Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: UniJ9N9SpwDPAiz0yexFPXWVNh/gei87jm7PIHjr7Qc=
Subject key identifier: 7A:EC:D2:A8:EC:F8:16:00:1F:BD:D5:AE:17:61:B4:6B:39:0C:17:25
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 01976D3E0BD22772FFCC06D56679DA3EAA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 04FF
Signing time: Sat 14 Jun 2025 07:01:12 +0000
Manifest this update: Sat 14 Jun 2025 07:01:12 +0000
Manifest next update: Sun 15 Jun 2025 07:01:12 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: hi3ca3fJkFFbaBZMxO6b6dtZpWYCOAo398IGypZKDgY=)
2: IZ-nCDCZ_WFPQrV4b51Gvn4a1GU.roa (hash: 1zcxhGAttFQP5ld0bDKnJ/ztckFUeO0GInmPR3RRBiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:0b:d2:27:72:ff:cc:06:d5:66:79:da:3e:aa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Jun 14 07:01:12 2025 GMT
Not After : Jun 15 07:01:12 2025 GMT
Subject: CN=7aecd2a8ecf816001fbdd5ae1761b46b390c1725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8b:76:74:f0:fa:d2:7c:f3:0a:89:23:4f:83:
22:3f:8a:26:cf:b4:cb:a8:cb:7b:02:1f:74:16:17:
79:7c:dd:ac:5e:fe:02:7d:49:fd:32:9d:32:49:6b:
92:14:94:ba:fb:eb:f8:7c:19:ed:57:00:02:bd:4e:
d9:ee:0d:27:7b:66:4c:47:fe:b5:f0:48:c3:76:61:
54:93:6f:84:d1:90:28:80:43:b4:98:4d:d7:32:04:
49:bd:95:5f:60:01:bb:32:ee:5b:f7:07:b0:65:93:
bf:6d:f6:bd:d2:f1:33:8d:16:3a:75:16:e7:a8:06:
c5:5d:fd:17:38:02:9d:66:47:06:1d:dc:85:29:02:
58:02:df:88:9a:34:7e:73:bb:26:18:25:0a:de:0c:
c9:28:fe:65:48:a6:a4:5a:2d:5b:7d:90:c5:21:76:
3c:f8:bb:ef:07:2a:e4:86:c3:2c:59:b1:6f:c2:99:
17:db:d1:43:ff:4e:55:43:fb:0e:fe:73:1b:9d:93:
7a:0e:ba:58:97:9c:fb:1e:5c:65:e3:f9:e9:f0:24:
1a:8d:ca:57:4a:3c:ee:89:57:a9:e7:46:28:bb:25:
23:cb:81:e9:16:dd:d3:f1:8c:4d:70:63:89:ee:48:
f8:25:e3:22:49:7c:18:62:4c:b8:24:e0:87:e3:e7:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EC:D2:A8:EC:F8:16:00:1F:BD:D5:AE:17:61:B4:6B:39:0C:17:25
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:81:08:26:88:39:51:e7:83:24:55:aa:cc:6b:7e:d3:ad:af:
f0:53:ab:6d:7b:f6:8d:eb:da:9e:ab:4e:9b:d3:bb:be:dc:16:
53:57:b8:9a:ab:6a:20:1b:17:25:d3:77:c5:df:51:5d:7c:f3:
7a:97:c6:f0:bd:16:1c:f1:ce:29:9b:52:24:67:b0:e2:85:24:
91:82:c7:6a:93:c8:1d:39:82:6c:88:67:9d:87:75:0d:44:be:
01:6d:70:da:b3:90:43:c9:60:2d:94:18:6f:f2:91:e0:43:f1:
31:0e:69:70:00:ee:bf:fc:e3:da:e1:b9:d0:5e:ab:a1:8e:9a:
e7:84:0f:e4:61:c8:72:ec:74:11:71:60:74:bb:a7:cc:f4:d0:
e1:0a:32:f5:35:76:6b:95:9f:8b:d3:43:59:67:05:24:49:3f:
ce:12:b6:71:09:01:77:46:06:04:16:c8:87:3e:31:48:3f:07:
01:38:48:bd:4d:87:47:cf:78:dc:59:8d:5f:4c:80:d3:3f:f4:
63:38:0a:02:cf:9a:6a:5b:e1:6f:24:52:91:28:1d:cd:73:49:
b5:5f:b5:c6:fc:3c:bb:5c:56:6a:60:1e:52:e3:9a:8d:16:9f:
23:86:e1:2f:71:6a:54:a5:41:45:06:3c:e4:82:50:31:03:ab:
0c:80:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:33 2025 by rpki-client