Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: Pq4yE/CirHWyjis0p45rpx6X6KQk3TFXbN2A7YHS9oM=
Subject key identifier: C0:56:AB:51:8C:63:F7:76:F6:4D:E4:94:F2:32:A1:26:0E:4A:A6:C2
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 01977942156C065D00508C11DEB01F8E4B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 1322
Signing time: Mon 16 Jun 2025 15:01:03 +0000
Manifest this update: Mon 16 Jun 2025 15:01:03 +0000
Manifest next update: Tue 17 Jun 2025 15:01:03 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: 0fE8333/okdX6+2URUTJuKjAwYPmyEfKZVBQwGQhnUc=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:15:6c:06:5d:00:50:8c:11:de:b0:1f:8e:4b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Jun 16 15:01:03 2025 GMT
Not After : Jun 17 15:01:03 2025 GMT
Subject: CN=c056ab518c63f776f64de494f232a1260e4aa6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c5:a3:e7:25:7d:7a:cd:eb:10:ff:b8:bb:00:
16:58:4d:5d:ed:af:ef:ec:4b:c5:7b:1d:2b:3c:b2:
86:e4:d7:76:8c:07:ad:b9:8a:c5:1e:3d:af:10:f9:
bb:e2:b8:b1:9c:e3:f5:87:36:28:92:ff:13:ec:74:
ad:cb:ca:58:5d:45:6b:7e:89:0b:1d:00:f3:7b:62:
5c:ad:30:79:a9:b0:e4:d7:21:f1:89:0a:91:36:a5:
e5:bb:93:d6:cd:1c:7c:94:53:e7:85:b5:07:94:93:
19:b8:ff:0b:ef:bc:ee:f0:4e:a3:82:ae:ef:a2:5f:
1b:d0:e2:40:36:14:52:53:e8:b1:87:f0:03:a4:3e:
51:38:3f:1b:7f:3f:ad:50:82:a8:a1:b2:11:f8:db:
86:c1:e9:41:78:2d:85:07:8d:2c:2e:e3:ec:6a:88:
38:9f:4e:5e:e1:c5:b1:6b:e5:98:3b:d8:eb:3f:cc:
16:44:fc:74:57:d7:13:7e:ff:62:9b:25:ae:89:05:
ba:d5:3c:5d:98:e9:c3:a7:ad:79:51:32:1d:a6:d2:
21:0c:1b:af:db:a8:99:23:0e:63:9d:80:9a:22:4b:
05:97:ac:2e:bd:5c:d7:d7:f9:58:8b:d2:71:34:da:
d5:4a:db:0e:df:86:6d:21:15:22:b5:9b:9c:9f:09:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:AB:51:8C:63:F7:76:F6:4D:E4:94:F2:32:A1:26:0E:4A:A6:C2
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:31:eb:0c:6d:07:eb:60:3d:0c:32:05:05:d9:24:30:44:20:
eb:56:ea:b8:ad:32:f3:a5:c6:94:7c:5f:d4:18:d5:eb:82:2d:
9d:c7:d5:26:88:22:af:1d:2b:97:e6:a7:ff:31:19:92:f5:84:
ed:70:98:d1:e2:f6:e0:1d:f9:bd:de:bb:26:1f:04:32:27:17:
49:cb:82:2f:4f:72:56:c4:bc:bf:b1:3b:0e:90:99:5a:f9:4c:
3c:4a:58:bc:8f:96:14:34:69:4b:50:f0:c2:5c:ab:92:ac:21:
be:6b:af:59:4c:2b:93:76:3b:25:ef:eb:c9:27:b6:b6:e6:d3:
db:49:2d:cf:73:09:e4:d4:0d:1f:db:7d:13:c8:88:ab:44:ce:
d8:d8:9f:6e:22:4f:43:ee:24:dc:72:ae:bf:fe:c8:a3:a6:e7:
b7:0a:0f:ba:9c:f3:5b:f8:5e:0d:a8:be:60:6a:38:71:f3:07:
c7:58:94:7a:13:40:28:87:ee:0b:ec:dc:4c:43:a5:f0:d3:87:
ac:f1:06:0b:5d:50:8c:59:e5:6a:e6:71:20:e0:7a:7b:77:60:
0d:98:2e:1f:b3:f0:79:44:94:5e:0b:28:b3:92:d6:c2:d0:61:
4d:cf:27:e5:e0:77:4d:a8:c0:59:c2:0c:71:d8:47:9a:20:f7:
bf:f7:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:44:50 2025 by rpki-client