Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier: 3owNQcvlAMrpR7MajNphlNIkWAGItcMy5QzqZXCTqyA=
Subject key identifier: E2:DA:C6:5C:AB:51:03:F8:CA:6A:68:A6:58:F3:1F:03:66:0A:87:1C
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 019768F2EA3AC57182DE5702EF8063530762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number: 1190
Signing time: Fri 13 Jun 2025 11:00:39 +0000
Manifest this update: Fri 13 Jun 2025 11:00:39 +0000
Manifest next update: Sat 14 Jun 2025 11:00:39 +0000
Files and hashes: 1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=)
2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: /HvJc4tuyw88OPPSPTxUag+Z05DtutyKPHZBzezCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ea:3a:c5:71:82:de:57:02:ef:80:63:53:07:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Jun 13 11:00:39 2025 GMT
Not After : Jun 14 11:00:39 2025 GMT
Subject: CN=e2dac65cab5103f8ca6a68a658f31f03660a871c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:0a:83:4c:97:f3:65:2c:7e:dd:0b:91:11:
1a:e5:d8:d7:ff:90:36:1f:dc:82:07:2e:f3:e7:15:
25:06:e5:bc:6c:44:2f:c7:f0:91:ad:f8:b4:5e:ee:
8a:77:97:95:29:c4:ef:c5:3a:a9:33:0d:43:0d:07:
0a:90:ba:94:47:6f:5f:ac:07:87:16:85:eb:5e:65:
0d:cc:7a:8d:f1:f7:3d:8c:06:2c:e3:6b:10:92:23:
f8:79:79:4a:ea:a5:93:7d:0e:0f:c7:19:69:d9:a9:
28:66:51:c0:ff:c7:fc:84:46:ab:c3:b4:8f:ed:12:
e1:99:1b:84:33:b8:98:54:04:00:90:e0:79:1f:7c:
25:f2:10:6c:12:d2:86:b0:01:8e:4d:a5:0f:7d:74:
4d:60:97:0c:68:94:3a:ba:03:f1:99:36:f2:9d:39:
03:3c:84:aa:9b:58:e1:73:3f:bb:96:87:6e:32:ec:
bb:b2:99:2b:ee:6b:c1:b4:7e:e2:c0:8b:7f:24:6e:
f4:19:ef:2e:63:5b:a4:e6:db:db:15:03:f2:39:2b:
b3:e9:5d:97:35:86:d9:8a:9e:84:87:2f:26:7f:2a:
83:04:02:ac:1c:76:ed:30:e3:9c:de:c9:78:4c:aa:
5f:b3:71:2a:7f:0e:f2:2b:d2:8f:d4:03:9e:e1:40:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:C6:5C:AB:51:03:F8:CA:6A:68:A6:58:F3:1F:03:66:0A:87:1C
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7a:1a:1f:ca:4d:ba:3e:cd:ad:8e:72:c7:6c:2e:af:4d:bd:
16:b6:20:84:bf:2b:be:a1:7c:24:b5:d6:bb:da:5a:e7:9a:a0:
12:7d:af:dd:5b:d9:c7:73:d9:fd:19:74:e4:20:18:6f:f4:e9:
fe:7c:70:4b:6b:fc:b6:98:11:1d:f9:30:68:5c:48:58:5a:f9:
17:d6:03:7e:f6:46:c4:4e:5d:dd:1e:df:6e:1f:8f:02:21:af:
ce:00:69:29:89:8f:a4:6c:c9:3f:01:e9:2c:b9:f2:37:bf:a5:
c4:e1:1e:3d:0a:d9:b9:8e:a1:29:de:fb:92:6a:75:3c:26:08:
4b:f4:4c:a5:02:33:5a:5b:16:66:11:85:01:45:c4:36:9e:90:
13:d5:aa:3a:69:80:d4:69:cb:d5:e3:ff:93:1d:23:97:13:79:
dd:f2:af:0a:f9:91:4c:24:a9:78:7e:93:ce:92:c7:03:23:1f:
d6:76:ac:db:ff:8a:b3:7d:a5:bd:0f:a7:6e:f0:b2:9e:a5:03:
2c:ff:77:ff:62:f2:a3:53:13:ea:ea:ef:44:1e:94:ed:57:21:
32:fa:7b:96:74:93:be:67:c4:b5:03:80:44:7e:db:df:34:4a:
a6:e6:93:42:20:5a:73:d5:0e:61:7d:e6:9c:9d:59:da:a2:b4:
15:a4:be:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:07 2025 by rpki-client