Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: VYXCdSWgAj2W5VkhL9KEVyRQVGsLIz44QgBWiMhWQS8=
Subject key identifier: D3:F2:C4:BD:B4:19:0D:87:B1:60:5A:81:44:45:D2:FA:5D:ED:5B:66
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019773E4A2116ED8A9C8AD473F27BD3286C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 068E
Signing time: Sun 15 Jun 2025 14:00:52 +0000
Manifest this update: Sun 15 Jun 2025 14:00:52 +0000
Manifest next update: Mon 16 Jun 2025 14:00:52 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: cJ5J8bqnAOIYh/YyCGG19Lyx+K9fLX32Tydy+IDv3hY=)
2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:a2:11:6e:d8:a9:c8:ad:47:3f:27:bd:32:86:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Jun 15 14:00:52 2025 GMT
Not After : Jun 16 14:00:52 2025 GMT
Subject: CN=d3f2c4bdb4190d87b1605a814445d2fa5ded5b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:cc:32:55:34:94:98:e9:3e:a8:24:cf:df:
d9:02:a9:e3:26:26:b9:cb:05:58:69:d9:ac:b9:7c:
05:b5:2a:c4:a0:5c:99:6c:26:56:0e:7a:dc:01:65:
ff:3c:ec:1c:52:17:82:14:a4:ef:c9:88:eb:4c:b9:
41:67:78:d5:b8:49:d9:b8:c5:4d:df:9a:5d:9a:9a:
09:b5:73:08:a1:6a:58:69:27:1e:84:76:a5:84:8a:
6e:d4:94:cf:c9:be:db:5d:f7:ea:2a:0a:43:c8:3a:
ca:6b:d9:8a:8b:a2:0f:17:1b:21:09:04:1c:2b:6b:
02:2b:74:58:43:58:80:a6:fa:07:bd:e7:9a:dc:60:
d6:e9:4d:28:13:e1:8f:ba:4c:1a:07:24:7b:2f:e1:
d1:34:4a:47:5f:33:95:2f:4f:94:75:33:c0:c7:81:
b3:1a:45:b5:9b:a3:ea:ab:c8:cc:d0:9b:5c:cb:40:
68:b6:88:df:bf:35:ad:d9:dd:1f:12:11:fb:31:d5:
fe:b0:8d:be:48:12:41:bf:c2:fb:36:3a:ed:2f:d0:
78:5f:26:5c:98:b9:09:51:55:09:1f:39:79:d1:1d:
a2:41:ae:40:ce:98:7c:3b:41:22:30:5d:e6:67:69:
12:70:1b:b1:50:fc:d2:15:3b:3d:eb:3b:59:fb:5f:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:C4:BD:B4:19:0D:87:B1:60:5A:81:44:45:D2:FA:5D:ED:5B:66
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:af:53:a2:df:c0:c5:fe:56:05:59:a6:9c:fb:42:dd:da:72:
09:ae:6c:79:e3:a4:c7:30:b0:86:bd:78:34:56:39:db:3f:66:
b4:05:bc:c2:0d:eb:98:90:81:6f:85:44:89:f4:96:92:6f:f3:
6a:38:45:f7:e0:0d:c5:47:5e:b0:74:4a:ed:ac:66:87:16:a6:
bc:48:ab:56:23:24:f4:ff:b9:01:09:05:20:3e:5d:7f:af:13:
b6:f0:20:62:5e:c9:c7:9e:ac:36:0e:a7:b9:16:2b:e5:bf:31:
22:d2:e3:be:56:a2:a7:2d:f3:65:20:e0:02:64:92:06:57:2d:
ad:74:7f:32:31:d8:f2:f4:78:ac:0e:38:05:66:e4:c9:44:54:
3e:98:90:8d:03:90:93:b1:40:56:51:98:cf:d7:07:0e:2a:19:
ed:3d:00:d2:1c:13:ce:0f:4e:ea:84:78:f9:6c:af:50:5f:f9:
28:87:47:74:b8:ef:89:c5:7e:d4:ca:c7:94:30:85:be:57:3e:
9e:22:e3:cb:aa:21:cf:77:5d:1c:6b:24:d0:e0:cc:b0:9a:80:
c2:39:ca:0c:85:00:3c:63:7f:41:13:82:08:d5:21:cd:be:c9:
6b:71:d6:10:9c:3a:67:ea:67:0e:fc:22:a3:f6:b7:d4:27:ee:
f8:67:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:59:57 2025 by rpki-client