Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: 4iHZOMbiLXmUFMOJw2yJLCHY7MMa6TJ5bSC0GeRjoiU=
Subject key identifier: DC:85:7B:7A:50:CB:BA:25:B7:D5:B6:B6:06:FC:4E:64:B4:B4:6D:05
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019772D19EE5100F77A337DAA39181F734FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0BF9
Signing time: Sun 15 Jun 2025 09:00:29 +0000
Manifest this update: Sun 15 Jun 2025 09:00:29 +0000
Manifest next update: Mon 16 Jun 2025 09:00:29 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: RYvonOw8TsSvvq1gk3FdyXs+GJ+iQB8fv/Sm10cSKNc=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:9e:e5:10:0f:77:a3:37:da:a3:91:81:f7:34:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jun 15 09:00:29 2025 GMT
Not After : Jun 16 09:00:29 2025 GMT
Subject: CN=dc857b7a50cbba25b7d5b6b606fc4e64b4b46d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:b6:cc:b1:af:92:07:83:34:76:11:e3:5d:
43:45:86:d3:bb:44:64:a8:c7:7a:d5:11:a9:f8:c4:
62:83:f8:77:15:bb:cd:70:13:fe:2b:6d:dd:1e:68:
34:40:71:6c:58:20:6e:ab:fa:d9:a5:ca:53:93:ab:
d3:f2:5f:33:f8:d0:83:23:2a:35:06:35:3c:87:7a:
d7:f9:a2:84:f6:ef:1f:10:02:d8:85:a4:df:5b:64:
7c:a7:ed:c9:cc:29:f1:0d:f6:a7:39:86:75:9d:38:
eb:a8:4a:db:f4:79:d7:eb:a6:56:a4:ec:24:df:46:
4e:8a:e4:6f:4b:0b:27:7d:12:36:6b:fc:ca:21:74:
b2:5b:9e:76:22:d1:38:54:dc:b9:70:a8:32:4a:22:
de:ee:4b:22:9c:02:23:bb:e2:92:57:32:72:0c:9d:
ce:46:33:dd:ac:51:5a:37:cf:0c:72:60:28:7f:d3:
9f:d7:c5:1d:cd:86:6c:30:1b:55:50:95:e4:c3:82:
ba:1c:9a:ab:42:d1:1d:e5:be:12:54:c8:da:37:31:
6a:59:7a:a4:e5:a9:d4:98:ea:c9:eb:67:d8:14:7d:
20:a5:38:0c:23:18:7d:70:1f:9c:24:6b:72:c1:48:
97:c2:14:da:44:4c:0d:da:c9:e5:ae:90:eb:d7:54:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:7B:7A:50:CB:BA:25:B7:D5:B6:B6:06:FC:4E:64:B4:B4:6D:05
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:95:c8:f1:6f:98:11:19:ee:95:03:c4:fc:d4:00:25:e4:92:
5e:ca:3f:13:cd:dd:bd:1b:9e:88:3f:9e:00:2e:92:84:e4:01:
ba:7a:51:18:10:9e:68:1c:29:be:eb:f9:27:76:12:1e:31:a6:
6e:46:76:cf:f1:4f:06:01:b1:96:35:9d:53:3c:47:43:4d:e0:
ef:a2:1d:d9:91:8d:dd:a1:ea:c8:17:64:b7:d9:f9:71:80:60:
ab:d0:53:4d:e8:b3:32:b9:e8:3f:84:e2:ba:05:dc:2e:0f:b7:
ed:6c:e6:53:2a:f3:27:bb:bd:93:e7:fc:a1:f4:b5:2b:c0:d8:
9a:8f:89:6e:da:88:1c:a7:c7:aa:1f:f8:fd:06:2c:5a:f4:69:
50:28:b7:6d:09:c9:15:b3:73:b9:f8:b6:54:90:09:bc:42:a0:
88:2a:08:04:aa:f3:2e:81:93:2d:33:49:e1:99:e1:0e:71:32:
86:a0:fe:78:fc:56:a3:05:c2:07:79:43:68:a8:a9:0d:9d:73:
2d:94:61:cb:01:ad:29:31:d3:9c:df:1e:1f:66:07:05:2f:9c:
18:34:7d:02:a1:4f:40:70:51:e3:9a:b0:2d:7a:d8:fb:a8:72:
d1:05:89:d4:dc:8c:3c:51:27:5f:1e:11:2a:fc:fc:be:1b:13:
da:80:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:48:37 2025 by rpki-client