Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: meUU3znXVqioVQPiyU11AHZn/YdPPfzbcsbl7ifyJLY=
Subject key identifier: C1:C4:CC:57:EE:C2:B2:F1:E2:5B:86:35:B1:DE:15:60:D4:33:CE:B6
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 019758DAC0942BB3C16C33F0D57334A5AEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 11AB
Signing time: Tue 10 Jun 2025 08:00:20 +0000
Manifest this update: Tue 10 Jun 2025 08:00:20 +0000
Manifest next update: Wed 11 Jun 2025 08:00:20 +0000
Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: 22sSEIesSFrOg+khYYe9w0q5tCuRqxPpYCsgHCKKR88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:c0:94:2b:b3:c1:6c:33:f0:d5:73:34:a5:ae:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Jun 10 08:00:20 2025 GMT
Not After : Jun 11 08:00:20 2025 GMT
Subject: CN=c1c4cc57eec2b2f1e25b8635b1de1560d433ceb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d1:55:fb:db:06:f5:6b:15:1e:13:b6:2f:dd:
49:46:1e:be:3a:5c:10:a4:0c:37:df:71:20:52:62:
ca:24:6a:51:0e:fd:43:8e:08:87:a1:82:bc:7a:bf:
89:ff:6c:a2:fd:35:2d:37:b1:9f:34:53:58:78:ed:
a8:93:f5:f0:16:46:87:e2:ea:7d:f7:3b:7f:e0:f7:
d6:97:2e:6d:8a:36:0d:e1:3b:4b:f1:6b:73:b0:1f:
c4:42:db:87:f5:31:dd:bd:5d:76:ed:7e:fe:b2:c5:
d6:8c:3e:a0:6e:76:cb:7b:13:44:8e:65:a2:f2:b2:
77:a4:28:2e:ef:c0:1b:02:39:f3:68:0d:66:02:a0:
15:33:0b:27:24:b3:4c:c3:f1:29:17:4d:e6:6f:78:
18:bf:c1:c2:af:1b:d5:df:4f:e4:8a:b6:ca:a1:75:
82:f2:0a:59:d4:71:5c:a3:66:3c:11:6b:2d:0a:46:
96:db:ac:f3:b8:52:af:88:05:59:f6:5f:1c:11:c0:
39:6b:a6:42:7a:08:39:0a:61:cc:d7:a1:46:18:26:
c8:2d:24:a0:02:85:b4:10:19:4c:e4:9f:a5:40:7e:
42:bc:b1:f8:f5:56:58:0e:33:d5:f5:8b:d9:be:f5:
31:01:44:39:c1:1e:e6:30:83:13:c5:f4:b5:5f:01:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:CC:57:EE:C2:B2:F1:E2:5B:86:35:B1:DE:15:60:D4:33:CE:B6
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9f:cc:22:4a:d7:22:47:e7:b7:4e:2b:dc:e6:30:7e:ce:38:
76:d3:d4:1a:df:6d:3b:a9:32:cf:66:4f:47:d0:0f:5d:f0:cb:
b7:c0:b8:01:76:ef:75:a1:6d:64:e1:54:52:23:2a:6e:30:b1:
f9:7a:80:4b:2a:f4:93:f5:e1:ce:8a:a8:70:6e:94:92:6e:74:
25:d2:c3:d5:93:ad:5d:ba:da:26:ee:1e:26:74:3c:8b:fa:ae:
ab:07:35:b9:84:d9:10:85:55:08:45:04:61:c3:e4:a5:50:dc:
33:ef:16:11:b4:07:f4:c1:9c:4b:7f:88:51:a7:38:98:69:f2:
fd:73:55:b5:73:70:b3:7e:54:21:19:4c:93:f4:be:4d:63:b5:
0c:86:69:4e:a1:29:ed:71:ee:d0:0a:30:4e:57:82:41:e2:a0:
62:76:8c:5a:ea:3c:99:54:5e:77:c3:fa:81:a5:50:17:63:5a:
67:6e:7f:fe:55:8f:f8:6b:67:4b:5e:24:b5:ef:08:7f:ba:b9:
79:3b:f8:7c:db:d2:9d:84:c3:cc:fe:84:93:b3:46:3d:11:f4:
d9:7e:5e:37:80:a2:93:31:87:8c:9b:bb:68:ff:f2:e7:e6:1d:
7c:2b:da:03:fe:94:79:78:b3:63:13:c0:32:c5:ec:45:71:80:
bd:c6:4c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:28:33 2025 by rpki-client