Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: pn9SZ+HBb1rsok6g4MGWpsJEvoKxIT3gD3ttiqJdh0U=
Subject key identifier: 9F:A9:2D:79:87:84:87:09:C9:EB:A7:02:08:7A:CB:ED:77:26:D3:65
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 01977075A6E74F1A8AAF7BCE24C0E9DDE385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 22:00:47 +0000
Manifest this update: Sat 14 Jun 2025 22:00:47 +0000
Manifest next update: Sun 15 Jun 2025 22:00:47 +0000
Files and hashes: 1: ClJ5D2eNfayYbTx8ggCm0hRsP7c.roa (hash: 5Qda0Yje+FvIpLy35sRo5xthR6h+ClhT/rTRzyBmQIo=)
2: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: AD8bTmruKZ9YNoUEYW51/o4GUB75H+ZsrK1Vzdpitck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:a6:e7:4f:1a:8a:af:7b:ce:24:c0:e9:dd:e3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Jun 14 22:00:47 2025 GMT
Not After : Jun 15 22:00:47 2025 GMT
Subject: CN=9fa92d7987848709c9eba702087acbed7726d365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:b2:66:23:29:7d:8f:e9:eb:f4:75:93:a2:
da:1b:fb:26:62:42:29:35:b4:bb:08:d5:c2:ec:cc:
55:12:42:fd:99:77:97:b8:63:7f:db:02:42:00:e0:
40:ea:c4:ac:4d:33:6d:4b:37:8c:63:b3:fd:4c:c3:
cf:ce:70:d5:a5:03:29:b3:8f:7d:d5:55:15:67:89:
8d:9a:d8:5f:31:6a:8c:7e:37:1a:b8:2f:70:9f:ca:
34:b4:3c:79:7b:7e:2f:74:64:52:98:58:e3:ba:2a:
f1:82:d0:01:91:e1:7c:c9:0d:51:88:65:9b:52:ef:
86:34:36:1b:4d:85:d8:ca:49:4c:d8:cb:05:1d:80:
2a:68:dd:d0:ea:cd:46:bb:e6:30:b1:37:59:05:36:
03:0f:6b:2f:92:c1:90:8d:8d:06:65:cb:80:21:3f:
01:b0:0f:e2:50:76:7c:d5:03:63:d9:df:b8:a6:8a:
fe:ea:52:8b:4e:e5:43:cb:d8:23:d2:15:70:d2:52:
05:1d:4c:9b:11:a0:11:9f:67:8c:42:d0:ce:a9:93:
33:af:a8:10:73:58:98:fd:76:39:1a:fa:60:e5:f7:
8e:d1:71:8b:18:5a:7e:55:47:2b:10:c8:95:35:ce:
6e:a9:12:31:23:0a:e8:65:ce:82:99:ee:0a:53:4d:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A9:2D:79:87:84:87:09:C9:EB:A7:02:08:7A:CB:ED:77:26:D3:65
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:05:d1:71:0a:df:f7:4a:ae:7d:c7:57:fa:aa:b2:a6:a1:ff:
6f:85:1d:f2:e6:f6:64:87:9a:e3:31:b4:1e:e5:c8:52:d5:ac:
43:b4:89:36:78:5d:4a:75:21:c5:1d:f8:46:52:52:3e:b3:72:
b6:e8:32:8f:a9:1d:9a:b4:43:a2:1c:27:59:22:af:66:41:0e:
e9:b2:3b:8a:d9:55:12:9a:08:3e:ed:b8:1b:6d:6f:f7:a3:54:
3e:d7:b8:8f:d8:65:b7:a8:b2:c4:57:d1:14:2f:f1:62:7b:bc:
a0:3e:de:cf:0a:b4:8c:10:b5:57:bd:51:09:25:8e:2c:5d:23:
db:21:1c:61:17:55:31:41:75:da:01:6d:0e:66:05:c5:28:9d:
8c:e2:63:f9:fc:3a:06:2d:eb:10:49:31:b4:36:7c:fa:00:81:
06:3a:2a:8c:0a:e0:64:7e:55:2d:a7:21:d7:6a:0a:10:f5:fc:
af:04:68:34:b0:b0:50:76:bc:24:1a:8e:b5:6a:3a:0a:7b:17:
6e:ee:22:58:e4:1a:d8:fa:71:9c:6c:79:01:fc:07:2e:ee:8b:
70:dd:7d:b7:6a:bd:f4:94:f1:63:e4:50:d0:cb:97:47:81:01:
b3:fb:5f:94:d4:b6:7c:9c:e7:c7:2e:ba:51:c9:eb:f0:4f:1c:
c0:b9:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:24 2025 by rpki-client