Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier: G+lN0OOCeSQRXi66s9BPRYEhLveb5GAO+SCzA3uM/nM=
Subject key identifier: BD:97:E2:FF:A9:61:6C:A0:BD:27:5D:56:0F:D4:44:57:19:9B:4B:4A
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 0197477A0A6C727A35AE3148DBB7F9A28FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number: 0CA0
Signing time: Fri 06 Jun 2025 23:01:09 +0000
Manifest this update: Fri 06 Jun 2025 23:01:09 +0000
Manifest next update: Sat 07 Jun 2025 23:01:09 +0000
Files and hashes: 1: AOhn7xhM2kSUfRAFFhvDCxU-O20.roa (hash: 1VAhBGtFhGjWFmWSsORfWNgJJ1LUT2F54ZQ/3ep5zho=)
2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: bUDbi1yEeX7UfzcElG8W08s9KUoKCSXr90M1eID9YGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:0a:6c:72:7a:35:ae:31:48:db:b7:f9:a2:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Jun 6 23:01:09 2025 GMT
Not After : Jun 7 23:01:09 2025 GMT
Subject: CN=bd97e2ffa9616ca0bd275d560fd44457199b4b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:57:a4:1b:e7:05:a0:64:b2:6c:64:fa:d7:
c6:14:6a:cd:71:8e:b4:28:4d:99:01:f8:54:f2:f6:
10:31:0a:c6:6d:28:c4:db:0e:bb:5d:03:86:76:41:
a1:8f:09:1f:44:71:22:a4:5f:aa:22:c4:95:ae:cd:
70:75:fa:c9:55:36:e5:d7:ff:b3:34:2f:c9:74:70:
d4:42:8a:8a:91:d8:50:4f:c9:10:60:32:a7:b3:83:
c1:7b:39:25:1d:45:77:31:e1:06:57:e3:dc:33:19:
1f:21:3c:8e:7a:e2:9a:e4:e1:74:aa:e4:31:1c:fd:
3e:34:ee:72:02:27:ee:40:b0:3d:b0:b3:e9:89:53:
04:7c:83:19:b9:f8:20:fb:10:59:6f:9d:c6:27:ee:
38:78:d5:7d:cc:b9:8a:20:02:91:72:24:67:5f:00:
86:40:22:a9:7d:66:40:60:64:80:0b:a5:07:40:d0:
f2:71:62:5d:8b:77:af:3d:b5:86:e3:51:5a:4e:7a:
bf:55:0e:d3:66:78:1b:6a:16:31:6c:eb:5a:f1:4f:
33:15:59:44:cb:e2:c1:bf:5d:2e:ea:6f:bd:6b:d6:
e4:20:4c:ca:9c:af:83:6a:3b:07:39:16:a4:d7:e3:
51:cf:57:87:18:e6:7c:2e:93:32:1f:6b:aa:ea:82:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:97:E2:FF:A9:61:6C:A0:BD:27:5D:56:0F:D4:44:57:19:9B:4B:4A
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:92:aa:7b:0d:33:c9:1c:31:61:46:f6:9b:cb:b2:a9:f9:f2:
49:33:05:5a:0b:5e:5d:8c:e6:d9:4d:7f:9c:16:4d:19:d9:7c:
08:65:e1:1b:63:93:65:72:cc:e1:59:41:34:fa:fb:0d:59:c0:
2b:77:11:03:4d:ac:17:2c:a7:7f:36:7c:8d:fb:9e:37:ce:00:
49:02:60:d5:6b:99:5f:ad:60:aa:5d:d2:be:0b:64:c8:db:16:
77:1a:86:d2:5b:74:1b:ac:d7:53:77:73:44:71:fb:cb:a3:76:
ba:08:d6:f3:5d:16:8c:b0:ad:65:60:c3:95:ca:29:11:1e:02:
07:f6:3e:61:61:88:5a:8d:37:aa:47:96:74:b0:2e:49:31:f1:
d1:58:10:41:e8:79:d4:a9:d8:fe:d0:18:b2:6c:27:d6:85:32:
24:c2:5a:9d:b8:3b:67:5f:15:8f:66:04:a1:8c:3b:63:94:86:
f3:d1:53:ce:34:86:af:1a:af:0c:c1:2f:8b:90:ad:3b:10:3c:
c2:a7:60:48:2d:2f:93:fb:58:d7:df:a1:82:79:e9:5e:00:a1:
9d:f0:f5:be:a1:58:a6:73:f6:18:5f:ee:69:c3:2b:f3:4a:29:
fb:d0:39:af:95:08:59:c2:88:a4:eb:a0:3e:90:19:3f:00:69:
57:ef:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:06 2025 by rpki-client