Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: LchbfB0ZS9gIbZAPI22n6J28U3p9uKLm3BXumRg2RH8=
Subject key identifier: 15:C1:07:F0:1D:23:4E:4A:B9:D6:32:82:AB:21:C9:CA:2C:38:AD:C6
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 01976D7428FC2F76D19ABCAD864C75A303D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0C12
Signing time: Sat 14 Jun 2025 08:00:18 +0000
Manifest this update: Sat 14 Jun 2025 08:00:18 +0000
Manifest next update: Sun 15 Jun 2025 08:00:18 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: O5Nr4tU96Vbys07CSlvsmEVkhH4bd1RG++47WCAlrnU=)
2: xNx96Q3CalEzxDDmWGhbb3xTorI.roa (hash: gvLi2++gvNdVJ+GZ37QZOorhQSEvCo36oQwUoZic47Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:28:fc:2f:76:d1:9a:bc:ad:86:4c:75:a3:03:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Jun 14 08:00:18 2025 GMT
Not After : Jun 15 08:00:18 2025 GMT
Subject: CN=15c107f01d234e4ab9d63282ab21c9ca2c38adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:3b:bf:32:fb:ca:65:81:f4:ca:b4:2e:8c:
be:d6:98:ca:18:28:51:ef:29:4a:b1:6e:d9:1f:07:
83:b8:fc:b4:bf:24:21:79:d2:2c:47:91:b1:b6:a8:
04:42:57:02:3b:4d:91:a3:82:47:72:91:18:ba:26:
8e:44:7c:9e:5c:02:ac:3d:6f:c7:df:89:e7:c3:8d:
fa:05:33:70:5b:72:32:24:33:91:74:9d:04:0d:cf:
c5:c4:1a:2d:da:4b:b1:93:e4:03:d9:3a:41:ad:08:
d3:f6:34:20:ab:b1:3a:87:4e:9a:f1:ab:d8:a9:6a:
67:ae:f7:0e:9e:8b:94:3c:7e:be:6b:85:cb:7c:bf:
ce:0c:91:fe:24:25:59:2e:1c:60:e2:40:f4:5e:a2:
e5:5a:c8:89:99:3a:6e:ac:c1:12:0e:94:44:32:06:
fb:bc:3e:63:6c:14:32:5b:a8:b7:4d:e6:27:44:f0:
a4:91:50:cc:a5:b5:89:75:7d:3c:89:27:4d:5d:42:
0b:ff:49:d7:13:12:6b:7e:ab:6a:e3:d4:03:83:be:
51:48:7d:2f:eb:e9:77:9a:8c:5f:2f:9b:11:dd:c5:
a4:2d:39:d3:e2:1b:ea:16:e5:da:8a:8b:cc:8e:ad:
cc:b2:05:f3:37:46:a9:63:69:9f:26:fc:69:96:96:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C1:07:F0:1D:23:4E:4A:B9:D6:32:82:AB:21:C9:CA:2C:38:AD:C6
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4b:e2:c3:38:b9:40:9f:1c:38:d5:98:05:23:8d:9a:ad:02:
7f:09:fe:d7:69:dd:eb:06:f3:d6:65:ec:94:50:e8:0f:29:7e:
59:56:f7:16:b3:1d:b4:8f:3b:0b:a4:29:3f:40:94:1f:98:c7:
7c:4e:84:9c:ac:7b:36:d8:fd:9f:ad:64:28:25:5e:93:db:90:
dc:2e:83:fc:9b:1c:20:ce:14:a8:01:c2:d4:cf:21:9b:c2:70:
bd:9d:9b:c8:bf:0f:0f:26:6b:71:7a:b8:65:02:7c:e1:cc:d5:
73:8e:56:25:49:35:5e:52:0d:e9:55:bb:66:df:03:c4:8e:f5:
f9:c4:32:a2:c7:75:5f:15:d2:69:b7:bf:f9:1a:2f:5d:95:96:
ad:40:b7:c4:b4:ea:47:20:c5:3f:92:78:7d:54:41:b6:1d:5a:
00:55:25:20:2a:fc:e6:9b:d9:77:41:34:e8:12:09:95:2e:23:
84:48:75:c0:97:db:4d:45:bc:46:bf:be:ba:2d:03:cc:b1:57:
16:af:9a:55:86:c5:ca:56:f6:91:73:31:0c:8d:fc:9c:2e:f3:
6b:c8:86:d3:74:bf:5f:5d:dc:a7:92:2c:e8:dc:d7:80:85:aa:
71:39:59:7f:4b:da:96:a8:f8:fa:11:ff:58:85:a8:10:af:a0:
e1:0d:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:57:27 2025 by rpki-client