Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: Lam1gXvzcMD7elzoQJw3GqwZqQK5KqbvzwExFe3mU1A=
Subject key identifier: 0B:A4:B6:03:94:AE:A6:8F:9A:51:00:C1:E2:65:8C:A5:9A:CC:C5:36
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 019770E32F9DD018111E1899689B185B9209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 04BB
Signing time: Sun 15 Jun 2025 00:00:26 +0000
Manifest this update: Sun 15 Jun 2025 00:00:26 +0000
Manifest next update: Mon 16 Jun 2025 00:00:26 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: ZNcmuK5ZWQj3H/Q37uGJm2zeeuIa0EtqC/pEngbwvcQ=)
2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:2f:9d:d0:18:11:1e:18:99:68:9b:18:5b:92:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Jun 15 00:00:26 2025 GMT
Not After : Jun 16 00:00:26 2025 GMT
Subject: CN=0ba4b60394aea68f9a5100c1e2658ca59accc536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:19:09:fc:81:a6:4a:0a:66:df:a4:92:32:
19:a2:0b:6a:a6:ea:c3:da:4e:1d:d7:9e:49:59:a1:
a0:2c:96:c8:3f:58:cc:9f:f1:6b:d4:a9:c4:0d:a9:
00:e6:29:2e:45:71:0a:59:e5:88:09:02:74:de:aa:
e2:17:f8:72:8a:cc:1b:c8:ca:a3:3e:16:f2:1b:0d:
29:ba:aa:38:29:59:12:27:b2:1a:0c:74:53:1d:09:
2b:d9:7d:ca:ed:94:cc:15:86:f6:36:54:52:9e:d5:
d7:d9:16:20:8e:a4:26:02:97:7c:9e:b6:c8:dc:c3:
b5:a4:d8:08:b9:bb:f6:ba:50:92:b7:5c:08:62:b3:
65:4e:44:0b:b8:07:7b:8e:68:f6:cc:23:f8:5e:bf:
7b:fd:7c:bd:57:72:59:fa:96:ba:63:e6:61:23:91:
2b:06:52:14:7c:76:38:9d:80:da:82:d5:f4:3d:22:
0b:c3:5d:cf:98:77:e2:08:3c:2c:ff:2d:fa:b3:51:
52:b6:28:bd:dc:e2:9d:d5:46:4b:6f:96:06:e8:4b:
2d:d3:74:2c:26:08:63:ce:4f:5a:9e:ed:28:4e:58:
ec:c1:c0:d5:92:8c:6c:47:51:99:41:5b:e9:01:ea:
06:f6:e8:4d:04:fb:c9:50:a3:e3:3b:a5:d0:08:5e:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:B6:03:94:AE:A6:8F:9A:51:00:C1:E2:65:8C:A5:9A:CC:C5:36
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0f:31:72:dd:3c:42:fd:1f:99:67:e4:0b:ea:50:f8:87:07:
23:c0:c2:5e:09:54:98:cc:58:ea:5f:4b:26:47:7e:c3:8b:06:
fe:5d:0b:83:27:20:56:f2:7e:b8:22:41:c7:76:23:49:a6:52:
d4:08:f4:b8:d3:eb:26:8e:e4:28:2b:8b:fc:85:95:69:af:63:
2f:16:fb:57:49:2f:0d:06:83:97:82:ed:14:0f:31:0e:1d:cb:
6a:91:9b:4f:e6:81:cd:02:89:16:ab:37:1b:27:2c:db:d7:30:
f9:3e:f3:ae:b7:96:4a:57:e2:60:c3:12:22:0e:bf:24:9b:c4:
66:84:dc:fa:06:b1:13:81:f1:04:24:d3:96:cd:a6:da:bd:5b:
51:9f:67:68:41:b0:74:16:1e:ca:02:a2:05:32:41:ea:e2:34:
1b:15:28:b2:84:e9:df:73:8c:8d:b0:c2:c1:da:93:4f:cf:a5:
4c:cc:08:1d:70:13:0a:52:b1:56:ca:6d:de:a1:04:52:6c:c7:
9a:5f:b8:f7:53:a4:f3:f3:c6:f9:68:1b:58:8c:72:57:2a:db:
9a:26:8c:96:a1:f1:1b:bb:93:da:f2:27:0b:e3:26:5d:1b:a1:
8a:9d:6a:47:32:cf:25:8e:9c:be:d6:a9:ec:ee:e7:b4:a8:f6:
cf:b8:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:12 2025 by rpki-client