Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: Qf8498OwiiJu632Xv/c/mOmMdL0Mk+rrNQCsFYy/lFk=
Subject key identifier: E4:C3:2E:89:B9:52:80:5C:DC:AA:DE:3F:36:7C:C6:0C:D0:EB:6C:12
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 01976E198F0D4390F81B438A8831260BD8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0C4A
Signing time: Sat 14 Jun 2025 11:00:58 +0000
Manifest this update: Sat 14 Jun 2025 11:00:58 +0000
Manifest next update: Sun 15 Jun 2025 11:00:58 +0000
Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: i1hOgUGi2U7PzMyNOttsqG80Omxr8k17bR0ztYQJ0js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:8f:0d:43:90:f8:1b:43:8a:88:31:26:0b:d8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Jun 14 11:00:58 2025 GMT
Not After : Jun 15 11:00:58 2025 GMT
Subject: CN=e4c32e89b952805cdcaade3f367cc60cd0eb6c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:53:ca:e5:96:b7:70:49:60:ed:88:0e:7b:
3e:99:c0:09:e2:d0:8f:b8:12:9e:8e:f4:96:45:85:
a5:62:6e:a1:69:29:f8:05:c2:37:8f:03:db:8e:14:
b8:82:76:92:e3:7c:56:47:ee:80:23:31:46:41:31:
ef:bd:9e:7e:e5:ad:8a:93:a2:9f:80:c8:eb:b0:a1:
e9:54:fc:c7:52:e4:cb:21:7b:c3:52:b1:9f:7e:20:
58:43:5f:1b:85:73:95:d0:34:92:a0:62:7d:f2:b9:
6b:15:41:9c:a2:52:7b:a1:5d:cc:a6:f3:fe:24:04:
fc:46:7b:bb:44:70:d2:5b:98:3e:a4:f8:ba:be:49:
8c:6c:7a:15:cb:66:65:2e:40:69:c4:e7:a4:ec:1f:
67:3e:3a:98:44:33:0a:cf:e0:67:2e:28:27:2a:80:
1d:de:96:5d:4b:0f:8b:8a:cf:a5:46:cc:66:47:68:
2a:a5:14:77:f4:2e:6b:ce:c2:4d:ca:4d:30:15:57:
da:fb:b8:92:2e:18:10:ef:6a:8d:78:06:7d:b6:4c:
b1:4e:38:a0:8b:58:2e:e0:36:62:fb:60:e9:69:4f:
b4:88:b8:d0:d3:b2:e9:89:fb:7f:ab:d7:d4:a5:5c:
a5:bc:39:54:70:58:ed:92:70:34:e5:e6:80:d3:50:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:2E:89:B9:52:80:5C:DC:AA:DE:3F:36:7C:C6:0C:D0:EB:6C:12
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:83:ce:34:ec:c4:d8:b9:b7:1a:6e:90:c2:e0:29:b2:c6:24:
9b:26:ec:2d:d6:ea:f5:b6:9d:61:74:01:8a:8b:8c:da:5b:ce:
b6:65:e1:67:5d:61:1d:75:31:09:9a:60:f7:1d:8d:4e:9e:c4:
92:45:1f:e0:5e:63:74:64:08:1e:1f:3d:ad:bc:cf:7c:8c:da:
ba:71:a5:0d:56:07:4d:71:09:fc:33:db:6e:1e:dc:a2:f0:d0:
5d:93:75:7e:df:74:ad:83:65:89:dc:1e:59:77:1d:1e:7c:1b:
d4:a4:08:a6:fc:fe:44:2b:ab:9f:91:8c:46:20:db:58:7b:82:
3a:29:55:03:b2:a2:2a:4a:49:ed:a5:1d:fb:46:c9:20:84:c7:
56:73:18:d9:e4:52:8f:78:aa:f0:8c:64:14:44:a5:db:47:79:
96:1a:7c:5b:31:eb:5b:2b:37:37:93:fd:f0:42:aa:a4:55:41:
4d:57:c1:ee:9c:60:2f:39:b8:d4:e0:3a:93:81:21:48:4a:45:
c4:81:59:51:a2:a6:dd:d7:4b:5c:40:75:62:6a:eb:f1:3a:7f:
a6:a3:b9:b3:19:9d:3e:f5:3f:e5:87:46:bb:cc:6d:47:06:e0:
af:fa:1f:63:f2:57:30:f0:25:dd:c2:10:a5:53:e5:b9:13:52:
63:d2:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:38:15 2025 by rpki-client