Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: 0DDrv+HW3j/x/ZzCETeSCKxWP4yus02fKHYwS2Cygh4=
Subject key identifier: DC:0E:E7:C6:3A:9C:6D:B8:34:41:FB:E6:67:0C:59:68:95:4B:BE:D3
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 01976F9A1764FF2ADAE4DCE263518C964AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 0596
Signing time: Sat 14 Jun 2025 18:00:58 +0000
Manifest this update: Sat 14 Jun 2025 18:00:58 +0000
Manifest next update: Sun 15 Jun 2025 18:00:58 +0000
Files and hashes: 1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: EI8BYOKGuMEIXXhaNxiMsWhlms9w/8YIteZo1rRn+cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:17:64:ff:2a:da:e4:dc:e2:63:51:8c:96:4a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Jun 14 18:00:58 2025 GMT
Not After : Jun 15 18:00:58 2025 GMT
Subject: CN=dc0ee7c63a9c6db83441fbe6670c5968954bbed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:83:6d:a8:e7:0d:09:7e:be:b3:7a:94:9f:
0b:af:16:de:0a:69:86:e0:b2:a4:1d:6e:89:ba:9a:
fd:70:5e:3e:c8:d6:73:16:01:b6:af:98:d6:15:20:
ba:4f:59:cd:74:66:87:2a:81:ef:d6:3e:41:cc:26:
77:85:f9:3e:18:58:6d:59:46:39:c3:a3:94:b8:30:
35:a4:64:16:74:c3:10:e9:83:7c:9a:23:b4:c6:d4:
6c:04:08:53:cc:1c:67:9f:cb:19:6d:f6:08:60:89:
ff:eb:db:80:7e:eb:5d:2e:01:08:6c:8a:46:19:66:
f0:1f:0c:f2:28:5d:0f:e4:d8:aa:e4:c4:50:78:6d:
0c:12:34:bb:eb:28:f7:ff:a1:2d:95:75:5f:1b:cf:
26:ec:4d:d8:1a:95:ab:27:87:9a:a9:96:c0:cd:84:
f1:16:bc:e0:ac:62:4f:9b:96:1a:9a:1d:3f:06:74:
b9:3b:ee:57:7b:02:70:41:eb:e0:48:be:12:99:19:
01:87:22:72:1a:c7:43:f3:ef:b2:0b:4d:75:a6:53:
62:ef:3e:a8:9b:5d:3d:88:33:75:51:26:c1:24:c3:
80:bb:8f:57:2e:de:f3:d1:46:07:15:7d:63:5d:5a:
2a:1a:7c:05:23:57:1b:4d:61:a9:44:b9:40:34:0a:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0E:E7:C6:3A:9C:6D:B8:34:41:FB:E6:67:0C:59:68:95:4B:BE:D3
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cb:3c:99:a1:65:1c:9b:09:bf:8e:5f:7a:6f:7c:e0:5b:27:
16:e0:09:c5:40:07:8b:d8:c7:2d:d7:ce:02:e9:d1:db:05:4d:
8e:74:0e:71:c1:40:de:91:ce:c1:52:94:56:c0:05:38:1b:62:
31:7a:b3:fe:bc:a9:ae:fa:48:05:9e:33:7f:86:26:c6:8a:c5:
26:d3:27:0b:f9:59:45:36:38:2c:d5:6e:2c:27:0a:60:a9:9e:
5e:f2:6f:f2:b1:b0:ee:2a:06:e4:b1:39:cb:d2:bf:69:e2:e8:
c8:30:49:66:65:20:f0:82:ba:3f:ec:88:0d:ac:3e:5b:59:21:
be:b1:43:1b:ad:7c:57:3c:c0:bb:0a:3f:23:ee:34:07:69:ba:
2c:80:af:e6:cb:57:f3:2c:ab:06:c7:95:d1:aa:ae:a0:b5:d8:
ed:4a:ce:9c:a4:20:12:24:06:1b:9a:f8:11:b6:c7:fa:05:bb:
53:97:c9:17:bd:96:5c:43:fb:77:87:e9:9f:57:18:dc:52:48:
2c:d6:1c:d2:eb:a6:c7:68:dd:4f:53:1f:e6:55:4b:a5:1b:28:
63:7e:b4:ff:de:c4:ae:38:47:ae:46:c4:0b:c5:54:e9:3a:53:
a0:32:47:82:0b:c0:82:7c:cf:68:33:e8:4d:d9:19:66:93:94:
3f:49:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:30 2025 by rpki-client