Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: J8WXGFxqtGQv6It6EXZRerESsFeWN/wLRKUeqXK2tek=
Subject key identifier: F8:0D:5E:F4:F0:7A:23:78:D2:52:7C:0D:AB:82:02:2E:09:44:F4:A2
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 01976D748AD7770CACB2FB9453F88C408447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 08:00:43 +0000
Manifest this update: Sat 14 Jun 2025 08:00:43 +0000
Manifest next update: Sun 15 Jun 2025 08:00:43 +0000
Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: M4jmn67AoNW4vjfglyQ9GILP0wD1ZEcJcYQmp5Lv2ew=)
2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:8a:d7:77:0c:ac:b2:fb:94:53:f8:8c:40:84:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Jun 14 08:00:43 2025 GMT
Not After : Jun 15 08:00:43 2025 GMT
Subject: CN=f80d5ef4f07a2378d2527c0dab82022e0944f4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:3e:dc:da:62:d2:53:3a:2b:d1:7a:e6:44:
55:83:25:55:70:a9:14:e7:26:9d:a9:9b:b6:75:09:
91:83:d5:82:9c:84:1e:d2:a6:8e:bb:6b:47:71:9e:
f0:09:f9:90:ca:3e:c6:10:04:6a:70:2e:3a:3c:57:
dc:2b:f3:06:42:8e:78:f6:a7:38:f4:35:5e:9c:8c:
e1:61:07:7e:f6:93:e9:5b:48:dc:44:96:81:95:84:
5d:5c:be:5f:84:e5:74:6f:fd:e1:e6:d5:80:e2:6e:
58:c9:cc:72:19:78:d6:bd:3d:af:9a:0f:4a:da:4c:
e5:e1:b3:19:61:c4:04:31:4b:48:7f:a5:2d:7a:2b:
fe:e6:12:f2:84:73:33:3d:6f:14:78:12:99:4a:da:
ee:23:e6:f7:ee:01:cf:73:74:ca:d9:8b:12:9c:c3:
c6:2b:d1:7f:b4:20:64:3a:b7:80:dc:eb:22:80:7c:
a8:5d:16:c5:bf:86:da:6b:af:8c:e8:f8:98:1b:3c:
58:2e:2c:c5:46:73:8d:bd:17:16:99:a3:22:a0:db:
87:67:58:fe:77:f6:0d:78:ed:d0:56:03:6f:37:2e:
10:97:e3:94:36:e9:51:f9:11:5e:12:58:95:65:47:
0c:0a:4e:e9:ae:ba:77:59:08:45:52:14:ab:85:9b:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0D:5E:F4:F0:7A:23:78:D2:52:7C:0D:AB:82:02:2E:09:44:F4:A2
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:78:b7:f0:d5:77:72:b1:af:7b:51:6c:23:c7:96:df:32:02:
10:7c:1c:85:d3:0c:82:59:9b:72:2f:fa:75:e6:91:fa:e2:13:
b9:ee:1f:84:0a:cb:3e:13:86:67:10:55:ed:c6:89:8c:bd:21:
3f:62:11:c5:a6:e8:16:47:d7:9e:c0:85:6a:28:12:6f:81:15:
2c:d9:f7:13:5b:ec:9f:d4:b0:7e:11:ec:86:2c:59:64:76:46:
88:6c:cd:43:53:00:4f:7a:65:a4:0f:04:3f:21:6c:7e:b8:23:
62:18:2f:11:d2:3b:59:54:4f:78:34:45:0a:ba:02:da:7e:31:
3f:22:70:9c:02:e8:4a:d7:3b:b7:a4:71:9c:32:65:6f:d6:89:
49:ae:ea:98:21:4f:f8:29:50:d2:a3:28:3d:10:ba:a1:dc:1c:
2c:25:92:03:76:88:42:69:19:a6:f8:30:ea:51:a0:c9:38:09:
cc:76:24:37:3e:c7:68:2c:23:a0:1a:db:6e:ee:ef:a3:f5:50:
9d:82:3b:37:e8:1c:25:d5:5d:32:8d:65:7e:7a:d3:36:c9:94:
f3:5c:26:dc:cb:2f:4c:ac:34:03:b9:6a:6d:f2:e5:54:6a:1a:
e1:78:68:7c:4a:87:06:2b:3b:e7:e6:5f:61:91:cf:d7:c6:07:
0e:16:12:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:38 2025 by rpki-client