Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: e9V6ppbapQ9lb4MV8/rIfxS+mTplOj4XjyCWEY7w9Fo=
Subject key identifier: 0C:19:B2:92:B4:C5:79:82:BD:53:98:F9:79:CF:81:45:9F:A5:F0:43
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 0197700775050EE984339170A05FE7D7E8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 122A
Signing time: Sat 14 Jun 2025 20:00:26 +0000
Manifest this update: Sat 14 Jun 2025 20:00:26 +0000
Manifest next update: Sun 15 Jun 2025 20:00:26 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: 1/hNLOJeQ992ozsmQlREEcP0EHVDM1L7Nw4SIacDqwM=)
2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:75:05:0e:e9:84:33:91:70:a0:5f:e7:d7:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Jun 14 20:00:26 2025 GMT
Not After : Jun 15 20:00:26 2025 GMT
Subject: CN=0c19b292b4c57982bd5398f979cf81459fa5f043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:c2:12:59:e8:d2:b3:45:a7:75:5d:52:42:
72:e9:dc:a4:5c:04:de:74:f5:b2:cc:f3:37:8c:b3:
d4:b6:4a:09:2c:74:d5:f3:2d:e7:16:63:3e:3b:4c:
39:86:80:31:85:9c:f9:6b:de:c1:25:92:c3:53:fb:
5e:a7:78:62:af:93:cf:01:ba:0c:1a:f5:0d:72:9c:
69:7a:66:04:b9:04:e7:e3:83:a3:6c:75:fa:18:ee:
6e:29:87:c5:d2:c4:fa:d5:4d:8c:26:ed:41:07:c8:
8b:ee:2e:2c:9b:96:d7:3d:69:bd:49:01:9f:37:32:
53:39:c3:76:43:c3:82:72:a1:54:64:a2:6f:ff:12:
cb:de:61:d5:ee:63:ff:52:04:8e:46:9f:0a:52:09:
0a:20:55:3b:60:2f:6f:d8:38:c3:c6:21:f0:a9:53:
7a:12:a8:ec:33:8d:00:d8:0c:ae:9d:d2:67:29:f0:
2f:9e:f2:bf:d3:2d:93:42:2d:8e:a5:d0:4a:2c:fe:
06:f5:c5:69:57:db:87:29:1d:63:17:6c:03:eb:e7:
6e:0e:3e:d4:b4:69:c3:20:35:c1:42:59:eb:ff:0b:
49:2c:93:7f:08:9f:34:95:8b:0f:0b:14:9d:3b:94:
bb:37:f7:e9:2a:46:aa:24:75:d7:96:dc:4d:3c:63:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:19:B2:92:B4:C5:79:82:BD:53:98:F9:79:CF:81:45:9F:A5:F0:43
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bd:45:de:5a:a5:48:81:28:34:22:79:4d:c7:63:0e:8e:03:
17:2e:5a:05:5d:81:1d:2b:e9:35:61:74:57:7e:8d:32:9d:df:
8b:6b:3a:5e:39:82:70:ef:92:85:c0:fb:f9:eb:df:9c:59:52:
03:95:b4:0d:d5:4f:ad:ae:89:a9:e5:37:64:44:43:22:52:bb:
4f:08:5a:0a:0b:71:94:13:d1:9f:18:17:73:03:84:41:ed:57:
8f:89:aa:46:8f:72:64:4f:c6:4d:76:35:16:d5:67:c0:10:48:
b7:79:45:b6:ca:f7:6d:aa:56:07:1e:4b:c5:c6:2d:ae:2f:ba:
03:49:bf:f8:bc:cd:e8:23:73:65:c8:a4:1f:a6:3c:4d:33:16:
9f:e5:23:5b:89:20:94:e8:fb:f5:ce:24:4b:0c:f9:59:0c:7d:
a3:60:67:97:52:47:26:9a:e5:e3:63:d0:44:34:7e:6e:44:a3:
fa:fb:3e:00:eb:cd:c7:28:e2:5c:43:6d:38:dd:58:b1:63:6e:
42:ce:80:2a:25:0c:0f:12:66:68:60:c4:11:1f:7b:20:ce:a4:
69:c0:b7:5d:4c:2b:95:b4:d0:af:50:1f:de:9e:d6:fd:14:52:
ce:77:ce:3f:ce:22:58:27:6b:72:b5:4e:50:37:9b:82:fe:0a:
c2:81:ce:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:06:06 2025 by rpki-client