Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: Qb7oBGuEwuLPD18U+lCNRuVCgpx4X21JGE2GGKfiz2Q=
Subject key identifier: 01:F0:02:33:4F:8E:64:F6:F2:3C:0A:DD:1F:74:4A:C0:00:2E:D6:42
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 019770AC93F395A867CE7C22BE591CD4CE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 08C9
Signing time: Sat 14 Jun 2025 23:00:47 +0000
Manifest this update: Sat 14 Jun 2025 23:00:47 +0000
Manifest next update: Sun 15 Jun 2025 23:00:47 +0000
Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=)
2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: rqu0H9ez1iOQvAqbNHNnFczh0lCPuXuaPI/hkoF+LUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:93:f3:95:a8:67:ce:7c:22:be:59:1c:d4:ce:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Jun 14 23:00:47 2025 GMT
Not After : Jun 15 23:00:47 2025 GMT
Subject: CN=01f002334f8e64f6f23c0add1f744ac0002ed642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:81:5b:3e:a9:08:02:56:f5:83:5c:f1:43:
73:9e:2d:d0:eb:7f:a0:16:c1:f6:a6:c5:c0:02:92:
13:78:d7:f3:b5:3d:4d:00:25:82:a9:ef:58:e1:76:
c2:e3:34:c7:60:62:f8:f0:fb:ae:c4:d3:2b:97:0f:
e5:90:31:66:43:e2:50:db:51:29:6c:b5:9b:89:1c:
cc:7b:06:da:45:fa:0f:26:0f:81:55:44:99:38:b0:
a7:fe:ad:25:91:90:52:b3:68:06:4a:18:d4:9a:d1:
d5:73:86:3f:39:8f:03:ac:f0:49:50:d3:63:7d:9a:
5b:50:bc:e6:17:d5:60:bf:16:ab:38:31:2c:e8:06:
d1:3f:2a:34:22:e6:79:8f:20:24:d4:85:d1:29:3d:
d8:cc:c8:30:0f:9e:8d:c0:0e:96:f7:e0:c2:47:4f:
f3:15:3f:92:d2:01:0a:e3:08:44:6a:6d:31:60:b8:
73:2f:2b:ef:04:15:1e:ee:1b:6c:13:6c:e7:99:96:
2d:05:74:a3:d3:63:37:c3:81:ed:fc:36:83:19:db:
20:f3:d1:4d:33:9d:04:8d:44:82:83:3a:b7:79:6f:
21:f8:5b:5b:cc:f3:82:fb:73:15:46:e7:e2:48:fb:
38:56:17:1a:c8:2e:57:ec:9f:94:24:cc:84:d8:67:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F0:02:33:4F:8E:64:F6:F2:3C:0A:DD:1F:74:4A:C0:00:2E:D6:42
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:bc:c1:9a:2d:ae:e3:29:de:e6:d2:0c:8a:eb:a6:7e:94:73:
93:fd:11:e9:d5:49:5b:10:18:68:d3:6d:c1:3e:30:52:5c:52:
a9:5c:87:08:85:58:05:07:25:80:d4:c3:27:0e:14:97:76:f9:
46:25:82:ca:3f:97:7e:b9:13:c5:3e:33:75:a1:ab:b2:42:d6:
54:43:af:93:03:6f:ca:db:dc:4f:e9:32:00:01:d1:01:cd:60:
c7:b9:6a:90:c5:a8:0f:55:cd:3d:f2:89:03:e6:fb:0b:e7:be:
ae:aa:2a:ed:e6:8f:9e:b0:79:4e:a3:59:72:1b:e6:64:e4:d9:
3e:d0:5c:4f:22:51:d1:ef:1e:cd:c2:91:a6:6b:93:2e:29:27:
c3:df:7a:80:19:5b:ee:ce:a8:9d:63:bb:09:fa:0b:ee:93:30:
16:6a:96:67:d2:6e:42:bd:69:10:8c:1c:13:98:af:36:eb:49:
84:89:86:ca:50:55:db:c1:1c:eb:1c:00:e5:fe:33:bc:b1:90:
8a:29:71:e8:03:66:e9:48:ef:4d:d8:63:ce:39:c8:16:c1:5d:
0d:59:e9:2c:f3:57:ac:15:e1:95:55:ee:02:a9:3c:15:0a:47:
20:6a:6e:79:a8:81:31:c8:e1:5f:89:06:df:11:3f:af:fc:79:
9f:c3:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:17 2025 by rpki-client