Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
File: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft (raw, json)
Hash identifier: iD7N9WKtXfgMe2p4lXKy+ApIK6zDJZ5s859Xmj5XrkU=
Subject key identifier: 0C:72:50:03:77:0F:91:FD:7C:A6:9B:36:54:A3:CC:9B:BB:33:AF:FD
Authority key identifier: 21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
Certificate issuer: /CN=21ae8e675e2ed20095983cbb72084f9740281b74
Certificate serial: 01974E209A6303BA1E32DDDC8FAAC9EB5A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
Manifest number: 05BA
Signing time: Sun 08 Jun 2025 06:00:48 +0000
Manifest this update: Sun 08 Jun 2025 06:00:48 +0000
Manifest next update: Mon 09 Jun 2025 06:00:48 +0000
Files and hashes: 1: 1-2_B9Ogc8_x7nBs1jdqDYo3SFDQ.roa (hash: ZY8ZMErSrWlcbHGhfdUXbnzcBBOjC4a82DQaY7L6wwY=)
2: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl (hash: vRGb3hgwCOPhcoJ0TCNPuflSx6qjsKymwu5x5FeYYNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:9a:63:03:ba:1e:32:dd:dc:8f:aa:c9:eb:5a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ae8e675e2ed20095983cbb72084f9740281b74
Validity
Not Before: Jun 8 06:00:48 2025 GMT
Not After : Jun 9 06:00:48 2025 GMT
Subject: CN=0c725003770f91fd7ca69b3654a3cc9bbb33affd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:4d:c7:e7:8e:c9:39:86:bb:f5:c4:a1:d4:
5b:2c:e7:0c:d4:2e:fb:24:24:a7:e2:6f:3c:58:68:
c7:84:bc:ef:9d:58:d5:46:b3:ca:88:be:2c:a7:b3:
a1:c2:9e:75:33:3f:2a:23:8d:f0:f5:d8:4c:06:68:
1f:5f:51:56:30:96:e5:c8:04:de:a1:e8:a9:bb:1b:
31:8e:74:28:1d:de:2f:0a:72:c2:a9:6c:61:34:8d:
ab:48:85:3a:ab:1e:c9:9a:40:95:57:c5:a8:27:8e:
9b:6e:17:7c:57:10:dc:ab:05:3a:17:00:ba:e8:70:
d4:11:e1:75:4e:c5:96:df:1c:76:9b:f4:dd:5a:c0:
58:1f:de:1c:2b:6d:ed:86:20:ff:0d:94:7e:be:78:
32:e3:6f:37:05:6f:00:d1:0c:b0:2c:e0:a0:56:57:
d0:ef:cc:fe:52:1e:45:ee:3a:0a:ab:85:55:03:36:
b6:3a:9f:ff:8e:3c:2b:ed:22:d7:e9:b6:6e:c0:33:
49:87:08:7f:53:b6:0d:80:b0:de:f5:b3:1c:42:0b:
81:aa:a2:07:99:19:f6:ae:1c:67:22:d6:e5:54:a6:
f4:50:7f:7a:75:62:5d:97:f4:7a:f2:cd:6d:0f:98:
10:01:d3:4c:c7:c3:60:b6:96:eb:2e:9c:71:eb:26:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:72:50:03:77:0F:91:FD:7C:A6:9B:36:54:A3:CC:9B:BB:33:AF:FD
X509v3 Authority Key Identifier:
keyid:21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e5:19:3e:c6:22:81:86:2e:42:8c:6e:38:f0:45:5c:2e:bd:
38:10:25:09:0a:6d:24:de:af:89:ed:a0:51:f6:dc:34:59:db:
d9:46:65:42:80:bc:71:2b:77:f2:ad:57:f3:27:1a:f8:80:4e:
a2:bd:56:90:10:62:e8:5c:d3:88:44:85:e7:7b:f0:7b:0c:b8:
95:41:64:08:2b:d0:ba:ab:07:0f:dd:52:69:17:f5:31:0c:4a:
ee:4f:ff:5d:33:8b:f1:fe:9a:9c:35:79:30:03:59:2a:89:fa:
10:99:02:19:04:70:8b:1b:2a:06:91:8f:11:c2:7c:eb:18:bf:
ee:db:fc:bc:a5:a4:19:5b:20:bc:ec:55:98:15:e3:f9:7b:f9:
6c:7d:9f:51:27:4f:be:93:ee:d0:a2:48:ce:f2:fd:22:cf:f0:
f4:05:f6:d5:54:5a:bd:c4:d5:b6:8c:80:d1:fe:84:32:d3:0b:
15:3f:27:40:2c:97:a4:82:de:3d:19:dc:db:d6:96:1b:1a:0a:
ea:ce:49:b5:90:19:d7:0c:8d:a1:03:37:ad:fe:6c:36:b1:4c:
07:15:de:de:03:0b:c9:ff:76:af:df:f5:36:c2:b3:23:d2:14:
75:a0:e2:6b:18:3a:35:d2:34:4a:97:73:1e:35:f8:c4:3a:bd:
e5:f7:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:47:11 2025 by rpki-client