Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: 4ALzwd0GJiDzzcxYQKRMoGXKderRHD/rmNaaehVzVWA=
Subject key identifier: 4B:B5:04:BB:CD:5E:B7:6E:43:03:67:85:84:68:B7:09:30:F6:AF:FD
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019769CEDF5B0FE6DB2F65ECC99F79F5FF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 08D5
Signing time: Fri 13 Jun 2025 15:00:54 +0000
Manifest this update: Fri 13 Jun 2025 15:00:54 +0000
Manifest next update: Sat 14 Jun 2025 15:00:54 +0000
Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: 0Pr1vN+toHC7ds+1XNZbynzMrUm19fyxVNKy2JJXc94=)
3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:df:5b:0f:e6:db:2f:65:ec:c9:9f:79:f5:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jun 13 15:00:54 2025 GMT
Not After : Jun 14 15:00:54 2025 GMT
Subject: CN=4bb504bbcd5eb76e430367858468b70930f6affd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:25:3f:a7:00:a2:69:7b:ac:76:8a:3b:cc:
0e:16:71:c3:74:f2:13:26:6c:70:28:ef:73:31:da:
ea:dd:84:4b:51:e0:7e:6c:93:04:16:96:56:63:fd:
85:c4:2e:c4:a0:1f:a3:05:4e:e3:9f:e7:7d:47:51:
5b:64:c8:c0:84:64:2f:8c:14:96:30:a5:06:16:03:
fe:ff:9e:ba:b3:76:d7:a6:17:c5:c7:72:9a:32:52:
b0:9d:19:3b:15:92:bf:a8:12:19:2d:02:71:e5:8b:
d7:40:bd:27:39:79:d2:a8:a1:5f:e1:1f:cf:56:58:
78:8a:45:e8:94:05:dc:b3:e3:e8:db:cd:e9:83:03:
10:c2:99:ba:ea:e6:62:c4:a7:4f:94:ce:13:9c:76:
cc:cd:e2:08:51:3b:56:18:5f:93:71:ca:a2:b7:12:
8b:73:09:33:ca:1d:70:24:5a:fb:b9:6a:d1:a5:2e:
6f:38:42:b6:2f:ca:02:bf:7b:11:77:2e:fd:cd:66:
0a:2d:e4:93:51:ae:e2:bb:d6:67:8a:bc:16:bd:3a:
41:3b:14:bd:f9:12:0b:71:23:e1:e6:97:ca:95:23:
c6:9c:56:16:f5:20:fb:0c:6d:39:63:84:19:5b:4f:
6c:2f:78:42:7c:41:b1:b1:76:74:f5:3a:bd:20:73:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B5:04:BB:CD:5E:B7:6E:43:03:67:85:84:68:B7:09:30:F6:AF:FD
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e3:ef:ac:26:bf:ef:27:05:a5:56:32:99:06:10:57:d0:f2:
c7:80:be:64:60:3b:08:19:79:07:5f:66:7c:f5:cf:db:d3:5d:
b6:c0:f0:c3:6f:23:7a:c0:6b:b6:d4:85:ca:2d:25:68:c0:49:
6c:2c:ec:5f:d9:b4:80:5e:20:a6:2c:e7:61:0d:71:af:bc:0d:
e5:0b:38:a1:1a:d6:e5:df:80:86:c3:60:09:84:53:43:a9:12:
06:20:a3:b8:89:53:52:af:5c:af:cc:af:07:97:bb:a2:a5:00:
ab:bc:a0:b6:24:91:17:bd:0d:0c:c2:8d:63:13:aa:7b:0b:e3:
08:a1:97:0b:73:07:af:50:a8:db:d2:b7:3d:d7:e1:dd:55:2d:
44:ef:25:36:d6:64:36:c3:e7:be:8d:d5:60:41:2d:48:26:61:
c8:5e:da:e2:4f:34:1d:80:35:33:6e:39:fe:c2:c8:9f:48:6e:
7a:bd:dc:47:ee:34:4c:4c:16:ab:da:e9:74:21:43:b9:e8:94:
a8:7b:89:71:df:1a:c5:d1:b2:cd:be:14:a5:22:58:64:3f:98:
b0:6a:7d:b7:71:76:38:ab:6d:a6:f2:0d:b6:2f:cd:35:6b:ea:
a1:6d:d2:52:f9:c5:f5:04:a2:e9:f4:67:74:98:be:d7:8a:f0:
5b:fb:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:41 2025 by rpki-client