Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: +qBtds1/jQeTCQRexjWc5FwFbb3f1TT4VqPu70Mavuk=
Subject key identifier: CC:A5:C8:FB:E5:EF:A5:A9:DA:69:B5:2B:A7:7F:1F:7F:20:B2:0D:61
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019784337CDE552D7D00554E074B7D19EE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 08DE
Signing time: Wed 18 Jun 2025 18:00:56 +0000
Manifest this update: Wed 18 Jun 2025 18:00:56 +0000
Manifest next update: Thu 19 Jun 2025 18:00:56 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: DZ24MOhePF6OHTI9JEakbv9XuiTckmAWDNe80YTF2fM=)
4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:33:7c:de:55:2d:7d:00:55:4e:07:4b:7d:19:ee:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Jun 18 18:00:56 2025 GMT
Not After : Jun 19 18:00:56 2025 GMT
Subject: CN=cca5c8fbe5efa5a9da69b52ba77f1f7f20b20d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:a7:ae:d2:ed:78:19:34:73:2a:80:d8:c6:
03:7b:1e:99:58:d3:42:cf:be:bd:59:20:10:0c:2b:
bc:ae:59:89:d0:29:d9:c0:e4:eb:ef:99:ea:c8:94:
2e:7f:1d:43:d9:14:23:b8:4c:d1:31:9b:ac:17:e6:
21:76:3f:0d:0c:8a:94:58:0a:b1:f0:df:34:a3:87:
6d:30:90:8e:0e:a7:b1:d9:0e:54:ce:19:7a:95:9c:
50:57:64:c8:6c:9e:e2:5c:cb:7a:71:67:a2:12:b0:
87:ac:a2:37:39:5a:fb:78:5b:57:a9:24:84:66:e6:
f2:c8:f5:23:8f:da:42:be:85:cb:dc:e6:98:b3:1a:
b8:bc:6c:72:3f:68:e2:59:cd:3b:9e:19:11:7b:6d:
70:9f:ed:cf:81:f4:8c:e3:bb:cf:1a:a3:c3:a5:18:
85:45:db:66:72:4a:10:cc:3e:fa:44:34:35:58:63:
48:a1:ee:b8:89:5b:ea:fb:2d:6e:9e:eb:41:e5:ea:
eb:e2:c0:25:ff:1b:ef:09:41:5e:92:a5:51:c1:03:
06:dc:eb:ee:70:cf:e9:6e:ad:0b:cb:7c:05:1d:7b:
39:ed:96:0d:50:09:a5:f8:de:ee:5c:f2:6f:d4:b5:
d1:ec:40:e7:75:1d:b5:b5:d8:d1:42:10:16:6c:f0:
a0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A5:C8:FB:E5:EF:A5:A9:DA:69:B5:2B:A7:7F:1F:7F:20:B2:0D:61
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e0:33:14:14:a9:67:3b:b5:70:6b:7e:21:f6:91:10:ac:d2:
61:9a:4b:e6:1d:41:29:93:ad:82:3f:6d:1c:23:4c:07:f8:24:
76:6f:39:82:ef:3c:17:16:9c:3a:18:07:48:4f:58:5e:53:6c:
7e:06:ed:92:b2:a9:96:f1:11:ce:cf:79:da:23:13:1d:00:d6:
f2:f1:df:d1:6f:f4:94:fe:32:3d:19:f8:c4:e4:82:4b:9c:0b:
e5:2c:63:06:66:15:af:7b:a2:d4:35:7e:45:4e:b6:d9:4e:c6:
36:ee:a0:18:4f:64:e5:af:52:46:76:fd:5a:55:66:d9:b2:ed:
88:ec:7f:cd:b4:51:6c:9f:01:87:01:c2:9c:01:1b:8d:a3:eb:
ab:28:5c:a5:ae:2b:89:c8:a2:fb:93:21:23:a1:f8:40:9c:ad:
71:b6:6b:57:30:c1:58:e9:67:e6:4f:37:f2:28:a7:24:76:9e:
ad:35:3a:7a:73:56:e5:b6:b0:b4:5d:dd:ad:76:6a:3d:dc:9f:
c6:c1:1c:46:34:21:28:f5:8e:87:d4:33:8a:1c:bd:26:f8:55:
a7:b5:f5:59:39:e0:a4:a6:41:ce:ba:52:72:3c:d6:42:42:74:
f0:5b:5a:a5:76:b3:ea:21:3c:8e:f7:e6:34:48:55:35:b3:a9:
de:a9:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:18:49 2025 by rpki-client