Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: D7L0JelDdz6unqJV6RwYIz0pxJRl/yikNRsJw1Hn3Vg=
Subject key identifier: 9C:ED:71:11:8A:07:F6:0F:D1:5D:27:F8:F1:AA:9A:9E:A4:46:21:1C
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 01976D3E5D38FF53BDDD6B981E8CD2B09A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 14BD
Signing time: Sat 14 Jun 2025 07:01:32 +0000
Manifest this update: Sat 14 Jun 2025 07:01:32 +0000
Manifest next update: Sun 15 Jun 2025 07:01:32 +0000
Files and hashes: 1: eUC78a5iIDA3NnkTRgfvxwNqxjg.roa (hash: gOCTr9qoGQ7aucr1ozDn80KAKdoZpLb4iX/BnNIbZIY=)
2: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: tmNwqq2Wbvf579kpoor78viiOSkYUDRHQQAo55uFb6w=)
3: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:5d:38:ff:53:bd:dd:6b:98:1e:8c:d2:b0:9a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Jun 14 07:01:32 2025 GMT
Not After : Jun 15 07:01:32 2025 GMT
Subject: CN=9ced71118a07f60fd15d27f8f1aa9a9ea446211c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:55:f4:cd:af:72:f1:86:c6:1e:9b:d1:73:
e6:ed:6f:20:cd:67:30:f1:f5:b7:6d:a6:15:c2:95:
79:bb:5d:ca:90:12:c9:fe:32:da:49:42:a1:93:2c:
39:6e:02:35:e0:74:0e:d3:57:e9:5e:55:80:2b:9a:
88:f6:f5:0a:98:95:2f:12:d8:32:19:0b:a7:44:cb:
2a:58:e2:d6:b4:43:87:2a:24:64:43:63:e1:38:e2:
68:5d:2a:e2:f1:92:90:4b:a3:d8:5f:c1:45:90:ce:
c6:ec:30:5c:63:c0:c4:22:6e:66:c3:d4:fd:d8:42:
07:01:9b:ba:1b:b8:81:1d:b9:62:fa:63:50:7a:ad:
4d:92:8a:0d:b7:c8:42:cc:ce:df:a9:90:44:6d:bc:
bd:1d:c1:2d:44:97:dd:a1:41:ba:87:c9:11:bd:60:
32:34:c6:6a:17:87:39:3a:9e:10:02:ef:a7:c0:00:
5c:54:c0:64:35:17:65:5a:f8:c0:0a:29:82:fc:5e:
70:8a:22:64:bc:90:bc:65:cc:ff:ee:8b:a8:89:02:
50:55:55:f9:01:43:56:fe:b3:f8:83:fd:99:37:d9:
07:d3:57:52:35:ee:49:85:69:60:db:f2:45:74:27:
2e:ae:f9:aa:ba:48:dc:3d:89:94:aa:16:d5:f9:67:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:ED:71:11:8A:07:F6:0F:D1:5D:27:F8:F1:AA:9A:9E:A4:46:21:1C
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:82:fc:2b:fd:0f:7c:50:39:e5:eb:84:1b:9b:41:f3:39:27:
fd:76:64:68:94:02:b5:85:31:fe:2d:74:ac:7a:47:ad:7a:f1:
bf:7d:1e:ed:ad:7d:73:b3:c3:b1:9e:ac:20:86:8e:ff:48:c5:
68:ca:e6:5b:78:1a:61:e3:4b:b5:b8:a8:77:b7:52:52:1f:86:
05:7c:26:5c:1e:5e:13:a2:8d:d1:0c:6b:8f:4d:a9:bc:13:ef:
f2:7f:07:d2:aa:44:5d:f9:6c:46:08:95:42:19:1f:d3:52:1f:
7e:d4:85:d4:d6:da:c4:b8:5c:ff:3c:f3:a0:7e:43:07:ec:ee:
3b:dc:0c:74:e9:86:5e:52:bf:1d:c2:d6:b5:a6:de:50:a8:0f:
4f:9b:42:2f:fc:1b:fe:a4:58:80:bb:ea:69:8b:16:81:6a:69:
13:36:f4:84:6a:15:c3:61:42:b2:03:3f:ba:4c:a7:d9:25:1d:
c1:af:c8:d6:d5:12:7b:1b:03:52:9c:fd:4f:1f:48:2b:dd:fe:
33:67:65:12:4c:ab:7d:9d:a3:c0:2b:6a:6e:06:bf:d0:d7:3b:
38:69:84:46:85:4a:00:d4:c1:03:f7:f2:25:69:8c:81:24:11:
35:4b:54:fd:52:be:48:f4:8a:e1:71:79:ab:b6:7b:dd:36:0c:
c8:fd:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:54:32 2025 by rpki-client