Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: 76Y7eOUDTZlSms0Z6j7RlRSpSutBqYAd37n2Lzvo10k=
Subject key identifier: 6E:6F:A9:55:BE:A0:60:D0:CC:A4:FD:B9:96:F2:23:57:32:F1:58:57
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 01976E198BDD68F70319D503A62A171A3390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 11:00:57 +0000
Manifest this update: Sat 14 Jun 2025 11:00:57 +0000
Manifest next update: Sun 15 Jun 2025 11:00:57 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: rlsTqQoxGjJ8PCVvPDnPK+3Fl03isbCqZE3PJimxqVk=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:8b:dd:68:f7:03:19:d5:03:a6:2a:17:1a:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Jun 14 11:00:57 2025 GMT
Not After : Jun 15 11:00:57 2025 GMT
Subject: CN=6e6fa955bea060d0cca4fdb996f2235732f15857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:da:45:8c:6e:0a:a8:49:05:a8:64:a1:16:
a1:1a:9e:b2:66:1d:1e:88:30:5a:d8:4c:b7:c5:38:
93:1d:22:51:ef:2f:28:cc:ad:a4:d9:3f:99:1a:14:
5f:e0:70:86:89:5e:39:6e:18:75:fc:2b:8f:d9:56:
06:bb:dc:21:83:3d:3b:79:17:db:bd:d1:c0:f4:3e:
11:e4:a1:98:be:13:5d:63:e6:db:82:94:52:21:47:
84:03:73:86:16:c7:aa:b1:24:13:c5:52:3d:a0:3e:
2e:e7:98:f7:58:8e:bb:7e:8c:68:52:06:64:77:5c:
68:8f:ac:f4:14:6e:c1:33:1f:db:fa:1f:3f:1a:11:
0a:05:90:f3:f1:31:09:8c:4c:96:92:52:1a:2a:af:
21:63:5a:b2:b5:d6:30:5e:8b:69:2a:81:99:7d:9e:
e8:25:9d:a7:a8:ac:cc:75:63:67:05:37:7d:4d:71:
58:d1:c7:1c:7f:d1:67:b8:28:48:16:6d:68:e4:dd:
2a:c3:d3:f1:51:e2:d2:64:47:06:c9:73:66:76:0b:
26:d3:26:f5:5b:53:ba:f5:43:13:02:7c:e1:c8:bc:
d3:4a:e8:7b:a5:08:b4:de:eb:e7:03:02:e1:39:57:
1c:cc:2a:42:ba:b3:86:25:4f:2c:24:65:bc:d3:59:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6F:A9:55:BE:A0:60:D0:CC:A4:FD:B9:96:F2:23:57:32:F1:58:57
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:16:63:30:d5:56:a4:58:52:50:34:1e:8d:3d:9d:69:69:64:
76:69:fd:f4:ae:44:1b:28:d4:b5:36:67:a9:1d:09:7d:b8:5c:
a1:44:aa:dd:ff:fd:4a:29:27:3f:52:ad:54:df:68:3d:03:13:
68:98:03:ca:8c:bf:89:8a:d2:82:62:22:ae:18:59:4b:ee:1f:
40:62:34:f0:03:64:ed:e3:08:c9:16:12:63:24:76:71:cd:1a:
53:18:f6:ae:86:7f:aa:52:40:f0:56:fd:1f:e1:09:4c:65:3f:
e5:ca:fb:87:7e:1a:67:cf:d8:fb:9f:32:b4:fd:3b:35:f0:21:
e9:bf:65:63:d8:c9:ba:b7:8b:75:45:18:02:ff:e6:e7:9a:9f:
be:c5:1f:df:ad:4a:8c:02:8f:4b:bb:79:e2:9a:6c:b9:e9:ae:
d4:86:d6:06:bc:1d:84:ce:2e:94:d2:04:04:51:78:e9:17:a0:
68:38:f6:56:8e:aa:e3:aa:08:fc:82:1e:10:b2:56:4b:cb:3b:
f8:c0:57:02:32:d3:91:74:3e:da:4b:68:fd:59:7f:c9:08:14:
b5:66:e3:08:b9:1a:71:e4:9c:1c:c3:6b:9a:28:d9:68:f2:fb:
77:df:df:ae:7d:a1:33:09:f7:f4:a4:cc:cd:6e:6e:45:00:b4:
79:50:cf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:22 2025 by rpki-client