not After : Jul 3 05:01:12 2025 GMT
Subject: CN=099520dc1c65c0449a4371b7eb0f9ac430e4d2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:ba:8f:be:e1:0a:a6:63:38:55:0a:e8:10:
98:52:fe:ae:9a:24:e5:bb:d4:a0:b1:9d:36:ca:a7:
57:44:c6:93:50:39:09:89:ef:72:80:dd:04:5d:9e:
e8:a2:aa:d4:c1:a3:88:9a:ac:0f:cb:65:f2:5f:ca:
6f:88:60:06:e3:83:15:8c:03:d4:64:2d:fc:15:71:
59:ec:33:eb:c0:8a:8a:b0:65:26:57:c4:b9:23:56:
9c:ce:36:9c:2e:fa:a9:da:3b:4e:52:95:b5:a4:c8:
67:7a:cb:50:4c:3e:dd:da:7b:ee:a2:bf:3f:59:91:
23:90:a3:23:4c:d9:05:47:71:f3:70:23:79:62:1e:
bf:60:9f:ee:ad:dc:9d:9c:9c:b7:71:c7:d7:68:78:
a3:b4:2b:1a:a4:fd:a0:e7:0b:93:ef:9b:36:95:88:
1e:67:9a:b6:05:cf:47:45:75:93:e1:70:50:6d:63:
62:d2:6b:4d:a4:b4:1c:5b:f7:c4:e4:d5:56:4c:20:
b8:78:43:21:50:d2:e3:b3:cc:d8:21:e4:f9:b7:b0:
12:b4:b8:31:15:bd:ee:13:94:19:b9:2f:c8:2b:42:
52:39:e1:29:d8:4a:a9:78:3c:72:d8:8b:e3:35:b2:
4b:4a:91:7e:7f:77:d2:e1:08:59:10:2e:5f:1c:17:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:20:DC:1C:65:C0:44:9A:43:71:B7:EB:0F:9A:C4:30:E4:D2:AA
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8c:15:bd:6d:e5:41:f0:47:9f:c5:9e:8f:4d:03:96:31:93:
96:15:0a:60:d3:ce:b4:67:4f:29:09:b8:1d:6b:56:73:ad:df:
cf:6e:79:91:0e:2f:69:07:1b:85:7a:c1:48:3a:ee:02:29:9e:
0a:20:76:ab:1b:4e:f7:34:c8:f1:6d:b6:dd:fd:e0:27:08:bc:
17:23:67:90:61:65:ab:4d:7f:09:4a:3e:a6:97:b1:b4:f6:62:
71:fb:c3:16:80:7e:8c:b9:7a:dc:56:98:e9:ed:14:19:5f:85:
4f:fc:c4:b1:20:1b:e7:fa:20:74:0c:82:30:79:77:8f:ff:7c:
bf:3c:db:13:5a:43:05:fa:bb:10:2d:80:3b:45:ef:d9:34:c3:
3f:5a:7c:17:5f:86:84:6d:1d:77:59:8a:b3:30:2d:fc:07:81:
da:c0:4a:ef:c3:e1:5b:5b:83:4f:9c:d8:d8:74:d6:8a:7f:e1:
01:e1:1a:45:36:cb:2a:d8:bc:cb:d7:a8:ed:b0:70:f6:84:98:
b9:4a:2f:51:66:50:95:b7:45:30:c3:69:31:59:45:60:b5:65:
e9:50:ec:54:b9:25:c0:59:4c:58:36:12:24:70:26:3b:e2:1c:
09:8c:79:a1:92:6a:60:99:ef:52:e2:6f:39:80:a2:67:f3:70:
62:17:04:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:21:04 2025 by rpki-client