Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
File: Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft (raw, json)
Hash identifier: cJOhPvKCTpJ/qIYgnKoPZZ9KYZrR3UjPtkHQdV66cR4=
Subject key identifier: 85:46:46:C2:F3:63:E2:51:1D:4D:55:93:E6:D3:88:ED:4B:3B:69:EB
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 01978357334C0747177881D9CEEA81C57D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
Manifest number: 13E9
Signing time: Wed 18 Jun 2025 14:00:19 +0000
Manifest this update: Wed 18 Jun 2025 14:00:19 +0000
Manifest next update: Thu 19 Jun 2025 14:00:19 +0000
Files and hashes: 1: 1-KS-11GCop4jdIEBghE-M8_v_g8.roa (hash: EqC/3yl9y80XofTy0F138kTU+PwB4qz9tGO9qfDtpgk=)
2: 28Clr4Ex1l2uqo6qlmoWgDRx4JU.roa (hash: idGohMKsNgyo0RBS8sMY69MlW8nQfQuAaP7Q0HBe0uM=)
3: 3RrW5Yatg2PUvnJMq7_H-tuFmj8.roa (hash: 5AaD0wsj8bY2cs7Xy1+SAntuaiPPTR2j1GucGYtil+8=)
4: 6Mu0G5eGnDMdTKqwRVWTSuG8bsw.roa (hash: moIyQZi4wCVA13IscbWLzRltLBx1xw7w1x6HIQR/1Hg=)
5: Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl (hash: 5mhAqsdsNd09In2TZIUrZJzN4XAG9E27oixG0Fh1B8E=)
6: ZDWi8X9SmWmbAKCwE55Pm2H1s3Q.roa (hash: j4Bd1zsOhh9D77jUeZ1o5ZusSCW9cs9P4TtpELqNqCQ=)
7: nJT9Bh_tbP1He9594EppfoCQEts.roa (hash: EeLGem/zMOULX8JHQg+hYpRqNlikcSBKHqsuzrAaMZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:57:33:4c:07:47:17:78:81:d9:ce:ea:81:c5:7d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jun 18 14:00:19 2025 GMT
Not After : Jun 19 14:00:19 2025 GMT
Subject: CN=854646c2f363e2511d4d5593e6d388ed4b3b69eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:a2:a0:e1:50:bc:1b:f9:b8:e4:52:12:4a:
5b:92:cd:ac:34:d2:13:1e:c1:d4:3f:70:cb:dc:97:
38:1c:b1:50:a8:2a:6c:0e:2f:f0:3c:22:0c:3d:59:
85:2f:c8:f1:2b:8d:e4:b2:3f:e4:03:ab:b2:2b:16:
17:9f:f0:1e:96:09:11:73:39:b2:e6:64:8e:bf:38:
51:16:7b:28:66:c2:38:41:73:9b:6e:f7:c3:19:b5:
f8:6d:cc:e6:1c:21:df:d2:62:2a:53:e2:30:aa:a4:
e2:46:7e:91:dc:a9:4c:28:36:4a:65:e7:7a:be:ca:
4e:ef:63:d1:18:00:08:f3:af:f0:2b:81:07:28:98:
9a:97:b8:ca:c0:bc:9b:57:29:44:fc:50:f6:74:3d:
f5:41:ec:56:68:e8:d5:97:5b:f5:de:b7:f2:0f:e5:
c9:4e:a5:31:55:62:16:ae:c5:b5:d1:5a:58:74:9f:
45:a1:98:ec:11:91:d2:fd:aa:c5:ac:17:f0:07:c0:
e4:57:02:be:3b:ed:66:d5:f6:c3:00:7c:10:c7:08:
3d:b6:91:0d:e2:f7:51:48:e5:74:01:59:c7:a8:d6:
0f:75:47:c2:c0:2c:ff:9e:d8:5f:4c:4c:b9:e1:bc:
69:f6:86:2e:c1:c9:93:ff:07:3f:a4:07:ee:09:07:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:46:C2:F3:63:E2:51:1D:4D:55:93:E6:D3:88:ED:4B:3B:69:EB
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:3b:c7:fe:2e:36:fa:1e:55:26:32:a8:3c:4c:91:7d:91:
c7:8e:42:d6:9c:35:b8:11:02:51:b1:2b:ca:ee:1f:9a:98:3d:
9c:27:1c:aa:c7:95:39:4d:5f:a0:1c:17:00:71:68:b9:fb:15:
52:cc:a7:28:07:dc:49:e0:5f:68:87:e3:3c:3c:c9:5e:62:8c:
a9:88:73:7f:55:01:56:63:70:a2:94:4a:5a:f3:f6:45:f1:6a:
9f:9f:c0:ad:e5:20:3e:09:78:62:c1:b4:01:e4:39:ea:cc:71:
37:2b:cd:08:df:d9:0f:19:7f:bc:1a:c0:2f:dd:e2:2e:19:23:
70:fa:b9:bd:93:ae:e2:c8:49:6d:65:04:d0:c5:13:b8:92:a8:
d7:aa:11:12:23:45:17:73:e8:62:38:d2:03:58:94:dc:e1:5b:
48:d9:27:d3:d7:94:3c:9a:1b:86:cc:64:8b:99:06:9e:1a:7a:
08:82:ef:db:17:35:d6:3e:08:30:9a:d1:6f:ea:f4:e8:58:77:
bc:31:b9:73:c5:27:20:d0:06:d4:29:67:d9:ec:97:b1:7d:56:
0e:fc:0d:54:35:44:79:0b:62:6a:11:b1:d6:94:2a:3e:44:05:
2e:f3:43:6b:20:fa:57:82:b4:af:37:44:4a:0c:4b:e0:20:57:
8b:0d:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:07:26 2025 by rpki-client