Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier: 3aj5DGYMT6cncFIrao5Rzv2EvAE6wP2EM+2aiRMS050=
Subject key identifier: 0B:15:57:6C:3B:CB:A2:66:CA:FC:C4:2D:7A:31:B8:5A:89:DB:48:9C
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial: 01976BBDB5ACFBEC734927759ED8415BA8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number: 047B
Signing time: Sat 14 Jun 2025 00:01:24 +0000
Manifest this update: Sat 14 Jun 2025 00:01:24 +0000
Manifest next update: Sun 15 Jun 2025 00:01:24 +0000
Files and hashes: 1: 1-I5euRLEKsr7FF-4VskQLdu5Wm0.roa (hash: 4AXnB9gGffBa+5UGJwTlfxl3dTLBtwfWaDwofBbf+WY=)
2: MtoIhFzzjtMtI4g5kxOun27y3IM.roa (hash: DlZC6F8VIFuzmjWhSIX/LygNaAgpAHPicElZhEshqgM=)
3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: OK4E3yG6Hwi2W82/43ChN+djNDVfuMAhK55LjfWEXv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:b5:ac:fb:ec:73:49:27:75:9e:d8:41:5b:a8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Validity
Not Before: Jun 14 00:01:24 2025 GMT
Not After : Jun 15 00:01:24 2025 GMT
Subject: CN=0b15576c3bcba266cafcc42d7a31b85a89db489c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:35:73:d9:85:9a:3e:61:27:b4:a2:a1:2e:
89:62:64:03:9f:11:37:97:5b:66:0c:0a:77:a0:95:
32:7a:1e:3b:e0:29:af:a2:83:95:e1:34:db:2e:ff:
3f:a4:16:7e:9c:2e:17:00:04:6b:59:a2:07:ea:c3:
8c:24:f6:97:74:5c:ca:2c:21:82:e8:6c:59:b8:19:
ce:e0:63:70:3e:57:1d:f7:fd:fb:fd:44:f6:d3:25:
57:ac:fe:cc:d0:eb:67:47:ee:cc:69:36:82:a5:5c:
5b:2a:93:a8:2f:bb:4c:c4:02:1f:33:6f:a3:05:95:
74:70:50:7a:1c:c1:4f:c9:c3:6f:39:61:a0:24:bd:
8f:f9:e1:8e:fb:1d:34:22:7a:fe:a0:a6:9e:9c:ef:
cb:7f:8f:74:c6:d0:00:f2:6a:8f:c3:f2:2b:b4:92:
94:9c:8c:3b:b5:c3:81:14:d5:06:03:86:35:a5:53:
ef:cd:d6:f7:b4:54:5c:e4:c3:0f:d6:02:23:3d:ed:
f7:cc:2d:5f:03:04:e5:37:54:8b:f9:6b:34:2d:04:
38:ca:40:84:4b:05:6c:8f:72:76:a8:5b:f5:86:83:
f1:aa:b0:65:08:09:a8:8b:ff:10:06:5c:bc:1d:52:
11:ac:db:bc:94:37:b8:3a:a3:53:ed:52:d2:c9:7c:
42:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:15:57:6C:3B:CB:A2:66:CA:FC:C4:2D:7A:31:B8:5A:89:DB:48:9C
X509v3 Authority Key Identifier:
keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ff:8f:91:71:bf:9b:e8:4f:ad:f3:2b:48:41:09:76:77:91:
c8:8c:37:8a:56:3e:5b:38:16:99:8e:1a:c7:2a:f2:d9:e7:c1:
49:59:1a:11:44:b9:8c:d4:24:4d:a7:70:e7:0c:a7:81:16:4d:
34:12:a6:e9:5e:b1:50:7b:2d:1b:ed:71:d4:67:5c:52:c4:3f:
7e:a4:b3:78:f9:bf:71:65:97:e1:bd:73:9f:b5:51:05:e3:eb:
d3:c9:87:77:e6:4c:95:28:8e:69:75:e9:13:d0:49:26:4e:9a:
dc:08:2a:4f:65:24:79:65:8b:ce:3d:e6:18:a5:23:5e:84:4a:
03:26:35:02:44:6d:db:35:d5:14:f3:14:bb:b5:07:83:e9:d7:
de:85:89:23:07:ba:73:f5:6a:cf:34:e8:f1:ae:12:77:23:50:
77:fb:04:3c:98:9d:24:50:d8:3c:56:36:57:35:5d:88:9d:18:
72:c2:aa:c0:99:5f:bf:f0:35:ee:0d:be:80:97:79:ee:59:0a:
6d:66:fc:7e:58:22:13:4c:67:1d:d5:5d:40:64:d4:7b:ad:a0:
69:1a:e8:ac:b3:c3:3e:eb:81:ee:28:13:84:83:df:c2:5f:04:
e3:57:f8:a4:b6:7a:d0:a8:9c:d7:09:59:8c:01:36:87:e3:64:
ba:ce:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:24:05 2025 by rpki-client