Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: LDl4KlsZzpmoVSDz8Jzpv3ukm6g+GQEO2u67YMJjnmk=
Subject key identifier: E9:8D:99:0E:A1:13:3F:76:E3:60:08:44:08:14:F9:EC:22:88:BC:6C
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019776E60DB4F09C8785DAEA524D947068FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 09A8
Signing time: Mon 16 Jun 2025 04:01:17 +0000
Manifest this update: Mon 16 Jun 2025 04:01:17 +0000
Manifest next update: Tue 17 Jun 2025 04:01:17 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: ANmmaRJv9LNenCVCfmTeZAZ6Glvs9FQmx7+me/+2TWk=)
2: RymBY7lnNBMXp_yUGm6cXmk9pIY.roa (hash: NXhw0vi4/QtrtywYV0kwabkAShMb2W3sLGUUgAEfvq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:0d:b4:f0:9c:87:85:da:ea:52:4d:94:70:68:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jun 16 04:01:17 2025 GMT
Not After : Jun 17 04:01:17 2025 GMT
Subject: CN=e98d990ea1133f76e36008440814f9ec2288bc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:eb:05:37:31:21:67:38:6e:df:e8:74:8a:
a0:d3:ec:39:94:b5:1d:23:f4:94:45:2e:0e:d4:fb:
14:9a:ff:cd:c9:28:a1:16:4f:2e:5c:66:9b:b6:64:
6c:03:37:53:5b:18:ec:5f:29:6e:97:b7:bc:f1:30:
b1:82:21:57:a9:97:ec:bf:77:a7:8b:65:0e:99:8c:
b4:ae:5f:59:f9:c5:d5:ec:a5:39:52:8d:0c:a0:79:
56:9a:af:c2:34:df:96:00:e6:cf:79:9f:a8:b8:77:
cf:28:a9:41:bc:0e:d2:9f:7b:c5:1b:20:0e:49:49:
59:e9:d3:1a:6b:a1:6d:87:a7:6a:ae:6e:ec:79:7d:
01:85:02:6c:af:29:0a:89:9b:d8:7b:ef:d4:d6:a0:
aa:1e:9d:8c:f2:7b:6a:f0:30:a5:d6:33:57:0f:c0:
28:ae:60:00:9e:43:76:14:1b:92:cd:95:87:88:63:
be:1c:59:b9:cf:7b:c9:05:41:1f:f8:fc:ff:c4:ae:
1a:e3:c1:e3:a1:48:ec:25:ad:82:9e:cd:c6:a5:43:
60:e6:7c:e5:51:e7:79:da:9e:10:1f:b3:da:15:5f:
dc:67:c8:48:68:01:f9:2b:d5:16:eb:ef:54:8c:d5:
18:93:f5:81:0d:79:f5:9b:9f:e4:9f:99:c3:51:cb:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8D:99:0E:A1:13:3F:76:E3:60:08:44:08:14:F9:EC:22:88:BC:6C
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e6:25:71:f9:bc:f2:0d:f7:23:89:6c:73:d2:2d:01:21:33:
b6:d3:8c:5f:94:03:dc:92:10:03:a7:56:91:61:2a:f7:2d:e1:
21:fa:74:66:9c:40:92:f5:86:ae:19:09:a5:0c:0c:0a:61:86:
7e:7b:53:99:71:f2:33:89:ed:9c:1c:de:74:b0:c4:2e:3f:cb:
28:fe:7b:7d:ad:fb:13:2c:dd:a2:a2:d9:78:c3:a1:b1:c8:aa:
c9:85:63:bb:97:54:62:e8:d8:cb:50:32:64:fb:f8:c5:c5:c9:
50:4d:b9:b0:cf:9e:46:06:a5:c4:ce:aa:2d:33:59:53:0f:53:
80:25:04:08:3d:b3:72:82:7f:11:d0:78:06:02:9e:87:75:6a:
10:ff:9d:98:7b:7f:01:d5:99:f5:7e:d8:2f:73:1d:d8:c8:c6:
3d:a4:52:b6:fc:a0:e8:ec:99:c7:31:9f:a8:c3:aa:70:8f:0f:
32:9d:fa:36:74:cb:ea:61:ed:d9:15:ba:89:31:fa:00:58:93:
e7:91:7f:a1:5c:67:5b:0c:61:35:29:99:51:d1:f8:fc:07:cb:
54:21:95:96:67:3d:8a:27:2c:09:e7:5f:f6:30:4e:a2:3b:a0:
77:5b:37:05:58:e8:16:d5:be:3e:ce:3b:43:6f:52:fb:a0:ec:
4e:39:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:23:34 2025 by rpki-client