Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: HqOTnvBBqTapVmY8ek2yPKWY6A5BerF9rPsCyzkv/qo=
Subject key identifier: 0C:DD:02:E6:AC:E9:80:15:83:69:1A:C1:30:70:A7:F1:7B:1F:F7:78
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 01976EBDC6D1945ECCA9BE783D7A548CD0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0BF3
Signing time: Sat 14 Jun 2025 14:00:20 +0000
Manifest this update: Sat 14 Jun 2025 14:00:20 +0000
Manifest next update: Sun 15 Jun 2025 14:00:20 +0000
Files and hashes: 1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: lui6177vsKdie8MzYaIj9z4A6z5S7zIcHe1hgS4G5ok=)
4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:c6:d1:94:5e:cc:a9:be:78:3d:7a:54:8c:d0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Jun 14 14:00:20 2025 GMT
Not After : Jun 15 14:00:20 2025 GMT
Subject: CN=0cdd02e6ace9801583691ac13070a7f17b1ff778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:99:2a:bb:10:59:1a:86:5b:25:3e:3b:d1:
2f:78:90:69:2f:26:fb:bc:72:0d:25:2c:90:6c:58:
fb:ae:10:64:7c:12:8c:ad:bf:f9:89:d7:af:e9:3b:
d8:4d:89:4e:24:9c:02:9e:3c:22:c6:42:0c:c2:43:
8e:5d:3a:6d:6d:e0:d6:9b:58:48:40:96:13:25:0d:
98:04:6b:95:62:17:fb:b5:91:36:96:1d:f4:b3:51:
f0:00:6f:57:3b:75:26:cd:40:6d:57:19:ab:38:8f:
48:98:cc:f2:91:a4:0a:fd:27:a5:8a:68:6b:97:a0:
af:1a:b5:38:fe:d1:29:97:da:f4:5e:d5:22:56:cc:
b6:b4:f9:8c:91:16:15:ac:4f:7e:27:2e:85:6f:0f:
2a:6e:c8:92:92:77:2f:2d:72:c1:4c:dc:63:4b:4b:
34:9e:0f:f0:10:f9:e7:97:27:64:62:48:5e:8e:89:
09:42:9d:2c:a3:14:c9:af:e2:f7:d5:e8:e8:a4:3f:
92:b2:b0:5a:b2:d1:4e:56:c6:b7:34:9b:54:35:72:
83:3f:99:3c:07:a1:c2:c7:97:4c:d0:8b:59:fb:2c:
fb:2c:ed:7c:f8:fd:33:f2:80:a3:a5:68:25:ca:22:
66:2d:81:60:39:07:e2:f6:2f:30:06:43:f0:1c:37:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:02:E6:AC:E9:80:15:83:69:1A:C1:30:70:A7:F1:7B:1F:F7:78
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:36:83:28:d1:26:62:47:87:35:a1:0e:1b:e7:13:ef:77:a5:
47:c8:6d:b9:a6:1e:4b:ab:d2:28:a2:e3:2a:9f:42:0d:8a:4b:
8d:d8:03:a8:2b:db:d1:27:ab:97:cc:f8:97:11:4e:53:2a:4f:
4d:0a:64:f3:17:25:65:bd:3f:9e:65:e5:ad:5c:4d:69:1f:80:
57:07:0b:bf:71:82:0c:85:f3:18:6f:87:09:cf:df:2b:85:65:
7e:50:42:32:3d:c2:9c:49:a7:d0:d0:d8:24:fa:42:db:85:cc:
39:d8:97:49:43:c0:06:ac:8c:88:64:eb:b2:44:07:53:3c:b1:
c0:6f:b2:ac:92:b9:55:a5:57:d4:29:ba:67:66:b1:3b:65:48:
f4:83:d7:87:7c:1d:31:3a:a0:fb:e8:4c:78:24:a2:42:0e:b9:
3b:77:12:ac:05:78:d8:35:b1:ad:cf:dd:6c:04:36:14:f3:fd:
b9:c7:ec:6f:f5:95:0d:88:79:a8:23:20:96:a4:66:a8:28:83:
71:93:9b:c5:01:5b:2f:57:64:21:17:48:14:3a:02:64:70:3d:
3d:89:50:bd:b8:57:63:8a:4c:ae:24:85:bf:f0:da:fd:8a:91:
e8:9e:2d:09:54:6b:73:3f:18:e4:af:f6:a4:3c:5e:f0:fa:cd:
62:d0:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:23:33 2025 by rpki-client