Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: GupJK70PqVk4cmAQFNxQeLX/SGLyeYr18gA5iE3Ia+c=
Subject key identifier: 82:46:A6:21:C7:D2:9F:38:26:60:E6:16:23:A3:F9:84:84:51:39:D5
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 0197782ED9843D41CD98ECD473F0063E47DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 129B
Signing time: Mon 16 Jun 2025 10:00:25 +0000
Manifest this update: Mon 16 Jun 2025 10:00:25 +0000
Manifest next update: Tue 17 Jun 2025 10:00:25 +0000
Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: GlYF8Z780q7mkqX5dNOJ/O6IiBIKwMVy8d1s5uKEkEQ=)
7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:d9:84:3d:41:cd:98:ec:d4:73:f0:06:3e:47:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jun 16 10:00:25 2025 GMT
Not After : Jun 17 10:00:25 2025 GMT
Subject: CN=8246a621c7d29f382660e61623a3f984845139d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:c5:76:8b:a1:13:e5:a4:37:84:ee:7c:eb:
5c:e8:16:46:17:66:d7:23:18:4d:3c:9d:b1:06:ef:
0b:b8:7e:d9:d0:90:6e:dd:ec:2b:42:04:4d:8a:a1:
08:25:27:d7:a2:99:40:a2:ce:35:3e:ac:9f:cb:db:
cb:d2:cc:86:4e:3c:8f:83:96:4c:db:08:ab:e9:8e:
7e:ee:71:4b:25:80:58:7e:b0:14:a1:7f:84:90:fc:
a7:37:37:26:fb:0b:a0:00:6d:70:6f:c8:0b:e7:ba:
c0:2b:8f:eb:dc:ef:e7:96:60:b2:a4:0b:2d:40:c9:
91:b7:82:d0:48:32:9d:00:3e:ed:a5:b4:31:36:2a:
99:e8:f6:19:47:54:fd:cc:12:ab:f1:8a:4e:62:d0:
8c:b6:58:35:2d:1d:9f:e3:a5:28:39:9f:0c:d6:91:
27:ab:3b:a9:c2:2f:10:10:48:79:e9:25:49:03:71:
07:72:0e:93:4f:27:84:10:91:d2:5b:3b:5d:81:f0:
cd:b1:cc:cb:45:74:14:4d:d3:f5:29:b5:45:5b:f9:
59:55:ad:b0:e7:dd:b3:6b:bb:03:65:08:69:45:22:
72:2f:4d:75:7e:b4:89:3e:43:8e:4f:0f:93:c7:5f:
d3:03:3e:a8:7f:08:6f:93:15:9b:1e:9c:ae:0d:03:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:46:A6:21:C7:D2:9F:38:26:60:E6:16:23:A3:F9:84:84:51:39:D5
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:40:96:e4:a1:89:97:67:d4:aa:de:62:99:9b:69:8c:81:f7:
fe:98:2d:8a:34:f6:da:3c:21:99:2c:b1:90:ef:7d:cc:b3:24:
32:38:17:f9:68:76:e8:99:8b:11:3c:c3:30:5a:da:2b:f2:15:
7b:bd:26:16:de:c5:ae:6f:c7:fb:e4:69:b0:d8:ba:e6:ac:93:
8e:59:0c:ed:ce:f1:4c:ff:f2:ba:04:b5:be:85:ba:7a:01:1f:
a0:81:26:fe:0f:1d:1b:f2:49:96:7d:f4:6c:2c:d5:2a:35:cd:
37:69:c7:ab:4e:bf:76:9b:69:bd:e5:0c:ee:47:65:f3:a8:1f:
d4:1f:d1:75:8d:3f:a3:4a:a2:a3:59:a3:6f:20:03:b2:00:0a:
d4:37:b0:63:f1:86:58:fd:03:c4:40:d8:cf:7d:5d:02:a3:eb:
56:5f:6c:7e:56:38:5b:d2:01:d0:07:b8:87:92:b7:d4:49:23:
b2:39:c0:38:24:39:76:cb:2d:af:bd:ba:68:ee:2a:50:50:14:
19:d3:ed:0b:48:e2:2d:f6:ad:5d:b2:52:87:8f:90:3c:a8:2d:
8f:89:46:7e:4b:2f:c7:6a:64:a8:a2:df:5e:90:40:6d:8a:c6:
bc:9a:51:50:a4:0b:90:91:3d:15:84:c5:05:40:8c:19:22:4f:
5e:d5:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:23:29 2025 by rpki-client