Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: Ju61EoDu+ogye8we42R2HTBayehMVzU8iRA6uF/Tw/I=
Subject key identifier: DD:D3:AB:B0:3B:B1:0E:92:B1:55:21:A1:9D:46:A2:84:F0:30:82:1E
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 01976F2C6D9A2AE829D7C9E4A625D2F6A87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 072B
Signing time: Sat 14 Jun 2025 16:01:11 +0000
Manifest this update: Sat 14 Jun 2025 16:01:11 +0000
Manifest next update: Sun 15 Jun 2025 16:01:11 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: F8lkZTsR/FLmkCTygcMBURb0VGnQdGzngPCuTz0g7uU=)
2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:6d:9a:2a:e8:29:d7:c9:e4:a6:25:d2:f6:a8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Jun 14 16:01:11 2025 GMT
Not After : Jun 15 16:01:11 2025 GMT
Subject: CN=ddd3abb03bb10e92b15521a19d46a284f030821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9c:96:60:b0:3f:4d:7d:8e:94:58:e1:9e:a1:
64:a7:19:05:78:99:c2:9c:44:37:df:3d:2e:86:47:
96:4d:72:06:fa:07:34:7f:58:dd:f7:44:9f:ac:52:
25:a6:c5:19:3f:32:e4:9f:72:35:e6:bb:3d:3c:3e:
a8:17:5d:7d:40:51:a3:6b:80:18:e2:55:d8:6d:f7:
18:a3:9c:7e:48:07:90:48:42:67:b8:9c:d9:de:e1:
69:4a:85:a9:56:43:13:b5:7a:4d:95:b1:a5:d2:c8:
0b:4e:ba:24:98:e4:61:30:b6:a7:ec:d3:5f:f0:51:
a4:0b:45:e7:31:de:30:8f:e4:4a:8b:d0:1c:08:3f:
ef:ef:94:77:55:90:56:72:75:a9:d2:25:0a:c2:03:
4b:49:fa:66:b2:96:f2:7b:30:bb:c8:8d:2a:1d:77:
4d:68:4b:de:ad:07:5d:7a:25:4c:13:e0:fd:ac:45:
ee:fd:e7:60:5a:8d:3e:a3:2e:3a:4f:50:17:31:d8:
9c:dc:0e:b0:d4:09:08:f4:01:a1:8b:cb:34:4e:13:
bb:e7:0f:58:72:0c:c2:60:e5:3b:f0:6d:e6:ce:81:
0c:62:ad:2e:29:6a:26:22:76:a2:91:81:00:5b:8e:
17:19:96:4b:d2:d5:6d:64:f8:ff:fd:ff:dd:b0:4b:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D3:AB:B0:3B:B1:0E:92:B1:55:21:A1:9D:46:A2:84:F0:30:82:1E
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ea:c4:90:09:45:e8:2e:27:60:0e:cc:fd:75:c0:a8:95:f8:
a5:b4:0d:af:ae:93:07:d7:81:1c:22:29:ca:d3:33:b6:da:c7:
37:59:d6:9d:5d:45:1d:7b:e4:7a:4d:59:0c:0b:0c:9e:54:fb:
fd:ad:52:3e:f3:4a:1f:c3:97:b0:80:81:cb:93:cb:9f:21:a9:
9e:43:d3:c9:5b:71:8d:8f:52:c3:09:e6:ec:f5:bc:b8:fb:b9:
a7:a5:60:cc:76:36:02:70:d6:69:cc:97:41:a0:42:e7:0e:11:
cb:a2:0d:d1:44:7d:3c:8f:61:6d:76:11:fd:3c:07:ae:72:b3:
10:39:cf:9e:f2:09:c6:94:7a:41:6f:3a:a6:77:7d:bf:97:76:
20:d5:5b:0d:c9:f7:c9:2e:b9:ac:da:9b:d2:9b:06:ea:f8:f2:
9f:c1:cf:8e:fd:06:b3:ed:ab:c0:a6:ae:f9:d1:46:d6:2e:09:
8b:f7:c9:ef:a4:f1:ff:bf:37:e6:f1:3a:a3:0b:21:7a:95:b3:
f5:5e:bb:87:ca:b7:a7:22:c8:2d:5f:8b:48:e5:93:ae:ce:d4:
45:fc:60:f2:5a:3e:8b:e3:a3:0d:c0:e5:f4:6c:83:ff:d4:2e:
ed:17:37:be:64:82:47:cf:3f:f9:1d:c0:0a:d4:c6:4f:65:62:
71:b3:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:38:46 2025 by rpki-client