Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: kS8BPvG6XuKXtFBQ45cp1aS3nahLeA2Hr0hmtKXGBYw=
Subject key identifier: 14:1C:0C:B3:B2:50:B4:96:DA:D5:DF:C1:03:A6:99:17:CA:F0:E3:AE
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01978B7EE2AB65E81C4C5BED5F9C87D48866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0CE5
Signing time: Fri 20 Jun 2025 04:00:37 +0000
Manifest this update: Fri 20 Jun 2025 04:00:37 +0000
Manifest next update: Sat 21 Jun 2025 04:00:37 +0000
Files and hashes: 1: ZViEJUena9no3k6Ae1_F2TCUJ1s.roa (hash: 9w7jEI95jS2WRSJaPLFBNXTWhCP7KfI5YnDHB0UiSYE=)
2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: 0af1fOFJdeenQpXh/KZpS/Vcz1kTvTZBsrscdiZJQpk=)
3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:7e:e2:ab:65:e8:1c:4c:5b:ed:5f:9c:87:d4:88:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jun 20 04:00:37 2025 GMT
Not After : Jun 21 04:00:37 2025 GMT
Subject: CN=141c0cb3b250b496dad5dfc103a69917caf0e3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:19:c4:a8:be:0c:2e:3b:83:b2:2d:ee:db:
7b:44:81:8b:5f:9c:60:e9:e9:c1:c0:e1:df:f3:26:
c3:bb:2f:15:f8:12:ba:e5:67:a0:78:cd:b8:1c:aa:
4e:8c:d7:b2:2f:e0:f7:fe:08:24:80:a9:49:b3:e0:
22:bf:99:2b:6f:0a:99:07:e0:27:e2:0e:49:ef:7a:
70:6b:8e:8d:f2:c0:6d:da:cf:37:5c:9f:4b:d5:e6:
ef:ff:2c:56:af:9f:08:97:9f:a7:e2:20:00:f9:22:
1f:17:27:ec:fb:45:92:b2:cc:7d:7b:9a:8f:5b:26:
5b:87:51:4c:d3:ac:74:fb:7e:d8:be:de:22:9b:81:
5b:46:b7:14:92:d7:e4:e8:da:c9:7f:97:c5:70:40:
04:5c:3e:4d:fa:9f:c9:9c:62:90:89:a6:7f:07:16:
01:ce:af:12:96:f4:b9:f9:5f:fc:8a:e4:e3:99:b1:
09:ef:e0:e6:3e:ce:d9:4e:af:34:68:f7:8f:c2:94:
bf:6f:07:ac:ef:9c:cd:b7:91:d7:9a:a5:da:a6:98:
1b:eb:9f:66:6e:f6:97:53:f7:bf:05:16:ee:fa:e0:
72:d8:7d:03:d1:96:bc:92:86:14:01:24:6b:51:fa:
68:cb:e7:cd:2c:bc:75:de:0f:dc:1d:9a:63:9d:ac:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:0C:B3:B2:50:B4:96:DA:D5:DF:C1:03:A6:99:17:CA:F0:E3:AE
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:70:21:77:7d:19:63:3c:39:d4:6d:fb:cc:70:92:88:3f:10:
71:49:be:71:11:2f:19:ca:5e:b3:1c:0d:c9:a2:3d:56:90:ed:
15:bc:03:c5:a7:80:9d:c2:6a:ad:36:bb:08:f6:5e:98:9f:01:
97:3d:28:86:9b:bd:92:fe:9b:b2:5a:b5:58:94:4d:3f:1b:fe:
4a:d0:60:cd:87:f7:af:1b:12:02:42:f8:28:1e:c0:39:13:26:
0a:6d:05:c6:dc:d7:52:e9:40:d6:fb:27:20:98:32:0b:69:94:
36:67:4e:59:35:43:6f:61:19:6c:05:df:84:90:1e:45:55:0b:
bc:5e:56:95:7a:05:7a:f8:9e:d5:5d:59:9e:46:f8:4d:a3:14:
9c:12:d0:4d:bf:cb:1b:41:52:4b:fb:f1:88:3e:70:5f:91:29:
94:8c:3e:9e:66:17:3f:33:09:83:24:8c:b4:67:99:46:9c:3a:
17:96:d2:b9:77:11:ed:36:9a:38:83:3d:ab:32:1d:e6:42:97:
1a:72:62:35:54:38:78:cc:95:d7:65:cc:11:13:0d:09:bb:2c:
1c:28:5b:50:2c:88:20:9c:ec:1e:da:af:09:1a:56:ff:83:5c:
98:6f:47:bd:df:2b:1d:7d:c6:04:70:49:28:a1:d6:ce:c7:46:
a5:de:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:18:08 2025 by rpki-client