Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: HhhjzOtuvjGQxHeFGVv6YhOk2Sdvmmx/UhtzrbKoyIo=
Subject key identifier: AB:FC:11:27:A1:9A:09:F9:C8:88:32:C9:C0:B3:C1:F9:64:6A:76:A2
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 01977B30BB1D42F1BE80AB8FB4C02D3DFBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 0139
Signing time: Tue 17 Jun 2025 00:01:20 +0000
Manifest this update: Tue 17 Jun 2025 00:01:20 +0000
Manifest next update: Wed 18 Jun 2025 00:01:20 +0000
Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: 1pckdDM2dl47tbMSxotfNBLPRqAz/0YH9VraWU8R/Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:bb:1d:42:f1:be:80:ab:8f:b4:c0:2d:3d:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Jun 17 00:01:20 2025 GMT
Not After : Jun 18 00:01:20 2025 GMT
Subject: CN=abfc1127a19a09f9c88832c9c0b3c1f9646a76a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fb:0d:33:02:13:6a:88:21:f2:b8:47:7e:9f:
74:77:78:6e:08:5f:d4:bc:cf:73:ec:3c:e7:56:d1:
02:72:73:3a:c1:aa:5e:f8:99:e5:9f:a8:f8:67:c0:
de:ae:37:62:fd:56:ad:71:65:39:1b:b7:e1:09:8f:
c9:b1:65:d4:5d:96:64:a9:d1:7b:0b:a1:66:f4:da:
67:93:65:fe:38:53:b1:72:e0:fd:4f:d3:57:6c:79:
6e:54:6c:65:bc:b8:52:d4:c2:c1:0b:a3:91:4e:4d:
0f:b7:b7:aa:10:34:6b:58:79:3a:c3:51:35:14:27:
d6:8e:eb:4f:32:fa:20:36:ba:a1:04:41:0c:fb:d3:
19:99:bd:33:d1:4b:b6:b4:bb:a5:b8:e9:89:e6:3e:
2b:a7:e0:97:24:c3:9d:80:da:1a:54:e9:32:1a:fa:
58:8e:cf:45:57:d1:8a:96:ee:a7:b9:5b:77:51:70:
f3:ec:c8:7e:41:3c:f0:ce:7a:82:b7:37:18:e7:6e:
23:d6:f5:64:29:b5:4c:dc:b0:81:d9:f8:b2:b2:11:
eb:81:67:d3:b6:5c:7b:a6:6f:dd:c5:17:fc:08:fa:
de:3a:6a:16:15:54:7c:eb:a9:fd:ec:dd:e7:8e:ff:
95:64:3d:d9:04:d8:b4:8e:15:c1:38:a2:57:75:19:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FC:11:27:A1:9A:09:F9:C8:88:32:C9:C0:B3:C1:F9:64:6A:76:A2
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:35:7b:96:4e:99:0e:e0:71:43:22:31:e8:e4:db:57:86:8d:
fd:f9:b5:79:e6:cb:00:87:a4:0b:23:60:5a:f1:62:b2:0d:6c:
58:f4:12:b9:6c:47:57:e3:c2:be:a0:61:8a:01:28:93:2c:61:
8b:86:02:c4:47:0c:7b:0e:91:ac:b9:d8:88:ac:b4:03:3e:a9:
f6:75:cc:be:b8:e0:87:6b:5d:0a:4a:53:18:da:a3:b3:78:8a:
7d:d0:f1:0b:6e:6c:ac:e2:34:af:a9:f1:7b:aa:c7:59:ac:83:
b0:4b:6e:bb:03:8b:8c:b5:30:9a:62:fe:92:62:1d:ba:63:ac:
5f:c3:1b:0b:c3:7e:03:5f:51:65:85:e9:f0:03:bc:95:1c:2d:
7f:5c:ca:74:55:53:64:f5:bc:5b:17:d5:66:8f:ad:24:19:0c:
21:03:c7:af:57:6a:8d:f2:3d:59:05:ce:f8:5e:10:b3:15:e6:
67:32:24:90:57:1b:65:23:51:3d:73:40:2e:62:b1:dd:2e:b6:
26:4a:23:bf:76:82:53:6a:70:99:1d:c8:79:38:63:e5:21:47:
b1:fe:6b:c3:62:89:ab:f3:51:be:3e:d6:97:2f:8a:47:44:47:
b4:e7:43:3f:e4:2e:af:b8:96:f2:e9:b4:fb:f5:cf:52:bf:e1:
83:0c:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:56:58 2025 by rpki-client