Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: isOxeoj9vOUHMk84zKwOURKHdKMUBYy2Y4T2E5emrIQ=
Subject key identifier: 36:7C:EB:AD:82:B1:2A:E1:66:F3:04:09:17:E4:7C:00:99:09:90:5A
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 0197470BB935B8960BD16703B88D5A761591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 14DC
Signing time: Fri 06 Jun 2025 21:00:40 +0000
Manifest this update: Fri 06 Jun 2025 21:00:40 +0000
Manifest next update: Sat 07 Jun 2025 21:00:40 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: aaaTqEBPagWYiUARq9+15PsUPciYcCoRb0ZbOCWBTK0=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:b9:35:b8:96:0b:d1:67:03:b8:8d:5a:76:15:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Jun 6 21:00:40 2025 GMT
Not After : Jun 7 21:00:40 2025 GMT
Subject: CN=367cebad82b12ae166f3040917e47c009909905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:37:12:d3:ba:84:22:67:23:50:73:49:8c:
72:0d:01:1b:35:57:4c:45:9a:9e:a1:2b:81:14:f1:
de:45:8a:bc:67:06:32:13:3c:ff:24:06:09:e3:32:
57:2e:a6:c7:a3:30:1e:9d:63:f7:9c:f3:82:4a:68:
27:d1:eb:24:60:72:6e:22:13:dc:43:3c:b9:5a:dc:
19:57:17:47:33:d9:dc:6f:71:2b:5f:b5:1a:4c:56:
d1:03:1c:64:97:84:8f:f6:e1:4a:43:5a:c7:61:fd:
10:76:87:bc:52:4e:21:c5:47:b1:00:97:fa:15:e6:
f5:e1:eb:38:76:d4:53:09:67:fc:a3:fd:02:24:57:
2a:72:6b:22:61:09:7e:8c:2a:51:ee:c0:4d:4f:28:
a4:47:c1:5b:6e:b5:d8:2f:3e:e9:c1:06:66:d8:ca:
7c:3a:bf:b2:4a:50:39:15:49:d4:f6:6f:67:5d:63:
4e:ba:28:c0:3c:f8:3b:01:b1:4a:af:cd:87:6a:7e:
cb:4a:0b:d7:13:c3:68:b9:69:85:c6:08:f3:95:b3:
ae:e8:bb:ba:d5:ba:d1:8c:ee:e4:56:42:0b:1e:03:
1b:90:7a:3b:f7:0b:9e:33:3b:e1:1e:df:4b:80:92:
b2:0f:ce:aa:5f:7d:3e:ea:50:c7:d5:e3:aa:24:ae:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7C:EB:AD:82:B1:2A:E1:66:F3:04:09:17:E4:7C:00:99:09:90:5A
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:1a:0f:95:35:d1:10:74:84:33:de:19:27:c1:7d:f2:29:
98:37:d4:ea:a7:d6:01:d9:6b:95:22:1f:e5:62:0b:38:f8:87:
13:8e:11:a2:24:a2:75:99:bc:84:92:d0:38:00:3c:8d:35:15:
01:11:64:a1:de:72:d8:e0:34:30:fb:18:ed:27:c9:3c:de:57:
68:7d:19:f4:d0:e8:a2:ef:06:1f:1c:71:8a:47:55:d2:2f:e8:
8e:14:be:8b:be:04:45:ac:c6:35:6c:3a:a0:34:42:58:3e:57:
17:53:d2:a6:f5:9d:38:d6:c2:72:17:1c:a0:06:e0:b4:e2:e9:
98:0d:9d:08:e5:16:84:47:5e:c4:58:87:60:5b:a6:d4:3a:87:
e2:ce:9a:4a:41:b5:d4:01:15:ca:b1:d9:e0:20:36:49:d2:e4:
28:77:32:40:87:90:5c:36:89:3f:87:13:4e:c0:43:a3:df:cc:
a9:be:44:2c:b7:3e:83:cb:39:9f:2c:d9:72:09:87:bf:4f:36:
4a:95:6a:10:36:64:81:99:0e:ca:99:74:9e:45:de:e0:4a:d7:
99:df:6d:e2:79:ed:f7:92:9b:48:d0:5d:ec:cd:1b:02:53:75:
07:a5:b6:ce:f2:38:4c:e9:b7:b1:37:f8:5f:fe:aa:2b:16:49:
9e:b2:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:23 2025 by rpki-client