Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: UZ2CuVHJJFjh9lEWT82R4mLqv+3gYjQihZlljvp7yZo=
Subject key identifier: BE:F4:48:2D:F9:BD:77:E7:5E:84:68:9A:BE:E2:9A:0D:55:0E:D9:F5
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 019769CF1566090153F88E3156F08F704A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0AF0
Signing time: Fri 13 Jun 2025 15:01:08 +0000
Manifest this update: Fri 13 Jun 2025 15:01:08 +0000
Manifest next update: Sat 14 Jun 2025 15:01:08 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: L6aMF1CaLZVRzIP2gcdixxmncKlLvRu4/5u1aiSNWLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:15:66:09:01:53:f8:8e:31:56:f0:8f:70:4a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Jun 13 15:01:08 2025 GMT
Not After : Jun 14 15:01:08 2025 GMT
Subject: CN=bef4482df9bd77e75e84689abee29a0d550ed9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:81:98:82:7f:d0:b6:96:b6:69:ce:1c:93:
0d:cb:9f:64:18:dd:6c:4c:b6:de:b8:a4:3e:80:54:
61:cc:82:e2:6b:62:e4:3c:7b:f1:a9:60:6d:f5:af:
9f:1d:02:5e:8c:d3:0f:3d:ab:b1:88:bd:3f:f5:d4:
3f:61:cd:92:f7:9e:af:7c:54:20:e4:f6:38:bc:30:
86:92:b1:11:cd:ae:7d:6d:47:15:14:6f:25:9a:f6:
5f:9c:f8:f0:f0:43:bb:22:67:4b:51:7c:c0:80:ab:
f5:50:41:f7:db:5b:43:5f:7a:e1:8c:f7:34:37:8d:
d5:d8:5d:f9:7b:59:95:5b:92:e4:2c:a4:06:48:eb:
28:38:b5:0d:8f:ff:ec:b5:ef:f2:2c:ff:ad:e6:d4:
24:51:21:62:d8:f0:6f:55:78:64:be:c9:45:f6:b8:
1e:92:bd:84:ca:0a:dd:3c:4c:ae:d3:b4:43:5f:25:
8e:30:75:01:09:d6:be:81:d1:b1:70:09:53:17:18:
03:3a:85:af:4c:76:82:62:b9:97:a6:d5:98:76:05:
77:ac:5c:38:d1:ec:77:f5:f7:e9:c1:7b:46:a7:b6:
49:24:bc:69:50:4c:57:2f:7b:8f:18:7e:7e:06:5f:
d8:1a:e8:83:76:08:40:31:ce:8e:47:2e:eb:29:92:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:48:2D:F9:BD:77:E7:5E:84:68:9A:BE:E2:9A:0D:55:0E:D9:F5
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8d:21:b3:08:96:c8:b7:fb:a5:6a:a5:7f:63:6d:4c:bc:14:
ed:34:c4:d5:fe:1d:dc:2e:fc:49:f5:eb:79:8b:78:e7:02:2d:
e2:da:9f:7c:c9:a1:47:c2:76:82:7a:44:45:9b:00:15:85:f9:
9a:b5:a1:1a:22:a9:3a:d6:e4:2d:84:50:78:42:f8:43:cf:86:
79:d1:be:0e:29:e8:be:39:d7:76:02:f1:07:cd:e2:67:aa:4c:
94:5e:b3:b7:89:9a:59:47:fa:06:7a:83:92:09:bb:43:c2:c3:
4b:bd:a3:c2:44:be:ac:ae:76:1f:e6:d8:3e:87:e0:11:ac:7b:
df:c0:27:08:e9:aa:0f:09:5e:b8:f6:6f:89:96:cc:f5:2f:f8:
b2:42:3f:b6:1b:42:b0:d5:ef:e8:db:4e:94:d7:f5:da:d7:d2:
21:de:4f:d8:1a:c4:f2:1b:90:a6:63:c8:ef:6d:6a:d2:31:80:
4a:25:3a:90:85:83:6d:8c:4a:02:6e:62:25:5a:e0:e7:32:10:
88:55:57:7a:c0:8b:72:91:f8:37:34:45:da:6a:0e:c3:80:00:
6d:62:28:f1:c2:64:45:d3:9f:95:5d:5e:13:15:47:3c:14:f6:
2c:e8:76:1f:91:ba:42:8e:19:2a:ff:f8:a9:39:91:fa:1e:2b:
44:2a:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:33 2025 by rpki-client