Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier: mcxKyLiCRy7Wywo5YnUmVA+fsBAErROYQ9MNy3n3uqQ=
Subject key identifier: 29:C8:31:C5:32:42:DD:8D:27:F4:7F:D5:B6:0F:91:CE:9F:74:83:45
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 01976EF54761D62B135509597068F051062F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 15:00:57 +0000
Manifest this update: Sat 14 Jun 2025 15:00:57 +0000
Manifest next update: Sun 15 Jun 2025 15:00:57 +0000
Files and hashes: 1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: AH5w8wgXV59IQW1spRahBBctbeM7dBYoh7GKvBNuJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:47:61:d6:2b:13:55:09:59:70:68:f0:51:06:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: Jun 14 15:00:57 2025 GMT
Not After : Jun 15 15:00:57 2025 GMT
Subject: CN=29c831c53242dd8d27f47fd5b60f91ce9f748345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:91:59:6a:3c:f0:d3:ac:41:96:f1:ca:c5:
4d:95:b2:18:fb:13:31:a1:0c:ea:94:03:ef:73:2e:
53:ae:58:7b:9f:5b:67:ab:ec:34:42:86:59:1d:ee:
39:b5:83:50:0c:6d:ef:a9:c7:72:61:86:89:cb:16:
01:56:7f:0f:12:0a:da:ce:45:25:ee:0d:e6:d9:8a:
c8:f7:a2:41:60:3e:28:b4:7e:ec:7c:ab:be:6e:e6:
2d:37:e3:49:91:98:2b:e6:16:2a:fd:e3:61:e0:fc:
6a:d0:32:2d:4b:71:03:bb:90:30:58:9a:3c:9a:bd:
d8:37:77:47:c3:62:0c:1c:a4:a6:74:06:a1:0b:2a:
e6:7e:14:49:16:27:64:a2:ee:a4:4b:c3:60:3b:de:
10:bd:fe:3f:6d:48:dd:72:e1:d2:57:cd:84:1f:7f:
13:e3:b0:2f:19:f3:5c:30:d3:86:67:ef:a7:4d:ae:
37:ef:f4:a9:f4:7e:d5:eb:7f:c1:a2:3a:16:9d:30:
24:21:6e:95:88:37:90:45:74:24:a2:86:14:ea:e8:
40:3b:48:09:50:02:71:63:de:ff:4b:e9:7c:a5:29:
1b:61:89:37:b3:1f:99:6a:9b:09:8c:07:ed:4c:55:
1b:55:b7:b6:90:df:2c:60:84:96:a2:52:e1:d2:21:
57:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C8:31:C5:32:42:DD:8D:27:F4:7F:D5:B6:0F:91:CE:9F:74:83:45
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7d:10:0c:b6:2b:6d:3b:59:85:03:92:8e:c5:5a:c0:56:72:
b1:4f:59:8e:df:ed:7c:e2:90:0b:33:b0:77:fb:7d:02:4e:8d:
b3:ae:b5:52:78:c5:d9:de:98:9c:6c:cf:d2:1d:8c:dd:6f:fe:
7b:2f:c5:2d:10:aa:13:d2:fa:a1:10:e9:b7:ec:20:6a:db:28:
82:f9:85:78:35:ed:87:1b:06:1e:c6:25:a5:9b:48:fd:9d:e4:
4d:f8:88:9b:9e:54:ad:67:5f:ec:4a:36:ca:8b:34:80:b5:8c:
33:a8:cf:5d:68:26:24:ae:e5:78:ae:ae:b3:98:19:20:37:74:
54:b8:65:c2:ec:be:00:75:a9:2c:ad:dd:65:95:bc:48:68:52:
2a:de:16:e6:81:8e:e4:d6:41:d6:53:51:5d:f7:c5:8f:b4:ec:
fc:7a:6c:42:06:da:db:29:31:de:27:2d:92:2d:f0:e1:58:31:
8d:2a:8d:3d:2d:59:19:75:2a:2b:1d:d2:fa:67:d3:d9:db:c9:
eb:2c:a0:a5:08:08:f9:81:f6:ba:f5:ba:ef:b3:86:99:79:36:
e6:c5:72:41:76:72:46:7c:d5:84:ae:10:b5:7c:c6:02:c3:b2:
7e:3c:f3:e6:8b:9a:cf:3f:dc:14:ff:9c:41:43:07:84:cf:f6:
08:bb:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:11:52 2025 by rpki-client