Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: 5zAFsgPKLYUDQj/FnNng/UDojrHEZPWJy2ey++OEcYI=
Subject key identifier: 50:1B:D0:08:2D:3C:77:A8:19:4D:28:B7:54:A8:EC:F2:7F:4D:9C:1A
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01977866210E591B1678CFA0FADF9D188813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0E96
Signing time: Mon 16 Jun 2025 11:00:48 +0000
Manifest this update: Mon 16 Jun 2025 11:00:48 +0000
Manifest next update: Tue 17 Jun 2025 11:00:48 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: kvV4Ry+EYptvmDGopZPuVigkPuhN+WzBUAdw/MDad1Y=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:21:0e:59:1b:16:78:cf:a0:fa:df:9d:18:88:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jun 16 11:00:48 2025 GMT
Not After : Jun 17 11:00:48 2025 GMT
Subject: CN=501bd0082d3c77a8194d28b754a8ecf27f4d9c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:58:9e:a7:6d:aa:f7:ca:4c:d6:9d:fd:f4:
6c:85:53:4a:f0:02:27:04:25:9d:d1:ab:ed:92:3c:
b7:44:ab:15:dc:32:96:97:65:ad:c8:40:6d:05:0f:
78:97:e1:f7:56:14:b9:aa:84:f0:a9:66:65:08:4b:
af:f8:ae:ba:c4:52:26:33:e6:dc:50:0c:8d:ff:ac:
28:94:9f:68:21:7c:6f:7f:7c:ad:16:37:0d:91:45:
31:ff:0a:0f:21:08:86:de:7e:79:e6:83:75:18:b0:
84:a9:74:bd:4d:bd:3e:a0:88:48:9f:e7:a9:e0:89:
27:f9:08:74:7d:58:dc:e4:9c:f7:ea:af:82:3d:c8:
ef:de:0d:0e:e9:29:3b:e1:44:86:1e:0e:19:b6:8e:
91:8d:50:4c:8c:e0:cb:cc:48:c4:73:a7:a2:b7:ba:
0a:70:42:10:9b:25:a8:3c:2f:20:8d:7d:0f:56:25:
87:ee:11:72:e6:c2:43:f1:66:41:48:4d:fc:94:c0:
61:ea:40:ce:0a:03:73:be:fe:f0:f3:89:d5:b5:9d:
7e:da:0f:f2:8b:65:3d:84:74:45:18:3d:37:28:b1:
4c:bc:c4:dc:a9:45:a2:d6:32:73:f8:4a:c5:ce:f7:
08:ea:64:fa:c4:2a:fc:1d:e0:62:04:96:22:ab:30:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:D0:08:2D:3C:77:A8:19:4D:28:B7:54:A8:EC:F2:7F:4D:9C:1A
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a6:93:be:04:e3:e9:b2:b1:8c:e9:d3:98:8d:45:28:6e:f7:
32:df:2d:52:c2:63:14:3b:93:fd:28:6d:49:60:02:9d:10:64:
61:45:2b:b1:1e:1d:0b:96:91:96:f1:7c:76:95:37:4a:f9:01:
59:de:85:24:c7:b5:63:dc:99:e4:43:e6:05:9e:f4:9e:27:f4:
63:fd:f2:6f:4d:20:b1:3a:58:0a:60:97:d6:22:5d:c2:07:7c:
53:fb:a7:34:08:6c:a2:53:cd:e8:13:f5:16:fa:85:10:9f:ff:
b2:b0:ea:85:ce:4e:4c:d3:fb:a9:58:65:13:9e:0f:75:4b:96:
0d:ab:87:eb:50:71:28:d8:e2:59:dc:2b:31:45:07:2f:99:8d:
d4:e3:38:c1:c6:c5:e9:94:1e:e6:63:19:ae:fe:b5:49:d2:8d:
16:23:80:fa:94:4a:82:d4:dd:c8:fd:5d:81:76:d4:0c:78:02:
8c:0f:7a:24:da:4a:0f:16:39:ab:57:73:d7:f1:93:c6:76:89:
62:e0:b6:67:d1:15:5d:4a:6d:1a:c3:d2:a7:cd:ac:e7:c9:b0:
4a:e2:0d:08:e7:d8:70:ce:74:c5:5d:1b:45:38:b2:c3:50:e5:
9c:ef:7f:93:bc:0d:9b:e5:02:18:df:19:f6:a3:ea:ba:79:c6:
67:e7:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:34:48 2025 by rpki-client