Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: pozeZTib3zeHLd0zw+vNFH7BeGlk62Ce0vk43UuXG8s=
Subject key identifier: 8E:34:0C:42:A3:5B:6A:23:AC:4E:D1:EA:58:35:CB:51:E8:84:88:01
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 01976F62B7B90140135C6625EF9151B18172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 067A
Signing time: Sat 14 Jun 2025 17:00:29 +0000
Manifest this update: Sat 14 Jun 2025 17:00:29 +0000
Manifest next update: Sun 15 Jun 2025 17:00:29 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: Bm+9CCc/Pxe+7CxQGGVyiG5JI5BGeh/xfZg+4+ChDCI=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:b7:b9:01:40:13:5c:66:25:ef:91:51:b1:81:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Jun 14 17:00:29 2025 GMT
Not After : Jun 15 17:00:29 2025 GMT
Subject: CN=8e340c42a35b6a23ac4ed1ea5835cb51e8848801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:c4:6e:ff:78:68:f3:64:13:7d:da:fb:11:
df:3a:5b:5f:ec:02:b2:dd:19:dc:0c:10:17:81:f4:
4a:06:32:db:ea:85:5f:43:48:e1:27:dc:14:c8:92:
ce:5d:1e:58:f0:21:44:62:a3:20:c2:6b:53:09:e3:
8a:de:e6:0c:00:e1:ae:d6:1c:56:b2:37:d1:c1:5c:
11:86:de:8c:4c:b2:ad:c8:e2:5d:2f:78:c9:02:84:
71:b6:8c:0d:0e:b3:62:89:97:41:91:51:4e:19:53:
91:52:a1:63:d4:de:dc:48:6f:df:7d:e6:0c:eb:9a:
57:73:8d:37:8c:e9:dc:27:e4:06:19:89:fe:75:32:
28:de:2b:be:3f:2d:5a:cf:74:c1:16:08:b8:a5:b8:
c2:d0:46:a5:68:1c:a1:33:2e:78:e6:a3:e5:de:04:
68:ac:2c:75:69:19:72:54:3b:79:64:bc:37:85:86:
aa:40:c5:9c:41:b8:1c:e5:41:c3:06:07:7e:8c:1c:
a8:38:8c:2a:d6:6a:b3:ee:b4:7b:c2:50:dc:f7:d2:
68:45:9c:d1:d2:f7:88:fe:c8:d7:88:77:8d:04:9a:
a4:14:80:a6:42:41:6f:f7:e7:ac:2d:6b:df:be:79:
b9:d4:20:4a:db:6c:57:ce:20:3d:ee:16:9d:9c:e8:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:34:0C:42:A3:5B:6A:23:AC:4E:D1:EA:58:35:CB:51:E8:84:88:01
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e1:14:bc:71:5c:9e:18:8c:c7:8a:94:db:95:21:f6:ee:70:
63:a2:26:ef:9a:e9:af:1f:cc:ea:47:7a:70:95:95:cc:5a:71:
d0:90:a9:fb:c9:8b:e7:3e:6e:fa:c4:d0:b8:98:82:be:23:44:
93:1d:85:8a:c9:c4:2f:82:61:86:51:e7:6b:de:d0:e1:c8:71:
c6:ca:6b:fb:50:27:4d:fa:92:28:5c:4f:5d:ca:ed:ca:61:31:
4a:86:dc:cf:bd:11:48:77:56:a4:02:ab:d0:e7:eb:aa:d1:92:
24:ef:41:23:bc:06:9b:e1:ab:0b:30:2a:29:a7:dc:4c:bd:78:
22:7d:5c:1f:5f:1d:b2:56:22:fb:54:ea:46:3f:25:78:b9:54:
8c:4f:ad:0f:51:ef:8d:b7:39:a2:bd:b3:39:4b:71:de:7d:9a:
a0:3b:fd:7b:79:7a:1b:4c:7e:96:bb:58:aa:1f:95:00:60:09:
89:31:bd:61:68:f9:04:d3:d4:bd:16:ca:6e:91:d4:a8:0b:d9:
11:d7:ce:92:6e:14:b2:59:2c:87:c2:40:bd:a0:a9:25:63:88:
e2:51:08:a6:e0:b1:87:79:ac:5e:2f:77:8a:5f:45:fd:7a:35:
ab:1d:f3:14:c7:74:bc:e6:f3:15:f4:00:77:07:07:99:41:f0:
e3:e7:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:22 2025 by rpki-client