Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: hmfJQUFcfjgjmI8dYY9y7B1DMs8pG7BUqXfPjrsTuRQ=
Subject key identifier: BA:CA:1A:6A:EF:64:29:20:D5:FC:83:28:7C:D5:04:55:23:39:D6:FC
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 01976EF4BE24CFA2C82F2D84D07C72739D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 15:00:22 +0000
Manifest this update: Sat 14 Jun 2025 15:00:22 +0000
Manifest next update: Sun 15 Jun 2025 15:00:22 +0000
Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: 6KrJLG05BJy1bR+7kVrE4l1jDXs9rqnYagUru77MLwk=)
3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:be:24:cf:a2:c8:2f:2d:84:d0:7c:72:73:9d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Jun 14 15:00:22 2025 GMT
Not After : Jun 15 15:00:22 2025 GMT
Subject: CN=baca1a6aef642920d5fc83287cd504552339d6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:0a:52:f6:b6:0c:5f:d5:47:1c:bc:f1:62:
28:9a:70:49:34:fd:90:1d:ec:cd:10:8d:5c:8e:69:
73:89:a3:17:6c:e2:77:ef:6f:e7:73:78:c9:73:f9:
ad:32:5d:6d:64:fd:f6:e9:eb:2b:23:4a:b0:55:ac:
1c:a3:ed:c2:59:75:c9:05:17:51:4b:e7:b7:cb:71:
9e:32:6a:50:60:bf:8e:b8:23:85:da:d8:af:34:2f:
34:c5:2b:0b:94:40:53:fd:fb:d1:3f:b6:bb:b0:61:
e0:a7:28:77:95:f5:fb:e6:40:fd:a5:69:9c:45:36:
b2:a8:56:f8:f6:4e:be:f8:63:4b:59:ea:1f:87:ea:
2b:2d:75:01:d0:f4:90:f1:82:2b:9e:8c:05:e3:c6:
63:0c:47:c6:b8:cb:9f:00:62:c7:fc:18:e7:5c:32:
39:b5:04:2e:95:d8:70:22:55:13:b3:0a:ae:89:9a:
0c:ec:c3:b7:e0:74:e3:0a:c4:42:cc:ae:e4:70:c9:
eb:40:30:1f:1b:42:8c:61:0a:28:ed:c8:d5:5a:5e:
34:80:4b:cb:8a:24:95:fd:32:09:cb:59:98:ca:58:
f1:10:7a:59:20:e0:fe:b5:a3:63:e0:69:37:ab:2c:
a0:f4:25:90:12:70:7d:a2:87:02:eb:e0:68:42:54:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:1A:6A:EF:64:29:20:D5:FC:83:28:7C:D5:04:55:23:39:D6:FC
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5a:7a:d0:8c:1f:d4:fb:a7:f8:5c:9d:44:00:f7:28:ff:f3:
02:17:97:b1:08:3b:41:94:e1:9f:13:39:33:df:94:e9:1a:ac:
c5:1f:ee:44:97:4e:be:80:ab:62:24:2f:c4:24:91:e7:32:b1:
b1:87:9e:83:79:c4:2d:87:47:d9:69:f3:24:c1:58:2a:62:89:
b8:b8:9b:47:5d:33:f9:ad:d5:3e:81:48:55:90:f6:d5:6a:c6:
45:7f:93:fc:22:7d:c6:2c:5b:9e:f1:ef:a7:06:e6:46:67:51:
66:ee:43:ae:87:e9:f5:db:be:11:30:42:39:be:07:aa:05:bb:
2a:9c:70:da:0a:f2:de:1e:42:be:4d:11:6e:05:bb:a2:09:40:
75:af:09:f5:15:a4:cd:d8:f0:39:0a:dc:7c:16:8c:22:ca:fb:
a0:43:09:22:5b:6f:bb:f1:14:8c:58:05:52:35:b3:a3:0f:45:
d4:42:32:6b:26:f7:7b:88:1c:a8:bb:48:aa:a6:66:2c:ce:9e:
55:71:91:38:a0:a6:18:69:c6:3a:7d:91:15:fe:fe:e5:f2:01:
43:80:7f:e8:99:3d:10:19:03:e5:b5:5e:9a:92:ce:7a:1a:cc:
8e:72:5d:1f:5a:09:98:1e:1f:59:a2:04:4c:9f:1f:51:6c:d2:
17:8d:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:39 2025 by rpki-client