Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: qY0ow1tTOimsV4Zi4rve2rSjyFSQHDdLK88Sh2+7kL8=
Subject key identifier: 73:63:E4:87:D6:1D:1F:2B:53:DD:58:A6:25:96:D2:A2:D5:11:41:21
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019779E6624298548432A520A5C808394205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 18:00:30 +0000
Manifest this update: Mon 16 Jun 2025 18:00:30 +0000
Manifest next update: Tue 17 Jun 2025 18:00:30 +0000
Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: +VOWWnZU+NhXkWMMmUwZuClIcRXFoXgnbheet2/Nwoo=)
2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:62:42:98:54:84:32:a5:20:a5:c8:08:39:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Jun 16 18:00:30 2025 GMT
Not After : Jun 17 18:00:30 2025 GMT
Subject: CN=7363e487d61d1f2b53dd58a62596d2a2d5114121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:6e:47:15:08:e5:71:3c:05:d5:d3:21:8b:
0d:f0:e5:00:28:3e:81:a3:75:fc:1e:e8:91:7a:71:
9b:20:2f:23:4c:43:cb:30:0d:dc:19:63:4e:6a:6b:
c0:ac:c9:7b:95:22:48:c3:5f:5d:af:11:47:a6:ab:
40:b2:14:74:5a:37:35:54:eb:90:68:cf:60:47:15:
92:b3:61:16:78:aa:ae:8f:cb:20:7f:70:38:0a:f3:
f4:8c:69:43:3c:8c:cd:f0:e7:8c:9c:2c:d5:2b:80:
dc:31:1a:d0:fb:3f:6c:43:cf:04:90:5b:16:d1:0d:
28:94:bb:64:f5:d9:30:f9:44:f8:b7:4b:bb:38:56:
43:19:74:d6:76:e9:dc:4b:2d:e4:35:16:cb:33:ba:
1e:dc:5b:f9:00:4a:5a:62:4c:e4:a0:1e:e8:09:5a:
0c:df:ac:50:b7:d6:ec:d1:e3:27:59:6e:47:a4:7f:
c9:69:98:36:3a:f1:4f:74:38:fe:9c:38:8f:99:a3:
00:ca:c0:5e:68:73:a9:af:fd:c9:5b:7d:8f:d3:67:
5c:71:1a:94:9d:2d:20:f2:0b:bf:b6:d6:1c:73:53:
09:df:87:48:96:d9:a7:dc:53:43:2b:d8:34:eb:47:
db:f7:b6:a7:db:62:14:00:66:be:1e:c3:33:6b:87:
3e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:63:E4:87:D6:1D:1F:2B:53:DD:58:A6:25:96:D2:A2:D5:11:41:21
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c9:d8:2f:9b:15:a9:e0:f1:95:da:bd:ac:67:60:1e:5a:0a:
63:9e:ca:8f:da:11:1e:c2:55:8b:ad:9a:52:25:6d:7e:a0:6d:
e1:9c:1a:f7:9f:28:59:5c:0f:9f:5a:6a:01:f1:d5:24:fb:f3:
6c:9a:ed:bc:96:c4:ae:ba:5c:cf:20:83:dc:77:44:b2:08:8b:
4f:b8:e9:62:1d:93:2b:e1:eb:f3:dc:02:71:bd:94:95:7d:0f:
c5:6e:39:92:b4:3f:42:2d:e6:ed:62:87:fa:52:3b:27:4a:75:
78:02:d6:c9:67:92:da:0c:bf:30:ca:9a:67:e7:6d:e1:d0:f2:
f1:33:47:8d:d8:74:42:98:bf:f4:e5:31:29:b2:b5:ab:9a:61:
97:af:62:b8:dd:d4:21:aa:8d:83:32:74:b1:66:e9:df:6d:c4:
1d:85:04:b8:fb:5a:fc:70:1d:e1:29:74:1d:a4:ac:b9:a1:cb:
0c:dd:b8:4a:30:ef:92:33:fb:c5:da:1f:38:38:a6:3a:1a:bf:
b7:2f:10:f3:9c:6d:57:8e:0c:de:64:eb:02:9a:80:b4:9d:ed:
da:0a:fa:31:6a:a6:0d:9f:13:c7:c1:0a:8f:74:92:99:3a:12:
5d:6e:00:a1:f0:da:41:b2:79:bf:07:69:ef:2e:2b:8a:a4:e6:
4f:f2:b0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:38:57 2025 by rpki-client