Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: smbg3aH9YwY+PpvEw8csXYbpxLBUd3P9+rrZc9yZrfo=
Subject key identifier: F5:CC:17:BB:68:82:B2:83:01:A7:50:55:84:6D:E9:D9:CF:54:D8:E7
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 01976C2B05A75C04A61ED43EADD465694EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 09CB
Signing time: Sat 14 Jun 2025 02:00:48 +0000
Manifest this update: Sat 14 Jun 2025 02:00:48 +0000
Manifest next update: Sun 15 Jun 2025 02:00:48 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: jAclZntC9OwIAlEjUx/yI9eT2GTKwfOkGTqquAabwpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:05:a7:5c:04:a6:1e:d4:3e:ad:d4:65:69:4e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Jun 14 02:00:48 2025 GMT
Not After : Jun 15 02:00:48 2025 GMT
Subject: CN=f5cc17bb6882b28301a75055846de9d9cf54d8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:22:57:29:9b:1c:bc:1d:d3:c6:72:34:4b:
b2:ea:90:a5:cc:88:e5:8c:0e:64:75:5b:6b:10:4b:
3c:7a:df:9e:be:7e:3d:30:89:e1:07:66:54:6d:bc:
63:4d:ef:61:e9:1a:d9:86:bc:36:10:ea:a4:08:c9:
11:1e:71:bc:35:1b:c2:6c:e0:e6:d4:85:62:ad:7c:
a1:dd:dd:4a:39:f0:ab:8a:c3:14:c7:f9:74:f2:7d:
28:ef:50:d7:c3:c7:5c:4b:c1:a9:64:af:29:f6:c1:
f3:a1:7e:dd:6b:6e:b6:85:68:6e:63:49:76:83:57:
c7:4a:55:70:0e:d3:0e:8f:f2:47:c3:72:ba:02:b7:
ce:59:b8:d6:ff:6f:e3:1a:d2:d1:5a:00:f2:ab:9a:
aa:ff:f7:cd:76:74:b3:b3:34:11:3c:69:49:68:d0:
73:91:a1:86:42:e3:e9:ef:a7:9d:c6:49:d9:f7:1c:
4b:1b:df:73:ab:2a:12:1a:77:4f:d7:f1:df:e1:cd:
03:0c:31:bb:ca:1c:f9:5c:4d:01:8b:fe:b4:c5:12:
2a:0a:ac:b4:fd:28:1c:ed:7b:6c:71:27:b4:50:fd:
d7:29:98:7a:35:02:d2:ac:5a:bd:12:4a:1a:03:ae:
0f:51:fe:82:73:0c:db:a1:28:67:4c:31:2d:26:39:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CC:17:BB:68:82:B2:83:01:A7:50:55:84:6D:E9:D9:CF:54:D8:E7
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:33:ed:0b:3d:88:07:15:28:cb:0e:ff:66:b8:1f:63:70:73:
ab:5a:b3:c0:e1:a5:a6:b6:be:b7:00:15:03:7e:a8:7a:35:84:
77:6e:60:81:4e:2e:70:1a:df:0a:a5:ec:e0:1f:5c:24:7d:f5:
0e:51:69:f1:61:b0:b4:48:6e:36:92:49:08:d8:81:7c:f0:91:
2d:7b:cb:a0:3c:94:4a:8b:d8:7d:27:ce:3a:a5:bd:e6:f1:4c:
46:e1:f5:14:75:1a:6c:4f:dc:25:6a:61:c7:6c:fa:17:f3:b5:
89:4c:31:55:06:39:96:09:2c:68:7e:05:68:9d:ec:d0:22:d6:
d7:e5:5b:cb:af:60:50:83:36:e1:0e:ae:e4:dd:99:f6:1e:0e:
d8:4d:ff:9c:21:38:1a:5b:51:31:dd:d7:06:36:1b:fa:95:4d:
50:9c:24:a4:5c:b2:4a:4d:01:d9:8d:36:0c:58:36:d6:39:50:
e7:d4:6c:c8:8f:31:c5:28:62:9a:09:9a:c2:52:ef:10:af:e3:
6a:98:95:2d:2f:dd:40:7b:22:29:c4:ee:07:f8:d6:ac:ef:6f:
e0:04:cb:27:d3:d9:7f:ca:62:27:e2:be:f3:8f:f7:24:50:8b:
88:4e:26:0a:19:92:48:67:51:66:46:82:e2:8b:37:a0:1b:3a:
e9:b2:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:22:59 2025 by rpki-client