Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: ZDoNByuul+ddEeg7JanDD/J4cK+yGKQTFwNl+90/F6A=
Subject key identifier: A5:A9:A0:9A:22:13:D3:E7:FE:04:1E:01:24:EA:6D:52:61:54:3C:16
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 01976EF4BFB42454A16A24E17D7AAD686D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0AFC
Signing time: Sat 14 Jun 2025 15:00:22 +0000
Manifest this update: Sat 14 Jun 2025 15:00:22 +0000
Manifest next update: Sun 15 Jun 2025 15:00:22 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: IXt+FnyJmk/biUeSbeBexhrJKG4xQh0bw06h104XRYc=)
2: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=)
3: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:bf:b4:24:54:a1:6a:24:e1:7d:7a:ad:68:6d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Jun 14 15:00:22 2025 GMT
Not After : Jun 15 15:00:22 2025 GMT
Subject: CN=a5a9a09a2213d3e7fe041e0124ea6d5261543c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:09:df:0a:68:6f:70:e7:1b:d5:59:8a:06:
48:f8:63:4a:8b:e3:af:3a:9a:62:7b:da:6f:9e:dc:
0a:ec:a1:ae:0b:dc:08:b0:71:b0:5c:b4:f6:aa:5a:
47:d5:9c:f0:5e:1d:6b:dd:6f:4d:36:03:96:09:f3:
eb:60:21:b7:0a:70:5c:d6:35:7b:09:c4:9c:f6:04:
a8:38:80:cd:25:5f:ce:ec:5e:ff:02:ea:d4:67:89:
3b:4c:aa:b6:b2:25:ec:14:f5:20:30:0b:8e:b2:bd:
10:5b:5d:a0:b9:7f:60:e6:c1:ce:f3:22:9c:98:1f:
c3:fc:2a:45:4b:49:f3:57:2f:e8:01:1b:26:22:9d:
9a:88:60:3d:d8:43:04:8e:f8:d6:dd:42:a6:72:7b:
55:0f:06:54:33:8a:4d:b7:27:99:d5:6a:cd:8e:48:
bb:23:20:be:81:6c:07:4d:b3:f6:16:e3:a1:c9:52:
78:54:d5:91:fc:ef:e3:99:47:9e:86:bf:51:8a:63:
c1:ce:5b:c5:77:f6:54:aa:9c:42:a7:9f:fd:10:a5:
23:be:e8:cf:70:54:7d:46:14:3c:d7:89:2b:5f:24:
bc:55:fa:ff:2b:50:b9:50:40:b3:91:59:48:27:50:
df:d1:c8:7c:45:3a:4b:72:f0:90:92:db:ca:19:39:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A9:A0:9A:22:13:D3:E7:FE:04:1E:01:24:EA:6D:52:61:54:3C:16
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fc:22:73:83:9d:73:55:1d:ed:2c:98:8e:3c:30:9e:5a:85:
f4:33:25:1e:13:28:4b:9d:22:fb:dc:c6:b9:4a:53:ae:9f:ab:
77:5e:36:a7:3e:86:ad:8d:e2:fa:37:ce:e0:a1:ce:7b:63:a6:
21:94:df:cd:f5:f0:e2:8e:27:0c:52:ee:2a:11:fa:11:7b:ac:
aa:4e:bf:b2:80:67:29:d8:de:4c:0d:82:f3:c8:1d:f3:67:80:
7d:69:ca:30:ee:28:26:56:b3:42:a6:23:62:d8:0e:64:54:e9:
a2:41:64:4c:13:37:70:a7:37:51:de:05:30:94:7a:f9:c8:4e:
16:e0:04:63:5e:d9:6e:f1:e6:15:1a:3e:dc:bf:c0:0f:ad:2b:
28:cb:41:93:a6:12:e0:a1:33:75:4e:d2:4f:9e:a0:81:61:58:
7d:a3:23:db:6b:e3:71:3a:3a:da:ad:7c:82:4e:85:85:51:6c:
28:28:6d:4d:35:15:de:77:ff:2a:9a:a6:dd:30:9f:64:4f:24:
a1:6d:69:e1:ea:f5:cc:f9:6d:be:9f:22:46:c1:b2:d7:e4:7e:
40:78:30:76:7f:f9:c1:95:20:32:0c:0a:15:c5:ad:31:b5:72:
3a:97:0f:f5:1c:48:e7:a2:11:6d:56:e0:9e:28:6a:b0:c3:1e:
e5:0a:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:07:27 2025 by rpki-client