Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
File: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json)
Hash identifier: jKfm9NwIuOQ9bjFQ2gSKrpxMpWyDnYx4b8F05v6+GKo=
Subject key identifier: 89:66:D0:14:5D:B0:D4:6D:CC:CF:75:CC:21:96:9B:7D:90:10:0F:7A
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 01976F62D5AAD63E06DFA0F460D7723E1ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
Manifest number: 055B
Signing time: Sat 14 Jun 2025 17:00:37 +0000
Manifest this update: Sat 14 Jun 2025 17:00:37 +0000
Manifest next update: Sun 15 Jun 2025 17:00:37 +0000
Files and hashes: 1: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: kOaX0Ag8GhHerBTlorhhzQ8juyzuCHc82KXVnACvllA=)
2: gf0Xy6qbBLzQzsLjIlFfh_7JZjk.roa (hash: Ah/uhPrNkgzcI+es99gluPPaRScN93x4JTQmt+pb9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:d5:aa:d6:3e:06:df:a0:f4:60:d7:72:3e:1e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: Jun 14 17:00:37 2025 GMT
Not After : Jun 15 17:00:37 2025 GMT
Subject: CN=8966d0145db0d46dcccf75cc21969b7d90100f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:ce:26:b6:87:a4:90:91:07:56:ff:06:99:
6e:73:aa:a6:e8:b3:b9:8d:58:79:2d:fc:9d:a1:da:
ba:a0:7c:02:a6:f2:82:da:8b:55:8c:4a:96:a8:29:
02:9a:42:be:4c:af:aa:c1:fc:26:cc:60:33:42:73:
ee:72:46:7d:0c:54:0b:92:d1:a9:83:ac:b4:42:61:
de:c7:c6:03:98:d6:d2:c0:14:6c:d6:0d:db:05:a9:
2e:37:5f:48:6d:d5:10:e4:e5:f5:14:b2:26:7f:0a:
8e:61:bb:9c:f0:27:ad:0b:8a:0f:7d:6a:66:e1:e5:
1b:52:d6:a7:34:b7:6b:a1:3f:29:0a:5d:2c:3b:84:
de:e8:d7:e6:82:d0:f2:43:3a:82:3f:35:6d:72:3b:
0b:35:72:1f:47:9d:61:93:ab:cd:37:4c:b4:04:0d:
56:9c:a6:ea:1d:60:0e:3e:c6:4e:a5:0c:45:b6:8b:
94:b2:8a:e9:a9:1e:23:29:9f:fb:e0:fc:52:1b:65:
fb:2d:55:c3:b5:16:f9:4d:c6:7e:d5:ad:d0:da:7d:
92:cb:6c:24:bd:67:f8:50:58:50:6a:e2:7d:48:ec:
fd:9c:51:98:22:28:89:7b:1f:fb:2a:5c:ee:74:e4:
ac:dc:4f:f8:6e:21:76:47:f0:33:52:aa:22:27:cc:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:D0:14:5D:B0:D4:6D:CC:CF:75:CC:21:96:9B:7D:90:10:0F:7A
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fc:37:bc:14:aa:7a:ce:b3:7a:d0:ca:ba:78:fa:42:21:5c:
e4:dd:1f:4a:79:b5:0b:5c:8e:33:e9:b5:19:83:b8:9f:bf:3d:
4f:63:13:10:64:65:dc:35:f2:52:8f:e7:1c:69:a0:89:05:83:
12:40:0c:6f:d5:1d:03:93:a2:76:25:32:9a:44:e4:b3:f8:71:
a0:a7:fb:47:f3:66:c1:06:2e:d2:c4:aa:ea:43:85:30:5b:bb:
60:eb:a1:3d:f8:98:b6:4c:50:0c:b4:33:97:09:42:f7:9d:85:
69:3b:08:3f:6a:3a:87:0d:b9:cd:eb:c6:45:a6:7e:60:e8:a2:
01:ca:dd:fa:bf:69:26:9f:7c:1e:57:ee:54:0f:5c:1c:5b:96:
4e:be:6b:02:fc:dc:7d:f6:c4:34:62:04:53:04:f5:de:df:b3:
93:45:b9:f3:f3:00:a6:29:ca:e6:ed:82:a3:81:7c:71:ab:e1:
bc:04:85:d3:d5:a6:11:85:ab:e7:11:d3:f6:28:37:92:ed:0a:
11:a9:5b:cc:52:27:21:6b:03:d8:ef:b4:c3:a2:23:69:82:b8:
58:39:c4:86:14:2d:84:d7:57:df:2e:90:0f:60:2e:ac:08:4a:
13:42:3a:a5:a6:53:c6:e4:f9:ea:52:84:43:63:40:2b:6e:3d:
2d:07:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:48 2025 by rpki-client