
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: UWFFfbVMkMdoY9NR1CE5YR8ZAcgjhj2qIkKP24vwY5Q=
Subject key identifier: FC:A7:5E:FE:42:4A:C5:16:A1:CD:9C:02:FB:E2:C2:A1:44:74:8C:33
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019752D8D519FAAC47F51C1CAA34C0A237CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 12B8
Signing time: Mon 09 Jun 2025 04:00:31 +0000
Manifest this update: Mon 09 Jun 2025 04:00:31 +0000
Manifest next update: Tue 10 Jun 2025 04:00:31 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: AqhA9hZJixqALCH1L20lqluQyEcRPNmRb25lWzatggo=)
2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:d5:19:fa:ac:47:f5:1c:1c:aa:34:c0:a2:37:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jun 9 04:00:31 2025 GMT
Not After : Jun 10 04:00:31 2025 GMT
Subject: CN=fca75efe424ac516a1cd9c02fbe2c2a144748c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:91:95:41:17:b6:c7:cd:ad:af:a8:b9:6d:
f1:b7:5c:a2:d1:53:a6:60:5f:13:1f:73:f2:dd:f6:
a6:1d:a2:76:1d:a6:9b:83:f8:1e:60:b1:a7:f6:62:
c2:d3:af:61:d8:12:c6:18:7f:e3:8d:a5:2b:f1:52:
3d:d5:2a:23:20:52:33:84:d1:25:eb:68:70:af:c6:
64:c5:5c:09:02:03:3f:bb:e1:f6:0c:29:8a:31:81:
66:5b:57:f3:43:75:3e:59:df:96:4f:67:9d:9c:c8:
89:06:e6:82:56:d2:fe:51:08:7f:36:dc:54:05:65:
28:ac:dd:90:94:65:46:6a:7a:8f:08:b6:a6:e8:ea:
40:16:e7:08:83:42:84:1a:87:b0:d3:d3:27:9c:31:
34:67:b3:52:84:67:94:f0:e9:4f:45:4d:d1:f0:40:
76:59:90:50:57:e4:9a:da:3f:c5:7e:13:2e:4c:14:
7f:89:ec:e0:09:9c:ff:02:ee:33:89:55:3c:42:e7:
cb:1a:ff:70:46:b8:32:07:3b:f4:f1:c6:3c:9c:c8:
65:1a:9c:37:b5:d8:22:66:b3:01:42:54:e2:ae:0b:
23:f7:c2:8f:85:68:4e:92:59:57:40:5d:76:03:e2:
04:3f:79:ac:08:65:08:53:5f:ad:9f:ed:7e:de:25:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A7:5E:FE:42:4A:C5:16:A1:CD:9C:02:FB:E2:C2:A1:44:74:8C:33
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1d:f9:c2:0f:fa:58:3d:3c:9b:57:1a:59:05:e1:4f:8b:98:
4b:3b:71:4a:7a:fd:b9:2b:82:61:eb:47:97:30:24:12:8f:4d:
a7:09:7c:a6:b2:1d:10:63:21:74:b7:d2:c1:7a:51:6b:f8:2e:
84:bd:f5:cd:39:6f:ae:39:9b:6b:4a:5a:38:ae:d8:e3:b3:3a:
37:5a:b3:b6:50:4a:97:78:d3:82:55:ff:c0:4d:22:3b:bb:86:
7e:e0:cd:44:c0:78:e7:04:23:6e:58:12:c8:d1:b3:7f:37:fd:
6b:55:ef:f0:28:bc:58:1f:22:a8:1a:60:36:60:ff:8d:09:f4:
c7:7f:75:2b:fc:9a:56:66:fc:79:60:51:85:fc:9b:1c:1e:91:
28:bd:6e:35:0b:f6:92:ef:c7:cc:3a:04:c8:20:6e:2b:58:57:
f6:03:f5:31:2d:b5:13:32:e4:98:05:a2:94:93:31:c6:ec:8b:
0d:e0:f0:f8:9f:e6:a9:78:11:04:f0:60:5a:e8:a4:54:3a:cf:
8d:76:a2:b5:d8:8f:be:85:25:9f:0c:1a:95:5c:b1:bb:57:d5:
d3:75:b2:e0:69:78:bb:5e:6a:f9:5a:47:d1:c5:d5:fe:a4:86:
d3:7e:2b:93:9f:08:5c:ab:44:8b:f6:5b:0e:ef:07:0c:0b:a8:
34:58:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:45:58 2025 by rpki-client