Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: tDGhqytx3BIx98MCJRcwmYRelOBgGrKHxKKtFXALHBg=
Subject key identifier: AB:4F:97:CB:02:D9:85:8B:71:F1:82:3B:BF:02:79:3A:1E:AA:EA:08
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 019750B46DD5764F4D3754317EB8DA7BF0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 0DE8
Signing time: Sun 08 Jun 2025 18:01:31 +0000
Manifest this update: Sun 08 Jun 2025 18:01:31 +0000
Manifest next update: Mon 09 Jun 2025 18:01:31 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: nzdAPmna3Vf44Vh6K/dwX4TvqzPf5JoYaE1/oX/h5bk=)
2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:6d:d5:76:4f:4d:37:54:31:7e:b8:da:7b:f0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Jun 8 18:01:31 2025 GMT
Not After : Jun 9 18:01:31 2025 GMT
Subject: CN=ab4f97cb02d9858b71f1823bbf02793a1eaaea08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:9e:56:5c:2f:12:cd:d6:c6:8a:e8:4d:62:
d6:89:84:77:a1:ef:3c:e5:45:90:7e:a9:86:b6:ed:
c1:54:8d:cf:b4:b4:78:7f:d5:11:10:cc:1a:ec:c0:
77:01:9e:25:e3:0e:9e:5a:c5:ad:d3:6f:bf:4e:e5:
f6:2b:5a:c9:a8:71:6a:a5:35:e2:dc:a0:48:3c:31:
13:34:2a:43:1d:5b:a2:35:0a:57:10:13:5f:3f:92:
5b:5f:76:e5:5e:e4:02:b1:cf:5b:a1:01:39:e8:5b:
6c:d7:3e:88:81:0e:fc:34:3c:06:af:a3:5a:4b:01:
f9:27:29:16:bb:d9:a3:87:27:cb:e0:92:98:14:c8:
2d:4c:e6:2b:ba:90:fe:16:26:a0:23:78:23:23:9f:
eb:ae:38:6a:e7:ba:5e:ce:d3:93:93:40:4e:fa:88:
5b:36:eb:c8:29:a2:33:d0:b1:51:e6:78:90:a9:be:
2d:12:54:de:9a:4f:e9:81:49:46:bf:ca:fb:e6:0a:
27:b3:d8:0c:19:47:82:1a:c4:b2:fb:34:b9:36:5d:
27:94:dd:c9:f0:36:cf:1d:ec:29:c8:78:94:b9:f5:
14:12:76:37:25:67:49:04:cb:43:6f:81:e0:97:7d:
1e:38:83:1b:99:ee:b8:22:8b:f0:89:14:6f:f6:5a:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4F:97:CB:02:D9:85:8B:71:F1:82:3B:BF:02:79:3A:1E:AA:EA:08
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fd:f0:b6:f6:63:d5:7e:e3:73:04:4b:76:9f:e2:d0:27:c6:
91:3a:48:db:5f:9f:6e:ba:f5:5e:c0:fc:11:21:d0:45:40:04:
64:e0:ac:25:f4:c7:e6:18:a9:50:76:59:7c:54:51:fc:3b:53:
06:8d:69:fe:11:28:4e:7c:71:3b:37:47:19:00:22:c7:d7:42:
32:6c:1c:b6:39:de:d0:c0:46:a6:57:f2:52:d8:3e:79:fc:19:
ad:93:e5:7a:0b:9b:be:fc:86:3b:d1:22:b3:05:cb:10:71:12:
8a:cf:bb:6f:ab:2a:71:fb:29:d4:9f:2b:a8:19:d1:9b:a7:37:
70:5b:d3:83:7e:eb:f5:03:97:f5:8a:2a:fb:e0:1d:40:a4:45:
9a:d1:df:10:d7:42:62:01:c7:c2:0b:dd:ba:41:e7:ca:ec:6f:
a6:db:b0:6f:90:c1:b7:6a:91:c3:7d:a0:95:9d:df:ed:cb:02:
f3:9d:5b:99:66:5e:ad:b5:0b:ec:e9:f6:82:d3:50:b6:0a:ae:
33:17:89:f5:78:6a:e1:09:21:82:8f:9b:a0:35:cc:a2:f7:a6:
fc:72:75:39:54:60:bc:48:df:01:6e:7a:78:91:55:af:a1:86:
36:3d:73:9d:70:c0:78:55:ea:92:f1:0d:4b:d3:4e:a5:0e:de:
9a:0b:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:13 2025 by rpki-client