Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: P6Hl/XsCJDGjOd7dTlaD5fL8Ox0EKZgwR3YCeA+9dHM=
Subject key identifier: C9:0C:BD:62:9F:A1:07:1C:52:B1:2D:3A:21:BB:4B:AB:E3:02:CB:75
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 019779E673A13A9A1A2BDF686409396F5AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 18:00:35 +0000
Manifest this update: Mon 16 Jun 2025 18:00:35 +0000
Manifest next update: Tue 17 Jun 2025 18:00:35 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: GVS6eJO94tx3/Nhn+kB+FkQisSAlN0xcvO81WSIot8Y=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:73:a1:3a:9a:1a:2b:df:68:64:09:39:6f:5a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jun 16 18:00:35 2025 GMT
Not After : Jun 17 18:00:35 2025 GMT
Subject: CN=c90cbd629fa1071c52b12d3a21bb4babe302cb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:d6:25:00:23:d4:dc:9f:93:0c:5a:1e:8a:
bb:8a:e5:b6:a3:b2:7a:26:0f:08:a5:cc:07:1e:08:
94:33:c6:1b:57:7e:61:7a:38:6a:2a:38:01:42:f0:
a9:e8:11:25:8e:0d:6f:85:49:15:fa:e8:08:32:76:
d7:81:6b:46:ce:af:c9:9a:84:c3:4d:46:e4:e2:3c:
bb:d3:a6:99:12:7d:a6:26:48:b0:2a:37:09:68:0d:
0c:f5:8b:95:77:65:b1:6e:8d:41:c7:4c:b3:4c:21:
69:7d:82:40:de:2c:da:dd:5b:f8:0a:c8:32:53:36:
48:c8:b7:0e:c1:0e:ba:ce:ad:11:de:4d:7e:e1:1f:
cb:f6:2c:56:d1:da:1b:77:34:5a:55:ef:fe:55:63:
1e:31:d0:8f:90:ec:c9:87:7d:d2:ee:a0:4e:23:97:
96:c3:c7:49:9c:41:39:6b:bb:91:d0:5a:eb:0f:97:
de:c5:76:01:85:35:4a:93:14:61:d2:c0:09:59:79:
de:38:44:7a:97:a6:3a:1c:72:4e:22:38:48:9e:e5:
3a:f0:b3:54:88:99:c2:11:7d:ad:50:79:7d:1d:19:
c5:bf:b2:66:1b:a8:d6:f3:9c:4f:b5:fc:90:0c:9f:
dd:df:79:31:55:c4:8f:8b:6f:69:96:b2:dc:fe:40:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:BD:62:9F:A1:07:1C:52:B1:2D:3A:21:BB:4B:AB:E3:02:CB:75
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1f:ce:14:a6:aa:c8:a0:55:00:4b:f2:b6:fa:24:6c:f9:e4:
60:54:36:89:9d:a3:6d:64:7d:f3:6f:0d:a2:f3:39:a6:d8:d1:
d0:82:b5:73:05:6d:ba:b5:1a:1c:d1:e8:b9:98:3b:4c:6c:5b:
cb:1a:ea:e2:d7:1f:e7:b4:8e:e3:62:a7:4b:4d:bf:4b:67:a2:
35:ed:2b:e5:52:13:8d:85:0f:64:8d:72:a4:0b:f8:5a:69:3f:
9c:b3:4b:7f:05:3f:31:9d:d1:e6:dd:bb:72:97:af:78:97:ba:
fa:86:ea:3b:d2:78:8d:9d:b4:7f:1b:a3:e8:7c:01:c8:f5:94:
3e:14:5c:95:a2:85:0c:42:16:4f:84:59:c9:31:25:95:14:a0:
d7:8a:98:55:47:45:69:27:2c:c9:e5:b5:65:9e:a6:9f:fa:d9:
07:34:98:cd:ef:95:36:6f:a0:cb:7d:67:d5:80:21:d0:56:5b:
e3:b7:17:76:7b:e1:50:2c:b5:d8:8d:f7:18:5e:b1:a9:4e:99:
fd:96:63:6d:c1:7b:43:ad:1e:4b:d1:27:d7:2e:55:1f:ef:6e:
c7:f6:87:d0:d3:85:95:be:ac:79:4a:a9:38:33:4c:cd:e4:a0:
f2:67:e8:fd:00:ca:fe:9e:90:ad:c3:e1:b0:43:ef:ca:61:c3:
6c:68:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:03:09 2025 by rpki-client