Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: tOzxnmFmP1QsxaTAN6FxiEu/5XA3mbM+MZO9vf+2ICA=
Subject key identifier: 06:6E:A8:A7:36:24:CD:CC:52:93:56:EF:59:2A:C5:12:36:71:A4:17
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 01977D1E72D010A425DBD7630EA65B773E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 10BF
Signing time: Tue 17 Jun 2025 09:00:36 +0000
Manifest this update: Tue 17 Jun 2025 09:00:36 +0000
Manifest next update: Wed 18 Jun 2025 09:00:36 +0000
Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: fT4iFmi73ZWM4qnuLUIKx2Lp27RhIhhUCctA736N24E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:72:d0:10:a4:25:db:d7:63:0e:a6:5b:77:3e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Jun 17 09:00:36 2025 GMT
Not After : Jun 18 09:00:36 2025 GMT
Subject: CN=066ea8a73624cdcc529356ef592ac5123671a417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:d0:27:26:c5:01:99:d2:07:3d:27:38:05:
2d:d9:b6:3d:2a:61:84:51:76:0c:38:96:dd:4f:29:
a4:9d:c5:b4:10:bf:f2:a4:4d:d5:45:fe:51:ee:bf:
3d:ec:fb:d1:52:87:1c:f2:b5:6a:3a:e0:11:9f:c1:
bd:20:32:84:dd:94:3c:42:cc:5e:e7:56:b2:25:bd:
de:f6:a3:b5:69:26:13:13:34:ee:28:eb:c7:8f:55:
4e:74:5d:ee:ea:50:09:a5:7c:c5:cc:a8:67:4e:8a:
f4:c1:17:46:45:c9:0a:58:d5:92:28:af:dd:99:d9:
62:8b:c7:88:00:cc:5c:a8:d8:62:be:dd:ff:ae:62:
a2:27:ab:14:37:9b:5a:11:07:f4:17:4d:86:e8:66:
a4:a9:49:dd:d1:38:43:b7:f2:70:38:57:57:c8:54:
68:e8:72:8b:38:cf:c3:ec:b4:ed:ab:bf:f4:ef:ef:
59:b1:f6:8f:24:5e:d7:e3:ba:2e:1c:c9:88:e8:01:
6c:1d:49:84:7d:ad:8f:97:8e:40:5c:61:9f:91:af:
e2:2d:bf:c2:55:cf:64:fc:2c:ca:b2:91:09:7d:b0:
0e:d4:92:21:3f:a5:74:8c:10:02:eb:f5:41:4f:b4:
74:77:43:5b:44:ea:88:c3:87:ff:08:9b:53:c9:9f:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:A8:A7:36:24:CD:CC:52:93:56:EF:59:2A:C5:12:36:71:A4:17
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:30:67:75:a1:4b:42:3c:26:b7:fe:5a:62:ce:d0:ab:55:
2c:67:33:6a:1b:ce:5e:1d:eb:25:c3:62:40:47:e2:a5:3c:53:
d7:86:52:9b:18:cc:6f:cc:91:1c:6f:26:cb:f4:aa:fd:50:3f:
11:a2:c9:3e:29:c3:d5:cf:d8:27:89:4e:37:61:a9:ab:3d:24:
20:74:6c:b0:c3:4d:8b:8f:3f:a5:be:43:d0:5c:60:5d:c3:38:
0f:b7:5c:9a:46:30:48:47:e3:0b:e4:c3:95:6d:0a:d7:e5:f3:
70:e2:93:ec:85:23:15:68:2d:cb:9d:32:97:65:60:d1:54:c2:
11:f7:d0:ac:d6:1a:aa:8b:82:53:8b:ba:fc:0d:0b:c5:ba:f1:
e2:ab:aa:03:4a:1e:82:65:db:67:95:5a:b4:01:d1:9e:fd:65:
18:f1:cd:7e:13:06:a7:a3:98:89:96:32:eb:77:7c:12:19:7f:
7b:91:69:77:95:46:b8:36:c8:6c:ef:3b:9b:5a:da:41:aa:ab:
ff:04:23:ab:af:ab:0b:53:80:5d:f9:eb:17:02:da:c9:5d:39:
de:1b:67:81:ab:e6:82:98:f8:3a:1d:ca:45:c4:b4:b0:74:75:
29:a4:cb:e4:40:0a:16:79:f0:ef:f0:4b:5d:eb:9c:be:f8:3f:
22:ae:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:53:12 2025 by rpki-client