Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: WR7CfEGX2z1GsjC/PtP1h9AZz4/nyq7ivk1jNiNiL6c=
Subject key identifier: 26:E5:9D:8A:DA:69:FB:6F:34:BF:A4:3B:37:2C:5A:98:BB:DB:65:1B
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 01975CB802214D32229EB46759C6C67FF9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 11AD
Signing time: Wed 11 Jun 2025 02:00:52 +0000
Manifest this update: Wed 11 Jun 2025 02:00:52 +0000
Manifest next update: Thu 12 Jun 2025 02:00:52 +0000
Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: f8qMtnufobX8Km1NL/6SzcSl1nvztsshOdMQPGs11qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:02:21:4d:32:22:9e:b4:67:59:c6:c6:7f:f9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Jun 11 02:00:52 2025 GMT
Not After : Jun 12 02:00:52 2025 GMT
Subject: CN=26e59d8ada69fb6f34bfa43b372c5a98bbdb651b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:6d:bd:bb:50:65:b0:28:99:c7:86:b4:72:
cb:b6:f0:ce:57:68:4e:3d:ec:3e:43:5c:96:16:fc:
11:45:1c:0b:0b:97:00:b7:09:4e:20:aa:f0:0b:02:
20:c7:dc:00:4e:0f:10:d4:ed:1e:d3:e2:76:a1:3e:
ce:53:02:ea:67:d6:71:34:ee:96:44:a5:18:59:e8:
88:9c:88:84:3d:60:a8:84:6a:d0:ba:a6:b0:0d:d4:
dd:81:a7:09:8c:e1:c2:0e:ec:91:11:07:40:b1:e1:
1a:20:ad:92:37:3d:5e:35:43:75:86:e6:52:47:11:
25:73:81:80:45:d4:0d:8c:39:ef:69:ed:22:b4:d4:
71:c8:4b:69:8d:0f:f1:a5:18:c1:06:9b:1f:c5:df:
07:c9:77:2e:86:db:44:1d:e1:95:a7:45:43:46:5c:
b7:1c:58:60:ff:75:13:15:5d:0a:bb:0e:06:b4:02:
bb:98:e3:00:ef:1c:97:a9:29:06:eb:39:6f:67:ef:
fa:4a:b3:f7:62:bb:9a:85:4c:29:4a:be:ec:ac:0f:
49:14:45:e2:e5:88:c3:5c:19:00:de:48:9a:0e:25:
1b:96:88:44:32:af:2f:00:ec:21:95:7e:61:77:05:
49:c5:84:de:cd:e9:d9:c9:6c:11:a0:4a:7d:b8:46:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:9D:8A:DA:69:FB:6F:34:BF:A4:3B:37:2C:5A:98:BB:DB:65:1B
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:04:ce:35:46:ce:5a:36:74:5c:dc:68:b1:eb:1d:d2:c2:
25:1a:e7:48:92:bb:db:1d:de:59:64:d6:cd:56:84:d8:ef:a6:
d3:b0:29:99:76:74:57:4e:75:47:75:78:c7:1c:c6:18:c6:cb:
08:83:a6:c9:ea:15:35:7c:31:99:be:24:25:e4:2f:b7:e0:ec:
05:1f:59:e4:70:97:8b:44:7c:25:44:b7:0f:6c:c0:95:77:1a:
39:7a:75:e5:e6:3d:d7:c4:fc:df:8f:c5:9e:56:bc:5c:ff:38:
af:db:8d:02:6b:74:9e:d0:f5:79:39:b4:e5:0a:b0:e7:b3:54:
13:db:75:d1:8d:13:1a:26:c3:f2:b9:a2:34:b9:28:92:45:23:
47:e5:18:02:c9:da:5b:d6:32:f1:87:9c:20:e0:98:00:34:66:
44:c4:dd:c4:6d:12:65:1b:a7:1e:a4:5f:b4:fe:25:1b:4e:11:
0b:c3:70:6f:6e:ed:b6:de:e6:62:ca:65:20:9a:11:b5:74:ed:
e9:2f:8b:fd:cc:53:ba:79:28:8a:da:3c:f4:38:f2:fe:c6:2d:
23:2b:52:04:3b:2d:af:29:f2:f1:74:b2:0e:5a:cc:10:61:3d:
44:7e:29:1b:d0:1d:6d:e7:d8:4a:cf:32:96:56:b5:13:41:25:
b1:f5:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:32:45 2025 by rpki-client