Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: NV+M6Fmvv/+iF6lMNrNmOB4eAI/tHXEMAB5P8Y/3T8c=
Subject key identifier: 7F:FF:5E:91:E0:7E:49:03:DA:78:C3:17:EE:D1:28:B1:89:23:EA:E5
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 01987306651A1262221D62C029F61736BD46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 0A3E
Signing time: Mon 04 Aug 2025 03:00:55 +0000
Manifest this update: Mon 04 Aug 2025 03:00:55 +0000
Manifest next update: Tue 05 Aug 2025 03:00:55 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 1k5REblan5D+Y4eV2ddyUc7SfbT7Vd7hqGeqqiEwKmo=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:65:1a:12:62:22:1d:62:c0:29:f6:17:36:bd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Aug 4 03:00:55 2025 GMT
Not After : Aug 5 03:00:55 2025 GMT
Subject: CN=7fff5e91e07e4903da78c317eed128b18923eae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:d2:78:6d:f7:ff:c0:53:71:00:0c:70:36:
a6:e7:3f:89:e2:1b:b0:49:ca:70:7d:d3:7a:9e:a1:
3b:e5:26:6e:96:3d:bb:e2:be:78:7c:50:04:2d:9e:
97:a5:b9:df:96:55:bb:e2:3f:f8:9c:7e:24:48:a7:
a2:aa:c2:dd:21:db:22:e0:63:c1:7b:32:6e:f4:1f:
c8:93:03:e3:1a:27:fd:df:84:c7:de:73:63:09:0b:
79:69:01:d5:a8:26:a2:b4:f4:70:70:45:8e:17:c0:
df:82:8c:d5:05:5d:5b:c2:66:ea:3b:3e:05:b3:d9:
4d:07:ea:81:e2:0b:20:a6:df:d1:a9:15:db:64:b6:
b8:93:3d:08:da:67:ed:b0:d0:a7:3b:10:11:1f:60:
3f:32:16:ae:53:ba:ff:1b:18:22:99:80:a5:1b:c3:
d1:34:e6:69:07:e9:dd:29:3c:33:58:b5:d2:b8:00:
09:31:39:ec:42:d3:6d:ff:b0:dc:98:ac:4d:dd:99:
75:01:b4:88:f1:fe:86:51:22:3d:33:5d:15:c6:48:
05:92:08:c5:eb:f7:bd:7a:4d:63:fc:bb:f6:a6:f8:
41:a3:9e:22:5d:bc:3f:ae:1d:0a:77:ca:c8:81:1a:
12:bc:e6:a5:6a:c4:81:82:7f:e2:06:b1:c5:a3:ea:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FF:5E:91:E0:7E:49:03:DA:78:C3:17:EE:D1:28:B1:89:23:EA:E5
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:02:a4:dd:28:10:d8:fa:8f:68:f6:f9:24:c0:03:2b:8d:58:
12:1a:f5:cc:12:38:20:ce:3a:9d:a2:dc:60:1b:52:af:69:72:
95:21:0a:e9:5c:a9:22:8d:f9:68:cf:4b:87:75:b3:6d:38:c5:
88:41:a6:8b:3b:91:68:24:99:d7:36:e5:72:e1:25:e5:36:4d:
d6:ee:95:b7:96:5f:e1:ad:81:c1:51:e8:52:0b:e0:6e:54:fe:
56:e3:c8:88:34:d8:e4:bf:94:e7:63:13:1d:70:71:6a:07:a2:
af:45:a4:18:bb:8e:49:87:a6:8f:b0:0d:3b:33:fb:93:d7:de:
9a:f2:e1:96:56:bd:8c:3a:2f:8e:2b:74:32:94:b3:62:ec:d4:
f6:ba:14:ee:ab:15:ce:30:57:d6:b8:dc:bc:5d:6f:a0:71:d0:
1b:1e:9d:db:ec:4a:85:7b:e9:90:a0:12:b0:84:96:8a:1b:2b:
cc:4b:1f:f0:b2:31:01:cc:ea:66:a2:28:66:4d:8f:f3:71:7a:
97:b4:bf:6b:5d:fe:5a:ec:14:da:4f:9f:13:0e:da:1d:34:51:
4f:ba:08:2b:b3:db:39:56:71:19:cd:f0:7e:0a:78:f2:5e:26:
22:d7:30:75:e6:df:ee:a1:ad:fe:31:89:e8:1c:99:c0:06:6e:
d2:e9:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:04 2025 by rpki-client