Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: grCIxMQ+haycADoMLHOjZw6LCkZ9Eqnn2BcziLfiJdA=
Subject key identifier: E6:D1:1F:19:A7:9A:80:F1:49:32:33:1E:D9:73:39:64:31:66:EB:9E
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 0197711A0924AE50ABEE7EA6A10C01059CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 0286
Signing time: Sun 15 Jun 2025 01:00:20 +0000
Manifest this update: Sun 15 Jun 2025 01:00:20 +0000
Manifest next update: Mon 16 Jun 2025 01:00:20 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: UEmXl85DhgbWsEd9XPai9AyORtk16DYNTxgkUW14PAw=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:09:24:ae:50:ab:ee:7e:a6:a1:0c:01:05:9c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Jun 15 01:00:20 2025 GMT
Not After : Jun 16 01:00:20 2025 GMT
Subject: CN=e6d11f19a79a80f14932331ed97339643166eb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:26:77:04:6c:e2:7c:8b:4e:a6:cf:7e:ab:
75:08:6a:04:84:54:1f:93:16:09:4b:76:82:0a:cc:
ac:f1:e6:10:10:df:45:ef:26:ad:b3:f7:10:c0:1e:
38:3e:77:39:fa:9b:d1:85:0f:2e:79:6a:a6:41:b5:
e4:70:63:10:c6:83:cf:fe:7a:22:5a:d7:fd:60:c6:
fc:26:05:4c:cf:86:77:eb:8a:69:b9:f4:79:27:0f:
c3:f0:56:01:61:80:61:9f:46:f5:52:9a:2e:1d:48:
25:6e:84:05:85:1f:b9:ec:aa:55:e4:14:2a:e3:45:
cb:1e:4c:2a:aa:9a:ec:c3:42:7b:de:32:11:fc:56:
ba:3c:34:af:53:5c:49:65:95:fe:f3:17:f2:2a:2d:
8a:b5:98:de:7c:11:67:14:78:fe:fc:a0:9e:f5:2f:
c5:f9:ba:a7:bc:33:fc:02:6e:eb:a1:fb:be:2b:ec:
f9:b9:cd:7c:1f:3c:64:24:00:76:09:0b:ee:e2:e4:
c2:06:dc:5e:de:c3:30:61:cd:d5:0a:0d:3c:5c:7c:
5b:54:85:d3:fb:bb:d8:8f:6b:59:b0:ff:f3:58:1c:
67:e9:5a:08:06:92:e7:14:60:89:1a:4b:3d:7c:9b:
7e:c1:c5:d8:bf:58:ef:23:ea:94:f8:c4:fe:86:3b:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D1:1F:19:A7:9A:80:F1:49:32:33:1E:D9:73:39:64:31:66:EB:9E
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f2:27:fc:93:1a:2c:fd:99:97:4c:25:e1:83:b6:36:48:dd:
32:f4:32:ff:6b:74:9e:6e:fd:e1:ba:bd:fc:42:57:ae:d0:e5:
f0:b4:8f:1c:24:d4:a8:fa:20:26:ff:90:dc:e5:e8:7e:51:56:
1c:ca:58:c2:fd:3b:95:05:77:74:8b:e7:43:57:83:60:0d:db:
ae:69:00:e6:8c:59:91:b4:17:17:11:64:0b:70:12:a5:94:a8:
0e:8a:ae:01:e3:fe:ee:b6:8c:62:a9:6c:a2:7f:70:8f:be:31:
c4:06:f5:31:e3:34:bb:a9:72:19:87:47:2a:aa:bb:c0:65:87:
b5:ad:ba:8d:3b:15:37:12:e0:cd:1b:2a:dc:2a:59:a2:0a:6c:
7b:42:35:0b:bd:db:d2:69:75:f7:aa:91:13:ba:98:34:b8:3a:
41:13:6f:fd:cb:e1:08:c8:98:1c:d2:ea:7d:4b:dc:29:c9:dd:
97:50:77:3d:d1:05:ab:03:af:ed:67:55:22:81:5a:22:ac:b5:
c9:11:36:4f:53:b1:61:7c:ab:a6:02:6b:c3:c9:53:74:da:c1:
9e:c9:12:30:a9:82:17:a2:6b:27:e8:6e:82:ca:c3:91:b4:04:
36:41:98:ba:e3:34:ff:f6:b6:da:1c:c1:bf:e8:7c:c8:e1:78:
05:f3:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:22:13 2025 by rpki-client