Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: VsAZLqY4HHRtpjvXUY0ShCMKEg+t/AJYU/I1zZ6zhCk=
Subject key identifier: 5E:B9:D8:7C:61:85:E1:70:8C:14:CD:75:31:68:F8:13:4C:78:76:FE
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01976D06B089042648F632CFDF6B85CAA377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 0F48
Signing time: Sat 14 Jun 2025 06:00:44 +0000
Manifest this update: Sat 14 Jun 2025 06:00:44 +0000
Manifest next update: Sun 15 Jun 2025 06:00:44 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: tywn8z5f2w3vCZ3AZmHta5J9f4j6lsmzg62aKNs3uBE=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:b0:89:04:26:48:f6:32:cf:df:6b:85:ca:a3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Jun 14 06:00:44 2025 GMT
Not After : Jun 15 06:00:44 2025 GMT
Subject: CN=5eb9d87c6185e1708c14cd753168f8134c7876fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:ee:35:f0:b9:45:2e:6b:ae:89:91:06:fe:
55:aa:21:0d:3d:80:1d:ec:bd:b9:5e:d4:bd:5c:a4:
d4:69:c5:66:7d:77:6f:be:ca:c1:9e:a7:98:85:b8:
94:73:f8:85:eb:9a:c7:d8:41:b9:5c:4a:36:03:4e:
4e:b3:8f:0a:9e:ec:28:d7:32:ab:56:c1:56:0e:06:
17:2e:5a:ea:14:e4:04:6b:77:8c:da:5c:db:37:59:
10:d8:dc:8b:b2:53:46:1f:b4:fc:0e:b9:1d:f9:6b:
e9:21:7c:ea:b0:0d:04:c2:e0:b9:e7:ef:70:de:c7:
7d:dc:3b:56:6b:48:61:36:96:84:93:a5:01:2d:5f:
a3:a2:2a:80:9f:c9:7f:3b:f6:54:d4:53:66:09:5d:
72:ba:42:ed:2d:30:1b:73:ee:2b:1d:1d:1f:2d:1b:
2c:72:87:9f:94:f0:fe:5c:21:39:68:2f:97:a6:d9:
7e:d7:c4:04:27:94:3e:a2:20:30:82:78:b8:f8:9b:
6f:90:ca:f1:c3:6c:70:6b:02:95:e4:5a:07:60:ae:
a8:86:7d:8d:f8:da:49:92:28:2d:ff:83:3f:02:c5:
5d:89:b5:78:67:bc:a1:c0:9e:ad:3c:9f:6d:a4:3d:
a3:3c:ac:34:82:6a:0c:13:31:14:1c:71:92:d2:b3:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B9:D8:7C:61:85:E1:70:8C:14:CD:75:31:68:F8:13:4C:78:76:FE
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f1:02:3c:94:fe:69:a0:72:f0:bf:82:3d:1e:ce:b1:b7:ae:
da:90:f7:45:be:83:e5:8d:2f:cf:5c:57:17:e5:3d:4d:26:60:
66:6c:77:77:b7:29:31:af:f7:1c:a3:09:85:02:5c:80:d3:e5:
40:16:ec:9e:b5:dd:d0:fb:54:bf:24:1f:33:8a:63:75:c9:95:
e4:3b:06:23:94:34:0d:fd:10:c1:ea:9d:ff:a5:af:39:18:81:
dd:ec:12:bd:03:08:6d:c4:69:f9:3f:73:35:1f:5f:6a:53:63:
92:f4:1b:5a:a9:31:87:aa:13:cd:7d:4c:bd:4e:18:c4:9d:5a:
14:5c:1b:73:28:d8:0d:e3:09:cd:00:ad:3f:8f:ba:6d:5e:da:
54:9c:51:eb:ce:63:8d:c0:53:84:bd:48:cf:e8:59:28:45:3a:
ba:df:cd:30:de:b8:36:50:57:90:67:72:85:44:6d:b6:c1:c5:
2a:00:4e:a7:81:a2:89:97:ab:a5:6d:f4:47:ef:4f:f3:e3:18:
32:01:be:f3:4a:7b:53:53:4e:b9:d5:c5:58:17:94:9f:8e:b6:
27:00:38:5d:23:11:e3:35:8b:1b:d9:f4:b7:7d:14:f1:98:c9:
c6:5c:0e:bd:a9:c7:96:cd:fa:4c:3d:cb:ec:27:71:01:d4:8d:
99:2d:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:27:56 2025 by rpki-client