Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: nXAepfQc0yFFS5L5c6W3rX+3lSP5MrFRDudJiXin9CQ=
Subject key identifier: 99:69:07:97:33:17:D5:7D:B2:0F:D3:B1:39:24:CF:75:6F:01:6F:D4
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 019768F2ED06EF6B75AA6AA2F80F1DE459E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 030B
Signing time: Fri 13 Jun 2025 11:00:40 +0000
Manifest this update: Fri 13 Jun 2025 11:00:40 +0000
Manifest next update: Sat 14 Jun 2025 11:00:40 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: 16J16EKdRNbQcVYdRAs8WbLL5HRhVe0HZ1c4kw4AXjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ed:06:ef:6b:75:aa:6a:a2:f8:0f:1d:e4:59:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Jun 13 11:00:40 2025 GMT
Not After : Jun 14 11:00:40 2025 GMT
Subject: CN=996907973317d57db20fd3b13924cf756f016fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:5d:75:e1:ca:9d:3e:9b:43:32:6d:a5:af:
19:28:25:f8:52:38:3c:7d:1b:3b:bf:f9:9e:79:bc:
ee:53:04:3a:7f:c7:28:26:f5:9a:fb:7a:84:17:ab:
6c:94:f8:e4:43:f2:88:d5:ff:4e:ee:f7:d5:9d:c5:
8b:ef:18:96:5a:66:49:01:82:1e:38:03:1e:ba:da:
0d:27:91:73:dc:59:68:f7:cd:09:d4:ed:1c:5b:09:
a1:d5:d4:72:1e:f8:64:4e:bc:12:b4:9d:c7:8b:bb:
86:5e:ee:bc:f8:66:74:01:fa:68:7d:09:69:25:2c:
00:ba:3d:30:13:41:39:58:0e:f4:7c:a1:ec:4b:b0:
c7:6c:98:e9:0d:c2:92:df:74:3f:8f:3b:ec:95:45:
03:8a:f7:03:b7:2d:40:6d:b8:66:51:47:af:9a:12:
84:42:d0:0b:9f:82:a3:14:d2:1b:f8:99:82:31:c8:
af:95:d1:a6:73:c1:be:e1:4b:00:af:a9:05:da:ba:
68:8e:2c:26:67:e4:2a:5a:79:5b:78:08:13:1b:21:
99:f0:a4:fc:9e:3f:b6:aa:30:e1:f1:e4:7c:ca:b5:
d1:3b:d5:ee:fc:dc:ce:9e:48:84:4a:f6:6e:40:29:
c8:7a:f4:c5:17:c1:f6:d5:63:de:b7:db:85:84:43:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:69:07:97:33:17:D5:7D:B2:0F:D3:B1:39:24:CF:75:6F:01:6F:D4
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fc:30:2d:31:f5:06:bb:42:c2:34:5d:5c:97:f2:2c:1b:35:
be:ee:be:12:c8:17:6f:43:5d:54:57:d1:5f:cc:d4:03:d4:aa:
87:12:8b:52:a4:ba:84:68:23:ee:53:d9:ee:73:8d:12:6c:de:
ae:27:37:8c:c6:1a:95:c3:92:ba:f3:f1:d6:93:e5:e6:fc:34:
0a:0b:a6:3b:af:40:65:96:17:22:3f:d6:d8:a9:f5:be:43:be:
cc:1d:ac:5e:20:6d:2c:31:8d:ec:86:ca:d4:5a:5a:ca:aa:8c:
53:8b:15:9d:9e:29:03:1d:40:94:b8:8f:4c:bf:0a:ac:57:a9:
27:c8:06:2c:13:cd:b1:7d:12:68:c4:11:fd:7b:fa:fd:90:88:
83:0c:11:12:0a:e9:1c:28:b7:cf:ed:96:64:8e:e0:a1:2c:b6:
f5:6e:a4:8d:c8:2c:28:e6:8b:d8:d0:75:3a:bd:eb:c7:0e:06:
6a:4d:02:71:3c:6a:a6:f1:93:88:84:4c:e0:c0:e2:c0:ca:6b:
65:e4:1a:77:cb:d4:e5:06:ab:5d:d2:81:c3:84:a5:be:1c:7f:
16:5d:07:d4:48:f3:12:98:fc:9a:d7:bc:e8:84:30:cd:93:3f:
59:61:fc:63:03:0a:3e:77:02:6a:57:b9:1a:4d:c3:c0:27:cc:
96:d9:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:45 2025 by rpki-client