Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier: il0Xyj3NMojI1r+0HTRLCZtWCQI87tu+Y5QlrBgIz8w=
Subject key identifier: 20:14:A1:63:3D:B2:54:E4:5F:E8:9F:35:93:17:79:D0:62:D4:C0:E6
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 01978847C8F7E33FCB10961ECBB6058091DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number: 11B3
Signing time: Thu 19 Jun 2025 13:01:35 +0000
Manifest this update: Thu 19 Jun 2025 13:01:35 +0000
Manifest next update: Fri 20 Jun 2025 13:01:35 +0000
Files and hashes: 1: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (hash: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=)
2: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=)
3: RUbC7Anwng13DAmADxwjexI1dI4.roa (hash: z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=)
4: StWwJRIdLVG2AMr41LeqT3VLiMY.roa (hash: eHQmJVkUkkZ8vtMtrgklqHvKfJQIUIWoCE0Hf2r79IE=)
5: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: BIhMKsIEkEOaZMzlADQHzxC0lG0bGuEE5ZvL4MVPhow=)
6: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=)
7: xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa (hash: ntcfKusbnH6G9LFWYHB/n9gMG8BQt0xnq4XPHB5frGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:47:c8:f7:e3:3f:cb:10:96:1e:cb:b6:05:80:91:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jun 19 13:01:35 2025 GMT
Not After : Jun 20 13:01:35 2025 GMT
Subject: CN=2014a1633db254e45fe89f35931779d062d4c0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:6c:7a:ba:9f:22:41:c7:e5:7f:83:c2:6a:
72:32:0e:fe:aa:ed:39:91:90:ac:5c:02:39:bf:21:
fb:36:25:ff:b2:28:af:6a:de:72:8e:57:98:d6:b9:
8b:ab:78:30:fc:d7:f0:8b:18:cf:db:89:d4:a5:e2:
42:8a:8a:5c:74:82:32:45:ba:23:4f:d7:9f:97:fd:
b6:89:f2:85:fb:5e:aa:87:4e:1d:97:99:6f:79:d8:
5c:67:8f:32:34:c6:5e:d4:f3:8f:e9:f9:74:83:39:
49:4c:ba:09:f1:86:43:89:9b:0d:7b:e8:4d:cf:84:
f8:be:3d:fe:d1:e7:91:3a:46:f2:66:ee:a6:af:ed:
88:da:55:91:d3:06:23:48:d2:35:04:ce:64:5c:dd:
06:20:40:bf:d9:f4:b3:c8:79:3c:f0:c0:97:71:4a:
29:e5:7e:46:58:99:c8:0f:a3:46:a0:1d:ce:6b:36:
84:5b:53:2a:33:9b:1d:9b:18:a0:d7:26:1d:ff:20:
33:74:97:a6:47:66:4f:27:5c:a9:4b:0a:20:bb:d4:
ba:3c:bc:a2:77:d0:45:72:6e:bb:21:6a:55:b2:df:
3a:4e:a8:f8:0f:21:dc:e6:27:65:0e:d4:0f:6b:25:
56:01:b4:0e:b2:22:2b:da:75:ed:e6:c5:4e:77:d5:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:14:A1:63:3D:B2:54:E4:5F:E8:9F:35:93:17:79:D0:62:D4:C0:E6
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ee:f1:63:f0:62:41:eb:e4:8c:f6:15:a5:49:61:3f:57:af:
d6:22:b7:20:67:e9:17:d7:ef:8e:27:f2:32:69:37:b4:dd:fb:
c7:ab:27:b7:d9:d5:fd:13:53:5f:8e:0a:9a:64:66:51:ee:28:
3e:d1:be:5a:4b:60:82:1a:eb:f1:87:ed:cb:87:44:6f:17:70:
84:c2:d7:26:46:7a:04:82:c4:38:3a:bd:e1:ba:cd:a3:2a:3b:
75:14:5d:55:a6:b9:f1:70:bd:c0:94:ae:43:22:15:e1:f7:14:
ae:84:df:c5:f0:3a:c1:f0:7c:7d:05:f5:26:a6:53:80:4a:7f:
8d:48:eb:bd:e9:87:89:99:6e:89:e2:57:9f:2d:7e:a8:1b:ae:
21:c4:9c:fa:07:0d:6e:1a:64:2c:0f:1c:27:9c:0a:11:f3:1d:
b5:0f:bc:a6:e6:8d:e2:55:52:47:cb:83:47:45:bc:64:d7:92:
a5:c6:e7:e8:6f:33:45:1d:1e:e6:d2:0a:67:10:7b:c8:a9:e1:
1b:b6:73:16:36:64:08:67:1b:f7:7d:13:4c:29:32:8b:2b:70:
c2:ea:a4:6a:49:ac:4d:e9:98:d8:46:e8:be:f2:5d:fb:2b:a4:
f3:cd:09:67:ba:f5:09:25:39:09:b0:66:9e:b7:e9:20:af:8e:
86:f4:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:16:20 2025 by rpki-client