Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: VzvbqQoAl4Rgxv5YqES2Z++3MwZ4V+4syDuMCohvsEg=
Subject key identifier: 4D:6D:59:4E:9B:2F:1F:FD:6A:41:E6:80:E2:88:ED:7C:6D:F9:59:4A
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 0197771CACC75A2C384C00003BBB650D4894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 05:00:57 +0000
Manifest this update: Mon 16 Jun 2025 05:00:57 +0000
Manifest next update: Tue 17 Jun 2025 05:00:57 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: ARDOiW5V6F7Rf3yfdk7pjpKyyqdq3eT66L16KnbD+vc=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:ac:c7:5a:2c:38:4c:00:00:3b:bb:65:0d:48:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Jun 16 05:00:57 2025 GMT
Not After : Jun 17 05:00:57 2025 GMT
Subject: CN=4d6d594e9b2f1ffd6a41e680e288ed7c6df9594a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:18:cc:96:e0:de:84:b3:d3:94:f0:5e:11:
eb:86:30:24:de:ec:76:dc:bc:b4:c4:32:8b:6e:39:
cd:0a:9f:ab:7e:29:c3:14:26:c3:20:57:ec:e8:02:
57:d5:cd:ee:dc:98:85:51:a3:47:b2:40:59:58:e8:
62:a3:e8:45:82:81:b0:4f:a9:f4:8f:2b:b7:6d:2e:
74:5e:c4:c6:1c:e4:cc:f7:b9:eb:ec:c8:ed:11:6d:
32:3f:df:35:e2:58:38:71:4f:aa:30:32:f0:af:cc:
31:6a:c1:2c:9f:99:48:5f:f6:35:08:e7:65:6e:63:
43:b4:f6:88:6e:1f:19:2b:b1:ba:ba:9e:f4:ae:cc:
f9:75:75:5f:c8:d7:30:60:71:31:8e:fa:aa:49:dc:
98:b2:24:88:16:bd:ed:88:6d:09:ef:52:c8:63:b7:
ad:ea:ba:fd:ef:ba:0d:b5:f6:ce:b3:ad:4c:48:cf:
4d:69:af:7d:f8:b4:a8:c4:75:dc:03:86:85:ea:f8:
3b:19:56:3a:7d:4c:30:a3:b7:52:95:60:1f:1f:d4:
b9:81:5d:e4:16:4c:79:d7:79:83:62:da:74:42:99:
c9:f0:12:c0:1d:df:35:70:10:72:f2:a1:c0:39:e0:
e6:48:fc:2c:e0:36:91:57:70:4a:8c:d3:df:c1:79:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:59:4E:9B:2F:1F:FD:6A:41:E6:80:E2:88:ED:7C:6D:F9:59:4A
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:86:88:a3:1b:36:6d:37:b7:60:ee:ef:ae:b8:07:70:74:45:
b8:0d:87:a6:c2:69:3d:35:f7:bb:3f:93:cc:4d:d7:25:e3:bf:
02:ae:c1:e9:af:db:a2:9f:6e:bf:92:f2:be:75:12:a7:15:af:
70:ee:6c:5a:e9:f6:ab:84:ae:52:92:85:a2:46:8b:cc:12:c8:
d6:b3:5f:92:34:ee:33:a8:49:27:be:17:c1:fc:ff:8b:1a:2c:
95:71:e8:5e:a0:bf:56:f1:af:11:ac:43:e3:3e:43:d4:32:43:
1c:f5:ef:57:28:7c:ac:0f:83:07:eb:6a:a1:94:50:aa:e2:2c:
a6:93:9d:42:d9:7d:e5:3a:67:4c:4e:16:8c:52:f4:69:bb:61:
c5:fc:ec:c2:7e:ca:37:71:86:29:c2:82:2a:b6:ac:b6:65:96:
34:f0:bb:c2:ce:46:ac:61:c4:10:43:0e:a6:42:c0:27:cb:da:
24:34:13:1f:99:2e:d3:86:33:b6:cd:3d:f2:4b:17:1b:dd:f2:
fa:4c:4f:f2:0b:e6:5d:f9:7b:62:a5:18:6f:b4:85:0f:d8:fe:
42:44:89:5f:58:01:e7:ba:fd:d1:9a:43:68:b0:3e:6b:40:4b:
e4:46:2e:18:84:91:7d:27:44:72:de:fa:50:60:62:af:ae:6d:
c4:8f:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:41:57 2025 by rpki-client