Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: z4e0zO3YmIb+QVFSYVzUbK4voBircxBZeW47WgT68iY=
Subject key identifier: 37:1B:72:21:7D:10:BB:22:E1:C2:B9:5E:63:BC:86:B7:50:D1:6D:21
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 01976EBDCD2BF3510B6C9E3F1463157D3AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 0FC6
Signing time: Sat 14 Jun 2025 14:00:21 +0000
Manifest this update: Sat 14 Jun 2025 14:00:21 +0000
Manifest next update: Sun 15 Jun 2025 14:00:21 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: 62HRbWRXnrYXM1OpktOgoc2Cw+nnsly5GvzEfZVWTOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:cd:2b:f3:51:0b:6c:9e:3f:14:63:15:7d:3a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Jun 14 14:00:21 2025 GMT
Not After : Jun 15 14:00:21 2025 GMT
Subject: CN=371b72217d10bb22e1c2b95e63bc86b750d16d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:3f:8e:ca:69:00:df:12:21:ca:25:97:6b:
78:fb:31:db:8b:48:39:8c:39:25:68:a9:3d:14:ea:
57:08:e9:8d:cf:6f:f5:80:99:d8:6a:ba:08:c8:fe:
f7:ea:a7:62:ce:86:b4:f6:b2:be:9d:e3:75:77:ab:
16:ef:12:26:e2:c2:ca:cd:01:d7:b5:4f:62:31:15:
4b:06:d5:1d:62:ca:cd:b5:d0:dc:9d:ed:f2:97:2f:
ff:99:dd:8d:71:96:73:f6:85:cd:e2:14:52:78:08:
5d:bc:a2:3a:83:b5:8b:64:c5:f3:4b:bc:54:14:12:
70:2a:69:81:74:b7:9c:05:71:15:ce:d3:79:a4:74:
f9:c7:26:17:9b:69:0c:c8:84:e8:31:10:f8:f2:97:
13:06:a5:9f:34:cb:63:c8:17:be:b3:89:e0:ce:83:
2f:9f:83:02:ad:9e:dd:76:c1:0e:ca:53:66:00:5f:
ac:d5:4d:2c:32:d5:c3:af:73:0d:07:2f:12:4c:ec:
a7:83:d5:f9:98:21:be:f2:09:29:80:2b:b0:78:58:
e7:57:62:68:21:57:5d:bd:60:48:a6:b4:58:1a:99:
37:13:26:00:9a:7c:20:fd:e5:32:d4:65:16:0d:36:
b3:2b:9b:95:38:3d:ca:2d:c3:67:25:c9:79:0f:25:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1B:72:21:7D:10:BB:22:E1:C2:B9:5E:63:BC:86:B7:50:D1:6D:21
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5f:d9:ee:89:2c:3d:26:9d:5f:84:d4:8e:df:38:ff:e2:43:
82:2e:e4:c4:37:fa:a9:a0:21:3d:1d:8c:4c:84:c4:74:79:29:
be:16:50:0d:6c:a4:99:da:79:36:97:64:b5:ea:cd:25:b7:aa:
75:e5:46:78:77:15:ea:64:d9:47:8c:a8:1a:3f:91:c8:12:3a:
b7:4a:16:c8:95:bd:98:7d:28:a5:98:f6:16:ce:0b:d7:27:87:
6e:75:79:f3:07:61:79:c8:e4:ad:ca:d9:36:ea:63:2f:c6:7f:
d2:da:66:e0:e6:f8:df:83:c4:26:35:aa:d0:b6:52:26:97:c4:
5c:60:ae:76:6a:5f:e3:0b:02:f3:ee:1d:1f:ef:c8:08:a8:c2:
8b:a4:60:40:b8:a3:df:51:1e:b2:44:6a:86:9c:27:2f:32:3d:
d7:03:2c:f5:1b:00:6f:0a:26:b5:9f:88:e1:ac:bf:c8:6f:33:
ee:52:3c:c9:c1:96:7e:15:1d:9c:29:b6:69:96:dd:20:32:12:
85:47:96:20:90:ff:60:41:ac:4c:38:54:e1:a8:27:71:e3:0b:
29:04:b3:98:02:41:2b:2e:0a:5a:ad:d3:05:69:89:15:77:cb:
f7:5c:ff:29:e7:38:7f:03:a9:8d:71:8b:46:6e:3f:70:0c:fa:
f8:6d:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:56 2025 by rpki-client