Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json)
Hash identifier: qKHLJ0QAP5Dp3S6FsVeTSK5QGJspIbrqsyK/kXcsVS4=
Subject key identifier: 20:08:33:87:03:BD:D8:09:D4:B6:B1:4F:DF:C5:D1:C1:86:77:3E:FB
Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Certificate serial: 01975C4A0880375295F1846D5C147275004E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
Manifest number: 0A8E
Signing time: Wed 11 Jun 2025 00:00:45 +0000
Manifest this update: Wed 11 Jun 2025 00:00:45 +0000
Manifest next update: Thu 12 Jun 2025 00:00:45 +0000
Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: TdBPoJBS076CYJAN3rwO+iS7898p5Y3hQeCw3YNyfVw=)
2: it5TB1fVnn8wAT1GhxrXXPpJQhE.roa (hash: uFvB0yeXGCmgY/JUbCJTKqf/gHh6c2TkYoHqFThttag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:08:80:37:52:95:f1:84:6d:5c:14:72:75:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0
Validity
Not Before: Jun 11 00:00:45 2025 GMT
Not After : Jun 12 00:00:45 2025 GMT
Subject: CN=2008338703bdd809d4b6b14fdfc5d1c186773efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:c7:3c:bc:74:6f:7b:78:aa:38:81:d1:1d:
3b:00:8f:3c:f4:09:07:7f:10:68:2d:f2:17:cd:c3:
91:4a:cc:79:36:8a:ab:48:e5:64:1a:f2:92:57:fb:
e0:60:a7:82:ca:db:0f:2b:65:f4:99:e2:60:ce:d1:
7c:64:41:27:b6:7b:48:6d:12:18:35:22:c3:46:8d:
40:21:d1:5c:31:1f:9a:14:67:47:10:e6:57:fd:8c:
fd:d4:94:4c:ad:5a:4a:23:44:13:dc:84:da:29:71:
9e:6d:3c:35:46:62:3f:d7:6b:00:8f:af:c1:72:0e:
89:d3:af:0b:9b:60:d1:fc:b5:f7:dd:4d:8e:69:6d:
88:5b:47:1e:a8:b1:d4:f7:44:98:41:e6:6e:6b:1d:
cb:7c:58:47:f4:b4:c8:25:f5:4a:1b:fe:bd:ad:4d:
1a:14:d7:c1:92:82:b2:5c:5d:a8:d1:98:05:09:4b:
c2:cf:81:3b:8a:96:3c:b7:97:7e:a1:3b:b9:af:3d:
de:9f:77:c2:bf:3f:10:2a:93:15:56:f5:e7:62:bc:
55:55:ec:0b:20:9a:fc:2e:7e:3f:3f:f6:df:3a:7d:
a7:97:43:5d:54:03:82:82:77:ba:09:96:75:f3:f3:
a3:22:a6:e3:04:27:57:3c:fd:0e:8b:dc:2f:f0:4d:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:33:87:03:BD:D8:09:D4:B6:B1:4F:DF:C5:D1:C1:86:77:3E:FB
X509v3 Authority Key Identifier:
keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:81:e0:62:f2:d5:f4:e4:a5:0a:1e:66:67:b9:9d:d1:f8:22:
4b:df:e0:37:e8:8a:d4:9a:12:c5:51:ae:cc:1e:1f:e0:b0:7b:
40:88:bd:c7:4e:b6:8b:16:3a:0e:eb:1d:bb:9d:e4:99:ca:32:
53:52:88:c6:1f:aa:48:4c:34:04:9c:8b:57:af:c0:e3:0b:1f:
21:54:b9:0f:e3:d7:e1:94:9a:fb:40:40:83:81:7e:5d:7d:90:
52:6b:ff:de:2d:07:13:ef:1c:5f:a4:ed:d2:61:58:e7:95:61:
36:30:1e:39:96:05:95:cd:99:df:6d:69:7f:c0:0c:ed:bc:97:
c4:6a:d8:42:83:47:96:98:bc:53:c1:5a:1c:01:c1:bc:a9:82:
0c:6c:47:e9:1b:c6:40:a5:dd:1b:5f:e2:57:9c:89:02:ed:42:
26:5a:79:36:c4:52:8c:44:ba:5d:fb:5a:d1:ea:89:9f:e8:de:
cf:dd:be:90:f4:56:cb:4c:01:d1:da:84:4f:a4:cd:73:da:fb:
14:2c:89:f2:99:b3:08:4d:5f:c9:b9:f7:c0:65:68:6f:c6:84:
de:98:3b:51:e5:ec:57:12:64:42:fd:65:b0:57:b2:0f:1f:2b:
ed:fe:ac:86:46:e1:3b:fe:e3:16:19:b6:b1:31:5b:60:83:43:
76:54:06:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:35:29 2025 by rpki-client