Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: u0af3QeDqekXmwLhHwrkzaZzDEt4U/IlhNGCoUO5bqM=
Subject key identifier: 43:4D:F1:7C:44:B6:D8:24:40:DC:76:20:AE:F5:00:5E:06:AD:75:58
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 0197707600956DDF47E147C6E66B4829AD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 15A8
Signing time: Sat 14 Jun 2025 22:01:10 +0000
Manifest this update: Sat 14 Jun 2025 22:01:10 +0000
Manifest next update: Sun 15 Jun 2025 22:01:10 +0000
Files and hashes: 1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: nNaggR6h75GvtFsKBqQM9ZjoHWSgvtjh8ehPDFSdVTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:76:00:95:6d:df:47:e1:47:c6:e6:6b:48:29:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jun 14 22:01:10 2025 GMT
Not After : Jun 15 22:01:10 2025 GMT
Subject: CN=434df17c44b6d82440dc7620aef5005e06ad7558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:21:ae:d9:8d:af:03:0d:bb:39:72:0b:3b:60:
b6:55:f7:08:e2:db:f4:61:d8:3a:5e:de:d3:3d:ad:
9d:e1:61:eb:36:87:c6:8b:70:f0:03:5a:dd:b2:77:
b5:e6:14:ce:9f:10:32:97:2d:1c:f4:11:1e:66:e5:
2f:98:f8:c5:95:a8:5f:42:d1:97:1e:fa:b9:68:0d:
f1:1c:2f:8c:bb:6a:a5:f0:10:57:ab:ca:4c:6b:01:
ef:bb:76:11:d9:31:c3:34:5f:d8:f9:ae:d4:0f:29:
b9:75:94:c1:1f:e5:90:dc:fa:03:6a:dd:f3:75:b3:
17:6b:a9:3a:00:8e:cd:23:1d:62:80:4c:7e:41:15:
78:ac:64:c5:21:99:a6:71:96:4f:62:ab:02:62:9a:
f6:7b:c2:bd:37:7f:d5:81:fc:cd:06:40:42:1f:b9:
a5:57:19:9c:1b:ee:03:53:f3:92:48:dc:59:fa:95:
88:ac:f3:7a:b6:6d:3c:4b:d2:eb:9f:b2:14:59:53:
d0:37:70:e6:4b:28:1c:b4:3f:c0:de:1c:bd:f4:52:
3d:7c:4b:9b:22:37:83:cc:0f:0c:57:a3:4a:5c:42:
d2:bf:33:78:59:84:bc:95:5b:1a:63:0e:bf:16:a1:
4f:c0:ab:e9:a9:ae:fd:eb:4d:2f:08:dc:2b:b9:55:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:F1:7C:44:B6:D8:24:40:DC:76:20:AE:F5:00:5E:06:AD:75:58
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:48:b7:ae:30:48:bf:ae:88:da:44:b6:1a:96:ad:7f:46:38:
db:d1:1a:2d:42:d4:73:00:39:ec:db:2a:e4:70:31:d1:0f:dd:
1a:32:1d:d6:3e:87:f5:21:a1:db:a7:46:5c:98:1c:bd:53:56:
7f:25:3c:24:5a:37:e4:4a:23:19:58:53:11:b9:7f:e2:5d:1c:
ee:93:93:e1:49:57:e5:ee:94:6e:85:ef:39:b0:4c:30:c1:ca:
c4:d3:8f:d7:c0:5b:36:61:87:51:e8:9e:77:61:f5:a5:28:d1:
d4:35:26:e9:c1:df:f8:4b:40:c3:50:50:fa:17:65:44:ec:10:
dc:c0:ba:71:b5:2c:ae:58:81:99:32:cf:94:20:f9:1b:d6:e6:
a3:49:b1:b1:01:ea:39:5c:00:17:f7:97:c1:5a:53:c0:ee:fb:
c3:ca:80:f2:1b:e6:8a:31:70:be:81:0e:57:83:71:75:53:3d:
d8:34:2b:2c:43:c8:a7:d9:f6:c0:ac:33:20:e1:66:09:12:9a:
6c:77:9f:c4:92:8a:2b:f1:8d:50:06:3e:d0:6d:45:67:f6:67:
21:51:53:52:3f:79:72:6d:45:22:29:ea:19:3e:52:10:92:1c:
42:4e:b7:72:a9:3a:d8:9a:fe:c6:c5:2a:eb:4c:b0:c9:f4:eb:
6f:a5:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:58 2025 by rpki-client