Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: Jc+ImHdhJkLNZC1X3JWIW+DANtGha31WFwZPdZ+ffT8=
Subject key identifier: C1:3E:DE:9D:4E:12:95:A5:9A:4F:D8:82:46:B8:29:C1:F1:5E:3D:EB
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 01976BF3E2E6705539C3CAB3CCA0C9A50702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0922
Signing time: Sat 14 Jun 2025 01:00:34 +0000
Manifest this update: Sat 14 Jun 2025 01:00:34 +0000
Manifest next update: Sun 15 Jun 2025 01:00:34 +0000
Files and hashes: 1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=)
2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: +dtS+GXUdznVg6dlLVJpOodQ2lmFcIZabLFn9GgZNpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:e2:e6:70:55:39:c3:ca:b3:cc:a0:c9:a5:07:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Jun 14 01:00:34 2025 GMT
Not After : Jun 15 01:00:34 2025 GMT
Subject: CN=c13ede9d4e1295a59a4fd88246b829c1f15e3deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:0e:b8:1c:01:fe:35:6d:44:d2:99:7e:dd:
72:9d:72:28:4f:b3:2d:56:88:12:69:9e:7d:13:18:
aa:5c:de:85:d4:57:68:e7:61:35:21:2c:c9:d4:b1:
23:a3:0c:8d:85:79:d5:c6:9e:bb:91:08:6d:33:45:
52:d3:55:01:99:2c:da:1f:0b:6a:04:ee:c4:65:50:
ae:51:99:43:8f:fb:b7:fe:db:e0:f8:cc:21:05:36:
3b:6d:90:48:24:85:38:19:c7:fb:7d:11:5d:7a:6e:
d4:58:78:a4:44:96:91:a1:03:6f:92:50:a9:da:87:
2b:b8:1b:71:75:35:2e:e7:dd:53:dd:a4:83:eb:65:
0e:15:d2:86:68:4b:eb:5c:d1:13:45:79:c2:b7:fb:
4f:bb:59:31:7f:ec:a7:ac:1c:a9:26:07:84:1e:4c:
4d:c1:dd:8c:12:66:7f:8a:e1:d0:c0:b2:17:fd:0c:
44:7b:78:5e:19:3f:b3:8f:7f:03:2c:d3:df:b8:a9:
c9:22:bc:77:c8:c7:cf:e8:e4:dc:ab:ef:aa:c6:50:
9c:37:88:44:fc:32:29:db:07:43:02:25:99:38:a8:
80:36:fd:18:46:af:d7:cf:17:ff:00:81:c0:4d:9a:
22:06:2c:13:ea:78:f7:00:93:9e:48:5f:2a:ef:38:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:DE:9D:4E:12:95:A5:9A:4F:D8:82:46:B8:29:C1:F1:5E:3D:EB
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:62:5d:5f:2f:81:37:2f:23:2b:9b:48:10:50:f5:33:99:c2:
15:61:bb:21:92:de:72:70:fc:20:c4:2a:06:e2:2d:6e:a4:da:
98:04:bb:8e:79:ee:76:a8:95:49:ce:c6:05:22:ea:e8:c3:35:
17:43:94:49:48:7d:89:8b:58:89:01:4d:d0:d4:05:6d:14:17:
a9:40:05:73:b1:fb:30:af:38:91:c1:6b:a3:37:fd:47:ec:e2:
b1:45:ba:f9:75:b9:62:a7:c0:18:2b:fb:87:dc:8f:85:3b:d4:
a4:1b:4e:f1:57:c6:2d:84:2f:c2:73:f0:e2:51:c5:42:cb:e5:
5a:dc:92:a5:03:52:9f:02:89:57:fc:5a:6e:8e:1f:6b:35:25:
69:0f:02:3a:b6:4e:55:bb:88:d1:63:ab:b2:af:ff:d0:b7:70:
1f:e4:b7:a6:19:68:a5:43:2e:d5:10:89:dd:12:5b:dc:d0:f4:
36:58:e8:6a:bc:ed:6b:5b:6b:38:2e:e1:de:d2:2e:f1:dd:2c:
4c:26:39:c8:04:84:38:5a:59:9f:75:aa:e4:ae:fb:7e:43:dc:
b7:69:24:6e:36:c0:32:1e:eb:80:45:f5:4a:fd:65:12:2b:82:
b9:d7:be:ba:df:d4:c8:94:7b:40:ff:5f:c2:9c:53:95:d7:e1:
c5:1e:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:25:36 2025 by rpki-client