Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: o6YQdxDdmHCDu8G7qqkfkYWX8PMO8wMt1mkHbjstA7c=
Subject key identifier: 8A:A2:3F:96:5D:02:20:8A:9A:58:81:D0:5E:CE:82:DF:F9:0F:EA:82
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 01977865ED54AE52CBC76B01285B2E3DDB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0862
Signing time: Mon 16 Jun 2025 11:00:35 +0000
Manifest this update: Mon 16 Jun 2025 11:00:35 +0000
Manifest next update: Tue 17 Jun 2025 11:00:35 +0000
Files and hashes: 1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=)
2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: KfH7gK+t9hEpUY/jRIRiHBs7wpDGO/sVSgaW2DoXfuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:ed:54:ae:52:cb:c7:6b:01:28:5b:2e:3d:db:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Jun 16 11:00:35 2025 GMT
Not After : Jun 17 11:00:35 2025 GMT
Subject: CN=8aa23f965d02208a9a5881d05ece82dff90fea82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:b8:84:a9:08:29:45:ae:c5:73:de:31:05:
ce:85:cc:89:9b:6e:9e:c1:64:35:b9:40:0c:64:eb:
ed:21:1a:1b:a2:90:13:5d:56:ec:54:ee:d6:82:cd:
f1:01:f3:47:0c:ca:de:86:eb:1a:69:3d:eb:4e:09:
83:cd:4d:90:a4:34:7d:59:5d:4a:4c:c0:ca:97:0f:
ad:2d:e9:ef:1d:6b:93:a6:d9:aa:a4:f4:d8:07:57:
fb:3e:8b:0d:d3:dd:62:4f:40:db:0a:15:77:e4:5c:
84:29:79:cf:c9:d8:4b:43:03:01:dc:7c:05:3a:0f:
59:b8:e9:58:9a:ff:a2:dd:5e:36:00:39:83:27:73:
3b:36:21:56:f9:15:d2:7b:03:4e:ef:32:29:af:25:
b9:a5:e3:8b:66:09:1d:ac:2e:9d:dc:5d:df:a7:f9:
3f:82:aa:fe:e0:48:63:c8:9b:bc:ad:1e:1a:6f:6c:
89:cf:5d:9f:e1:31:a1:5a:a8:84:6a:9f:87:72:79:
b8:ea:a6:ee:b8:54:b8:73:95:81:ff:43:06:cb:20:
b6:6c:5e:a3:da:d9:0c:47:aa:42:c4:e7:1c:ec:26:
55:cc:be:3a:21:60:b8:62:d0:ce:b6:c4:45:15:ec:
86:d3:d1:b0:34:c7:89:cf:fd:26:e8:ef:b2:fc:85:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A2:3F:96:5D:02:20:8A:9A:58:81:D0:5E:CE:82:DF:F9:0F:EA:82
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:29:d7:e9:4f:f1:48:9d:08:5c:93:a3:ac:0e:12:9a:2a:bd:
54:d8:61:e9:25:e5:21:24:bf:9c:8b:9a:32:0b:dc:55:ca:c0:
e4:54:0a:23:e5:73:42:b0:36:ee:78:ff:f5:42:b7:0f:22:12:
49:43:06:c6:b7:18:16:36:86:7d:8e:46:17:53:26:63:7e:a8:
29:77:11:cb:ef:c0:79:fd:38:eb:53:38:ab:e5:5f:b6:1b:26:
61:23:c2:90:b9:9d:8c:53:80:04:05:89:4c:08:e2:aa:4f:4f:
73:64:40:14:ef:be:45:cf:fa:e9:0a:f1:ed:8d:01:16:e3:7b:
7e:88:5c:05:01:fb:c6:05:87:2c:fb:59:22:ee:9e:37:6b:65:
71:57:b2:75:fc:1f:95:25:a9:da:cb:aa:56:63:2c:e3:23:59:
0a:54:4a:e9:28:76:b8:a2:55:ac:fb:cc:09:a9:0c:57:35:98:
de:eb:32:75:30:da:88:09:59:45:d9:e4:4d:32:d3:67:0a:ca:
ce:84:bf:93:5c:9a:0a:58:d9:b7:63:f4:d2:ed:bb:ff:42:ab:
49:7f:a4:52:4c:53:1b:a6:9d:2a:a1:0f:fd:16:2f:ec:75:a7:
f6:b3:47:22:f8:53:cc:95:e9:c8:de:34:a3:d2:ec:ed:f8:18:
ee:00:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:25:03 2025 by rpki-client