Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: VNNSkOg4R0Gq+4yto4Gj4t2SdoR/Pib45YIkbtLnqdM=
Subject key identifier: 72:80:32:E8:92:05:44:7F:19:A4:0C:F4:F4:CE:8B:EC:48:78:C4:11
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 01977188C39DE651923A3A783C1B54EAA6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 088A
Signing time: Sun 15 Jun 2025 03:01:17 +0000
Manifest this update: Sun 15 Jun 2025 03:01:17 +0000
Manifest next update: Mon 16 Jun 2025 03:01:17 +0000
Files and hashes: 1: CgBNGq2vvpW1xEBq_J8TTjYOWu0.roa (hash: CfZUCA05oFbMMXS/ui8XIHr2JUyCob7FGarrcgeEvE0=)
2: _DE8jBpnVZ36FaQjKKqWbHiWbvo.roa (hash: nj3mkL3pbPWWGWLOVhi9o9i9dXTzVhaJgzjUgFTiKuo=)
3: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: Y8n+M7EoipZwsAmhR4Ke3To2ppywL05a/MLu+SHheIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:c3:9d:e6:51:92:3a:3a:78:3c:1b:54:ea:a6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Jun 15 03:01:17 2025 GMT
Not After : Jun 16 03:01:17 2025 GMT
Subject: CN=728032e89205447f19a40cf4f4ce8bec4878c411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:11:ad:b1:11:68:a4:59:72:03:c5:4f:dd:
b0:32:cd:e6:b6:2a:11:97:57:61:01:57:5e:ef:41:
e8:e0:a3:19:82:8e:0a:34:6f:37:76:ec:bf:d9:b5:
d5:77:2e:51:20:75:b2:4b:5c:3d:9a:ed:ae:da:44:
89:38:48:e4:6e:e6:c1:af:f8:02:73:47:c7:28:ca:
65:8e:ba:80:bd:7b:0e:fd:fe:1f:40:04:f6:08:f1:
4b:76:c5:0f:11:2b:45:e4:9e:db:a7:ca:ec:9e:62:
6c:79:a6:00:2d:d4:2e:54:83:e0:f9:67:b2:d7:e1:
42:86:a3:3e:a5:2e:a3:09:4c:6b:13:81:ff:6b:d5:
9b:52:e6:d4:41:8d:f3:54:0b:aa:54:e9:4e:ca:6d:
e2:de:60:c4:81:af:3d:c9:2f:0b:ce:b0:4f:a2:74:
e6:89:56:33:4f:ed:9a:2c:33:95:bc:2b:c8:e6:4c:
75:86:1b:78:08:1e:df:c5:96:08:4f:e3:6a:6d:d3:
45:a9:09:19:29:6f:af:dd:6f:03:2d:09:1d:d3:ec:
d2:93:f5:1d:78:dc:b8:42:ed:6b:7c:97:21:db:da:
a2:59:2e:30:39:02:31:dc:65:e4:e5:55:67:63:01:
5f:9c:52:c8:f5:ca:9d:ca:05:a8:c2:17:75:b2:ab:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:80:32:E8:92:05:44:7F:19:A4:0C:F4:F4:CE:8B:EC:48:78:C4:11
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:72:5d:8b:cc:1d:8e:07:73:a6:cc:b0:cb:5b:20:bc:e4:88:
3a:81:2a:05:68:60:f2:56:48:f4:4b:d5:70:ba:7a:02:0a:61:
a5:e9:e9:c4:03:f8:80:b2:eb:29:5e:2c:d1:2f:f1:74:43:91:
f3:f3:0c:21:90:82:82:05:4c:6b:18:a7:a2:37:f7:89:e3:60:
b8:6f:49:6c:75:f8:29:3b:4f:e3:ab:1c:33:6e:50:99:a6:b7:
5a:0b:32:d5:8b:c8:05:06:99:9a:72:b5:51:16:de:eb:c3:a3:
b0:c4:1f:43:e1:cf:17:d8:c8:a0:f3:0a:51:f6:25:fe:25:65:
c4:bd:49:91:29:e1:ec:0d:72:4c:46:51:c2:64:f3:34:21:14:
9d:2e:d8:7a:61:d6:64:6f:33:92:f1:35:c8:83:d6:2d:d7:74:
92:d0:f7:32:09:55:3d:29:7d:61:c4:0f:ec:8e:c4:0d:1c:78:
64:e9:7d:0b:e6:5c:55:5a:9f:75:e0:e9:57:36:ac:a0:7c:20:
1e:11:e1:f7:65:dd:d0:1d:88:84:5e:52:d6:7f:4d:c6:f7:78:
a7:00:0d:79:0e:c1:ba:05:64:da:c9:d6:ae:44:f4:23:70:31:
b8:af:55:a5:26:d2:47:a8:42:e0:47:d7:56:46:4b:6e:df:38:
68:c8:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:56:11 2025 by rpki-client