Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: hKraLU9V63znRkUiKp5X74YBG8WKFe4ETTMcoHv4eI4=
Subject key identifier: 62:1C:0D:52:E7:D4:F9:32:2E:A1:50:63:B4:03:A8:B3:14:CD:3C:34
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 01976BBD2DE1FDA8F84D9A4BD5AFA866F6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0823
Signing time: Sat 14 Jun 2025 00:00:49 +0000
Manifest this update: Sat 14 Jun 2025 00:00:49 +0000
Manifest next update: Sun 15 Jun 2025 00:00:49 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: mlBP2iht/qeDgo4oJyHyQfUg3z0mU4LDq8bqoW2VmW4=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:2d:e1:fd:a8:f8:4d:9a:4b:d5:af:a8:66:f6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Jun 14 00:00:49 2025 GMT
Not After : Jun 15 00:00:49 2025 GMT
Subject: CN=621c0d52e7d4f9322ea15063b403a8b314cd3c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:3c:77:b9:bc:15:24:75:1c:07:bb:3c:eb:
bc:64:48:1a:d3:7f:62:4a:22:f1:e8:1c:dc:24:f0:
a6:17:23:fd:3e:e8:21:2f:09:59:16:29:42:f1:47:
f5:f8:a0:77:ac:67:2e:bc:21:19:19:84:c6:9a:24:
ee:1c:0a:90:82:e6:20:4c:0b:47:00:66:34:0e:f5:
93:55:5c:a9:71:e4:f7:c7:cf:5b:5d:98:a1:48:ae:
2c:de:a4:f8:65:4c:03:71:87:8b:96:be:e5:77:6f:
be:74:f0:5b:f2:26:64:7d:7b:75:4e:0e:da:a0:aa:
10:09:6c:bd:31:af:1f:32:e9:3e:3f:62:94:a6:f7:
3b:be:47:89:f2:9d:81:36:84:25:c6:9c:03:90:72:
fe:d1:f1:4e:69:c5:7f:c4:e7:fc:32:c8:fe:d8:cc:
f9:70:5c:11:6e:5d:d2:8a:76:1d:bc:da:bf:df:9a:
a8:86:98:d7:4a:db:41:4a:4c:80:f2:bd:d8:31:ec:
e1:3b:b8:9f:74:61:4d:89:bf:ad:7c:f4:e0:a6:88:
fc:04:af:91:cb:60:3b:5b:db:c3:ef:66:4d:4a:58:
09:26:ec:95:fc:12:a9:25:8d:94:cc:6a:4b:e2:36:
f0:7f:17:a0:ee:63:1a:b9:49:1d:49:c6:c6:57:e7:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:0D:52:E7:D4:F9:32:2E:A1:50:63:B4:03:A8:B3:14:CD:3C:34
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:72:fb:a3:3a:2f:66:34:d1:9f:50:cb:f1:b4:40:71:a5:e7:
30:bb:99:8d:c8:fa:5f:6a:7e:dd:1c:65:76:ae:a9:c5:93:a1:
a8:6a:74:96:71:82:f1:c3:c4:04:a9:98:3a:de:54:d9:64:66:
61:3d:0a:98:b0:03:64:e0:0f:51:47:b9:b7:74:b6:ea:03:43:
bf:d3:22:2e:5b:a1:f4:37:b4:84:69:89:89:29:04:f5:3f:14:
64:81:4a:f6:e3:44:fd:a6:e7:5f:9b:e6:24:39:18:57:89:88:
42:f1:41:a5:7b:07:03:d1:68:43:bf:6e:2a:a8:a5:cd:88:51:
10:94:0b:bc:39:38:04:49:26:c1:ee:35:0c:00:9a:4e:e7:f5:
c4:43:81:9a:a4:3b:90:2d:e9:4b:ff:17:eb:fd:ab:03:28:b5:
10:4b:72:5e:f5:b1:89:e4:13:7f:9a:cc:49:6b:59:e2:be:b1:
de:95:de:4a:13:2b:14:06:c4:b9:21:76:0a:73:0f:9e:30:8d:
ee:7c:cd:aa:90:6e:18:49:3a:85:c7:4e:b5:08:2d:45:3f:99:
3f:89:78:ca:99:04:14:fb:33:ac:78:46:67:45:15:7d:9a:fe:
19:15:d7:99:25:6d:57:4c:25:49:27:21:9c:14:8b:9b:51:ff:
9f:8a:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:01 2025 by rpki-client