Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: VCftDKadF7DK9JwjvNb2MTwth3PCPmYwl7rbBcYYa6w=
Subject key identifier: D9:11:46:90:59:68:D8:9A:D0:EA:33:58:C0:2F:7A:45:51:EE:E4:64
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 01976F2CC30A078787CFAB9F3DADAEE0AC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 1197
Signing time: Sat 14 Jun 2025 16:01:33 +0000
Manifest this update: Sat 14 Jun 2025 16:01:33 +0000
Manifest next update: Sun 15 Jun 2025 16:01:33 +0000
Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=)
2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: 84MVW3xZGh4kfsfHhmDb4qiXrY4ZN4AWInq8qLFiEYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:c3:0a:07:87:87:cf:ab:9f:3d:ad:ae:e0:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Jun 14 16:01:33 2025 GMT
Not After : Jun 15 16:01:33 2025 GMT
Subject: CN=d91146905968d89ad0ea3358c02f7a4551eee464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:29:4e:3e:fc:49:3c:e0:be:70:4f:92:11:
f7:cb:f8:51:fc:7f:55:c2:02:10:99:a2:6a:d1:1f:
e1:bf:f6:68:84:c4:88:0f:19:ac:7b:3a:95:18:05:
33:ba:b0:43:63:4c:89:f1:8e:c6:0e:fb:b7:6a:8b:
87:50:e1:6c:5c:3c:cc:0c:34:bc:90:2b:ab:90:fa:
ad:c1:c8:13:25:65:47:cf:69:56:91:93:3c:bf:f4:
51:85:9c:60:c7:e7:95:4b:dc:c0:ee:a4:b9:5f:a4:
f3:47:5e:29:bb:c4:a7:e3:56:32:64:00:73:f2:7a:
2e:fd:b7:27:bd:98:54:65:cf:82:d4:64:1f:47:c8:
66:46:fe:59:cb:9f:63:9b:ed:c1:75:6a:5e:2f:05:
29:de:c7:cc:6f:63:c6:8b:51:2a:d3:d7:07:45:1b:
7b:8f:15:a1:02:79:f2:cc:95:6d:5b:6a:17:fd:ab:
f0:b4:c5:b3:1a:38:51:a5:48:3e:9e:e9:c4:a5:eb:
b4:2d:b3:78:bb:73:4d:10:dc:2b:c6:c6:db:83:8d:
5b:f9:75:2b:13:a6:3b:34:22:b0:43:e4:70:78:da:
83:1e:0a:88:19:29:9b:44:9d:8a:e7:f3:1a:58:6b:
fa:17:47:1c:f4:02:fc:f8:d3:93:12:04:37:ba:f5:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:11:46:90:59:68:D8:9A:D0:EA:33:58:C0:2F:7A:45:51:EE:E4:64
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b7:a6:f8:21:76:9d:fc:df:07:4b:18:d1:10:01:ff:9c:9b:
89:41:80:57:57:d1:42:d3:f8:d0:c0:42:8d:95:ac:35:d9:8a:
25:1d:37:a2:81:f2:9e:81:21:91:0f:86:08:41:02:e9:71:07:
7b:aa:97:49:78:99:80:61:63:a4:be:dd:72:c6:46:ea:59:bb:
22:cc:8f:37:20:0d:ec:ab:3a:9b:33:f5:65:99:41:3d:6f:73:
c2:9c:ef:e1:70:cf:0a:7a:8c:1d:9a:8c:71:d2:9c:64:59:cb:
14:6d:cd:4b:e2:11:b4:69:f5:6b:b7:59:fb:c9:1c:c8:34:0d:
54:7a:94:92:21:6e:4a:9e:ea:ce:30:d5:e5:e4:76:22:3f:fb:
0c:01:71:67:a5:b8:81:a2:39:54:51:57:42:a8:90:c1:98:c9:
55:8a:cf:42:91:0c:8f:f5:1b:f2:1a:40:88:c4:e2:ba:b6:8a:
98:44:6e:2f:a0:7e:0f:69:88:da:c1:43:8d:92:e1:0f:03:69:
76:bc:90:e0:ba:4c:d1:00:ba:8a:8b:df:61:ca:ca:e7:cf:f4:
81:61:29:48:9d:ef:13:f7:46:3a:2a:bb:5c:17:59:8f:5b:7d:
e3:49:01:fc:25:ce:87:14:df:a7:f8:0f:11:9b:35:34:b2:fb:
e1:96:a4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:56:40 2025 by rpki-client