Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: DmmJFDQjTVRKPZq1fcxBpvMHGcPozpNXAXLPdxKl0Rs=
Subject key identifier: CB:04:23:0B:24:4D:2E:40:FF:D6:87:12:C7:F2:59:FE:47:33:44:9F
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 01976F9A1C809238BE132140C755ECB32F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 18:01:00 +0000
Manifest this update: Sat 14 Jun 2025 18:01:00 +0000
Manifest next update: Sun 15 Jun 2025 18:01:00 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: 0h80oXjXiiZGkxTFfOdmOKpbVks0HM68BT4LrdIHKHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:1c:80:92:38:be:13:21:40:c7:55:ec:b3:2f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jun 14 18:01:00 2025 GMT
Not After : Jun 15 18:01:00 2025 GMT
Subject: CN=cb04230b244d2e40ffd68712c7f259fe4733449f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:e2:9e:3b:f1:de:4b:78:fc:aa:f5:4a:8e:
5d:c5:2e:2e:25:ac:8a:8f:d3:b4:92:7f:b3:5a:68:
fc:f6:23:40:7a:fc:9b:46:7f:9e:0f:a3:76:80:86:
5f:90:90:3c:80:0f:a5:cc:23:32:7b:f7:28:40:81:
c3:2e:c2:2f:da:2e:6d:a6:a6:c5:d5:b9:2b:48:3b:
0a:ed:d8:d9:80:2e:6e:b6:ae:e2:e6:af:9c:be:7f:
f7:62:07:ee:05:2c:63:b9:0d:48:63:ed:a1:8b:de:
97:34:d4:78:e8:a7:27:b6:2b:b1:24:5c:28:b4:d3:
84:d7:f4:b8:66:5b:49:47:f8:62:91:8d:c9:a7:71:
84:ec:5b:65:ae:86:14:8d:b4:ad:af:91:f0:6e:9e:
c4:0a:b7:3a:49:05:84:fd:2f:99:b9:57:08:01:aa:
1a:90:a2:49:1b:24:00:0b:58:fc:19:0a:22:55:71:
15:fe:69:c5:a5:45:7b:e3:20:1c:66:d1:1f:43:62:
1b:40:3c:df:04:45:bf:1f:8f:06:b2:ab:b6:37:7a:
35:b7:4a:a6:50:98:19:50:53:d8:45:12:f1:63:1c:
34:94:cf:c4:60:54:aa:00:4b:32:84:ed:eb:03:51:
94:7e:36:e4:fc:01:a7:4b:6d:64:91:65:a0:f3:7e:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:23:0B:24:4D:2E:40:FF:D6:87:12:C7:F2:59:FE:47:33:44:9F
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f9:6e:72:c7:af:c2:49:6a:82:a6:5f:a5:a7:36:47:c7:39:
3d:74:33:4a:2e:8c:38:83:9a:87:78:8a:9b:17:97:27:4c:05:
d7:7f:d0:24:3d:e8:43:f7:95:71:dc:56:e8:64:a3:fc:a5:37:
87:a5:ac:b5:88:50:50:82:68:6a:8d:b8:67:81:e3:b4:52:60:
e3:fc:5f:bf:78:b7:13:9c:e5:d9:31:fe:fa:ba:d8:91:da:dd:
74:29:63:1f:9f:84:e8:4b:98:64:a0:73:f6:44:60:16:ad:60:
4c:8f:0c:76:6f:76:d6:89:ab:69:f9:5b:70:77:68:af:0a:68:
6e:ae:46:14:8b:c8:c6:34:9c:85:a1:38:85:e0:94:a6:be:79:
cc:40:68:ad:ad:55:86:ed:bf:6f:5c:64:03:a3:66:fa:75:ee:
0a:1b:27:36:cb:4d:d0:21:20:d8:6a:c4:e6:8d:90:ba:4c:fe:
ac:29:0d:7a:90:a1:73:f1:3c:04:a9:d8:ad:60:70:42:ca:50:
c0:b3:2d:a8:ed:3c:a5:cb:ba:5d:30:14:7d:94:1d:3e:5a:da:
d2:c6:40:bf:6b:5a:16:f7:0b:f7:5e:4b:5c:3f:32:f6:89:70:
30:3f:ad:bb:7a:73:e8:f2:20:9c:c7:8a:97:ab:fc:44:f1:fb:
b6:ab:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:06:16 2025 by rpki-client