Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: yUfpsqt33YwxnZP/kSnffXNgocsd2ak/kQoA5MjH+V8=
Subject key identifier: 98:98:75:22:E0:D4:A3:50:B9:BC:9A:60:85:42:35:BD:8E:20:48:C7
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 0197499F5B3CB5F6B552809A177B5E3AE29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0BC0
Signing time: Sat 07 Jun 2025 09:01:09 +0000
Manifest this update: Sat 07 Jun 2025 09:01:09 +0000
Manifest next update: Sun 08 Jun 2025 09:01:09 +0000
Files and hashes: 1: EryZGhKHOKFejsNYtsHoCrBOwlI.roa (hash: XPrcWsidSTpQokDPJh6WTZK3lvnDmP0xxlT9T9iBNGQ=)
2: Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa (hash: N2JyPxT8+m5HQDRPSXJdJM2oBFZFnSgrTMkI9DghAaA=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: J+FuMp3ZBVxmwIK6BOnk2W/QZCdjp7a7sgJQ/M6MNyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5b:3c:b5:f6:b5:52:80:9a:17:7b:5e:3a:e2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Jun 7 09:01:09 2025 GMT
Not After : Jun 8 09:01:09 2025 GMT
Subject: CN=98987522e0d4a350b9bc9a60854235bd8e2048c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:e1:c9:ef:58:34:17:39:b8:e9:5b:a9:ab:
01:55:7c:11:23:e7:c9:c7:b5:ab:0f:46:c2:a4:4c:
db:a1:22:15:23:6f:b4:7c:1b:e5:e2:e3:a1:95:d1:
4b:07:84:1e:d1:ab:b6:02:bf:f4:25:1e:f8:08:cd:
f7:63:e5:87:90:b4:a9:42:e2:8c:34:82:9a:be:35:
57:b1:88:d0:0d:28:22:42:15:f3:09:a4:b6:65:6a:
3f:de:09:d3:08:af:fd:db:0d:d5:04:f3:e9:ab:3e:
b7:86:dc:0b:5a:68:a9:92:16:6c:52:f9:83:02:e6:
72:25:f2:3c:c8:b0:e8:81:7e:d7:7a:30:b4:7d:b8:
a4:e9:e6:ff:d3:8b:1f:11:f0:a9:77:83:f9:80:1d:
52:c5:50:2b:82:83:3a:59:47:1e:8b:41:bc:c9:b5:
45:81:4a:34:e8:be:ff:36:84:e6:ad:e0:b3:65:55:
4c:70:ac:97:93:04:53:9f:bb:1d:c3:5b:d7:b4:0c:
d6:21:98:77:c0:19:2a:d3:f1:ef:f5:4d:74:5a:0d:
42:99:9e:55:58:9f:84:6e:75:65:da:74:c6:2d:15:
5c:62:11:69:bc:92:e1:0e:a1:a3:f4:66:3e:98:fa:
5f:84:3c:c8:ea:47:65:fe:ab:e9:75:e6:1f:60:98:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:75:22:E0:D4:A3:50:B9:BC:9A:60:85:42:35:BD:8E:20:48:C7
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:17:aa:19:4d:69:64:f6:b3:54:59:5a:6e:99:f6:61:5b:ea:
89:eb:c7:e5:61:df:f8:38:b3:ed:32:66:45:47:10:f4:7e:f7:
c5:59:7b:83:f3:be:ba:ba:43:82:4a:d5:37:c5:1f:19:e5:b0:
b4:83:e8:ab:ba:25:ea:c4:5e:c6:93:d8:58:ed:b8:a8:67:a7:
22:ec:b8:a1:bd:76:5b:e8:34:20:86:b8:87:43:2d:a1:78:1a:
3e:0f:f2:c3:c7:9b:6c:4a:2a:c7:03:d3:69:3a:3c:4e:00:4e:
93:2d:7d:fd:4b:b5:4d:24:1d:48:53:18:de:d2:1b:10:12:f3:
3c:d7:73:ea:16:e6:20:2a:9b:a8:9a:01:78:0a:7f:53:ff:32:
39:17:91:66:90:3e:a9:5d:6b:02:f5:c5:f8:a5:69:70:b4:bb:
53:3c:31:00:a6:a9:ce:34:6c:8b:95:7b:c1:8b:bf:68:3d:7c:
61:7e:44:fe:44:0c:11:fd:49:d6:b9:a3:9a:a9:d0:cc:c0:90:
b9:ec:b1:64:2d:0f:34:bd:d7:e8:b6:fb:1f:02:46:1f:8a:06:
f4:c9:31:9a:cc:4a:c4:54:5d:be:dc:b7:1f:b0:eb:d5:78:89:
24:58:52:1d:51:f7:fa:22:28:78:f8:7f:d7:c1:48:9d:0a:6f:
4f:78:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:41 2025 by rpki-client