Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: whEeQVBogEIfV6LymuhPvWVEN2ZsLJPWWoaDxZVxXjg=
Subject key identifier: 18:0C:6E:22:DD:D1:06:78:14:41:F0:80:FD:4F:E6:CD:9B:FB:81:9E
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 01976884DAEA1E002C4481E2E40D04F80B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 099A
Signing time: Fri 13 Jun 2025 09:00:26 +0000
Manifest this update: Fri 13 Jun 2025 09:00:26 +0000
Manifest next update: Sat 14 Jun 2025 09:00:26 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: YUH56SRZ2cIiZinEx3ue9FmGAHkpLPd/L+Xzro4Fojw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:da:ea:1e:00:2c:44:81:e2:e4:0d:04:f8:0b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Jun 13 09:00:26 2025 GMT
Not After : Jun 14 09:00:26 2025 GMT
Subject: CN=180c6e22ddd106781441f080fd4fe6cd9bfb819e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:48:8e:08:d1:2f:95:79:32:1b:83:6e:33:
78:da:c7:8b:0f:a0:ba:45:ef:c3:95:f3:fc:93:86:
19:67:ef:a5:f1:0a:ba:3e:d9:48:f5:fa:6d:e1:03:
76:66:3d:aa:e7:fd:39:28:6a:47:38:a5:fb:6a:a0:
86:f2:23:7a:9f:85:70:8d:0f:3f:8c:77:a7:2f:9b:
94:93:12:ef:3a:b7:b8:db:0a:ef:08:54:9c:aa:ec:
74:11:bb:5d:6c:2e:a7:d1:91:59:b7:d9:8d:d9:a7:
38:04:e7:28:da:6e:c5:de:6b:6f:0f:f7:b6:e6:62:
aa:d0:59:84:ba:f3:f1:a7:87:c7:88:e0:da:8a:3e:
e3:9c:c4:a1:84:22:0c:49:c7:82:c2:a4:e6:a0:1e:
1e:57:aa:83:42:00:fa:40:0d:db:db:0f:27:eb:3c:
92:cd:3c:c9:46:4f:91:70:74:62:8e:78:ed:22:d9:
a3:a0:60:09:2c:fe:e0:bb:4f:af:6c:39:0d:92:3d:
38:16:3d:e4:21:8a:9c:5c:0f:76:83:59:51:08:3b:
52:21:47:5e:f6:ca:e7:75:23:a9:ce:c0:66:f2:cc:
be:0e:0a:d5:25:41:9d:15:f8:2c:da:de:30:d0:b2:
a6:21:8a:7a:d6:75:df:d1:5b:f8:6a:15:56:3d:1d:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0C:6E:22:DD:D1:06:78:14:41:F0:80:FD:4F:E6:CD:9B:FB:81:9E
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:95:5f:17:2f:ee:ff:22:90:af:f5:bb:4d:b2:4d:70:cc:43:
78:f9:a3:04:e8:d6:d9:b8:b2:02:8d:27:4e:fb:d7:a3:0e:8e:
b4:e8:33:30:3e:e1:ea:fd:76:60:1c:47:53:32:5d:93:be:8e:
c5:c4:53:28:20:1c:80:9e:6f:b1:b7:9a:5b:e1:82:95:ca:df:
d1:eb:d8:85:07:57:93:c5:20:81:f9:00:37:7f:7d:52:53:9b:
d7:11:a2:8e:dd:bb:7d:7c:11:eb:35:5f:70:12:b7:94:f3:45:
f1:a0:e9:1e:2d:70:7b:c2:d5:78:e0:81:d1:0a:4e:03:a7:10:
f3:76:c0:e7:a7:08:8f:ca:3a:5a:90:3c:da:1f:a1:3c:b2:c8:
91:4c:ae:81:c6:d2:82:5d:fa:22:47:e6:ae:ec:e8:b2:83:45:
da:95:b0:6e:c6:ea:6b:4d:f7:71:e2:34:32:41:28:f5:dd:ee:
30:cf:a4:52:10:b4:24:bd:e0:4d:43:06:0e:b5:f6:f1:11:ad:
40:78:5c:3c:0a:31:ea:dc:ab:08:f6:39:de:e7:5a:70:53:2d:
4a:d1:e5:92:d6:66:fb:91:76:28:f7:5e:f1:e3:4d:d0:ec:59:
f3:8f:63:74:33:80:1a:27:13:ed:0f:0c:87:3b:ce:93:7d:2e:
c9:67:33:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:41 2025 by rpki-client