Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: rfdwpkD72lRJYUKF9ibQ9QPi6PY22FmBe0kSjHjVPuE=
Subject key identifier: 1C:5E:4D:AC:8F:68:50:4B:A3:11:CF:9C:8E:73:75:A6:F0:5B:A3:41
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 019873065E209B6A2EA745FC30FE92AC7B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0A24
Signing time: Mon 04 Aug 2025 03:00:53 +0000
Manifest this update: Mon 04 Aug 2025 03:00:53 +0000
Manifest next update: Tue 05 Aug 2025 03:00:53 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: p0NP/MVsX1Sfl/CjICnhHf4sJf2DC0blA8U5O3bgF0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:5e:20:9b:6a:2e:a7:45:fc:30:fe:92:ac:7b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Aug 4 03:00:53 2025 GMT
Not After : Aug 5 03:00:53 2025 GMT
Subject: CN=1c5e4dac8f68504ba311cf9c8e7375a6f05ba341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:59:54:42:ac:ae:fa:83:e2:1f:1e:a7:55:
7f:27:06:39:bd:f4:f0:77:93:92:db:a1:e8:90:87:
ac:c7:26:ce:83:f6:87:96:c0:70:02:05:ed:81:4e:
4a:c0:c2:8e:7a:ae:a3:69:d8:4f:ae:d8:45:82:61:
10:43:d2:b0:2d:ff:b4:92:c6:00:ed:a3:7e:b5:c8:
01:de:c6:de:39:d9:b6:23:3a:e0:52:7a:a0:cb:1f:
55:b6:be:ac:d6:f5:26:0c:b5:2d:ff:d1:9b:17:cd:
cd:69:a1:9c:65:8c:da:b2:8d:99:ea:3f:97:41:88:
b2:9c:8a:45:88:1d:59:58:51:98:8c:57:b5:43:5e:
3d:23:b8:97:34:ff:76:ee:46:b4:6f:ca:66:32:0c:
4e:5a:e7:bf:2a:26:c1:1b:f9:29:f2:64:f0:0d:02:
4c:11:33:fa:80:3d:04:f7:e4:02:59:60:9d:db:09:
30:0f:74:6b:9a:3e:5b:7d:51:62:af:19:c5:39:c7:
01:86:9a:8b:92:af:76:7d:5f:57:f9:92:46:dc:b7:
08:b9:35:5b:61:ba:73:49:15:21:2a:20:34:45:e5:
49:d9:18:06:c7:1f:04:35:68:a3:cd:1c:15:e0:ff:
f8:2b:be:08:d5:df:29:7e:41:7c:78:d3:6a:d1:9e:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5E:4D:AC:8F:68:50:4B:A3:11:CF:9C:8E:73:75:A6:F0:5B:A3:41
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:71:6a:7b:95:57:a2:af:4f:2d:46:89:01:8b:6a:db:7c:fd:
74:34:49:ca:23:e5:95:59:cb:ce:6d:44:7a:41:a0:5a:7d:55:
6f:ff:e7:5f:d4:90:51:44:ff:85:dc:b8:d0:36:33:cd:6d:4f:
1e:47:2e:2e:83:53:c9:76:b4:14:32:e6:cd:02:fa:54:75:13:
f8:15:a8:47:14:14:7a:d6:b3:74:ce:d5:36:8b:3c:56:e8:9e:
9d:89:9b:d9:83:d7:74:35:24:a6:3d:09:8e:59:58:e4:88:8c:
94:02:14:d7:46:b6:e6:dc:fa:81:1d:35:df:db:68:30:b1:89:
03:81:df:12:4b:29:f8:f6:99:58:03:e8:b2:5f:09:fd:b7:7d:
9a:09:7c:68:78:99:67:12:21:9a:fe:87:c4:20:70:9d:82:21:
e3:5e:d8:2e:83:e3:ea:2e:df:9a:11:90:3f:d6:38:4f:73:1a:
c5:d5:b9:f0:ec:2d:52:0c:8b:58:a1:d5:24:0f:6a:6b:7c:58:
29:69:d1:57:cf:37:4f:46:7e:25:51:d6:17:2c:cf:a4:7d:a1:
11:86:34:c8:bc:11:f1:f3:65:52:fc:30:86:3c:de:32:39:e2:
62:fa:03:25:1f:6b:56:95:8b:ac:e1:4e:85:db:f7:b9:2d:a9:
ea:d2:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:04 2025 by rpki-client