Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: 6UI5KcicbOoW/nfBODi0cP+aVgzcmSou4EEB1y9P3TU=
Subject key identifier: 96:11:C4:5A:12:49:1C:18:E3:D1:06:4E:39:11:E7:11:FB:5F:13:9A
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 01976EF4EE80D90F17027AF75E41162420A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 15:00:34 +0000
Manifest this update: Sat 14 Jun 2025 15:00:34 +0000
Manifest next update: Sun 15 Jun 2025 15:00:34 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: XmG4ygRNBZsQtTkArA3JD7+Zoje1WkFi2KnDlvfesds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:ee:80:d9:0f:17:02:7a:f7:5e:41:16:24:20:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Jun 14 15:00:34 2025 GMT
Not After : Jun 15 15:00:34 2025 GMT
Subject: CN=9611c45a12491c18e3d1064e3911e711fb5f139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fb:d0:09:a7:18:16:3b:c2:64:3c:0e:58:44:
5f:69:08:cd:ab:59:28:fe:a9:25:2f:93:78:13:b9:
b4:3d:3a:f5:51:b3:29:3d:b6:57:0d:97:91:82:f0:
00:8c:28:ea:d4:81:81:22:ea:27:40:fb:14:d1:68:
5b:69:06:d7:ba:21:7d:83:92:03:44:b0:fd:92:50:
7c:e7:e9:32:63:fa:9c:00:a6:1e:5e:8f:8a:94:3f:
f9:bf:7d:f2:fe:2a:0e:44:ec:47:c9:35:a4:88:90:
77:07:33:08:81:c0:db:6f:21:c3:d3:42:4e:7c:64:
0a:c8:14:c6:7f:e2:eb:8c:86:37:ef:8a:da:0c:c4:
fa:ad:1f:a6:a2:fe:9a:da:b1:b6:07:b7:fc:d5:6d:
91:7f:0c:bc:46:9a:e8:7d:36:e6:cb:51:e4:c5:9c:
fa:a5:8a:14:1a:76:ce:34:11:dc:b8:75:e5:d4:99:
80:31:d0:98:19:d9:6c:cb:ff:e0:0b:49:c2:ce:b8:
7c:d5:f5:05:18:a0:46:be:6d:f5:e8:53:be:24:de:
30:31:5e:69:99:4a:21:06:09:23:34:53:d9:0d:05:
c2:06:10:fe:05:ab:a3:6a:cc:50:97:3a:45:2d:67:
48:5a:79:45:97:af:27:84:6e:8f:a3:bc:ec:a9:a0:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:C4:5A:12:49:1C:18:E3:D1:06:4E:39:11:E7:11:FB:5F:13:9A
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6a:6c:09:e2:bc:18:4d:d4:4c:70:0e:99:76:06:e9:13:91:
ae:5f:03:58:1a:b0:db:53:82:90:15:24:06:92:4b:72:76:aa:
30:88:ee:87:b3:35:a6:85:98:ab:1c:a5:ac:cd:a1:73:05:1e:
47:67:32:26:c8:2d:79:5f:93:8f:83:92:fb:2a:3b:fe:5f:c1:
b1:e3:5e:d4:83:2d:b8:e2:16:ef:81:f0:e5:7b:4a:52:7d:07:
a6:31:cc:2b:f9:a9:fb:73:20:b1:c6:4a:28:eb:c6:51:ea:43:
ab:a1:67:03:1c:50:c1:fe:27:4d:b6:e3:a9:52:11:fa:a6:8a:
03:e3:65:54:a1:6d:ec:46:00:82:c6:f1:8e:ba:5d:8d:3f:ea:
2f:82:5e:d0:7b:b1:27:db:19:b4:ff:20:f4:53:98:50:ca:15:
58:df:92:18:ed:7b:01:59:42:0c:1c:61:1c:47:f5:7b:3f:0b:
a7:f8:a7:1e:6a:3f:67:e6:9a:22:8f:ae:fd:b3:07:19:39:d0:
78:b4:dc:dd:be:a4:22:87:c8:c8:77:d3:36:ce:26:ba:96:37:
85:03:78:75:8b:8b:7b:76:a8:ef:64:ba:5d:ac:54:16:d6:f8:
56:6c:e4:07:b1:71:57:ce:c5:b4:96:9f:ac:41:81:5a:55:ae:
a3:00:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:42:37 2025 by rpki-client