Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: J1DJTQlCO8Wqfa+69K+ZV5+IVdZvOKtErUTEVNfE988=
Subject key identifier: 8D:DD:B1:CB:F4:9B:85:7B:D3:EE:AC:CD:C1:B0:53:BF:21:42:98:2C
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 01976961A3667C9A32ED27DD2CE1D3FEBAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 12B8
Signing time: Fri 13 Jun 2025 13:01:35 +0000
Manifest this update: Fri 13 Jun 2025 13:01:35 +0000
Manifest next update: Sat 14 Jun 2025 13:01:35 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: XIQfUD1n8lbRGbA72jroR3ngrlL9uJ71xtk1nn9ueag=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a3:66:7c:9a:32:ed:27:dd:2c:e1:d3:fe:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jun 13 13:01:35 2025 GMT
Not After : Jun 14 13:01:35 2025 GMT
Subject: CN=8dddb1cbf49b857bd3eeaccdc1b053bf2142982c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:10:4d:c9:9d:96:4c:7e:e2:54:8b:ab:f4:
c7:8f:07:fe:17:e8:9d:75:83:2a:8e:2a:20:da:34:
b8:36:76:f2:95:85:38:a1:a5:fb:12:ac:28:d3:a4:
20:c4:50:31:e0:55:13:94:e3:e0:ed:47:e5:46:b1:
df:4b:ad:fb:39:fc:b9:98:20:58:01:e9:b8:a9:a5:
a9:09:5f:26:3f:f3:0f:4c:26:58:6a:c2:da:f5:da:
fb:aa:16:5b:40:df:44:31:16:a8:96:f0:d6:cb:0c:
7e:91:9b:88:19:09:26:04:97:06:d2:51:34:bc:01:
1b:e0:ba:0d:6d:72:9e:26:16:64:8d:6f:49:dd:61:
ed:bc:0d:69:bd:d2:16:1e:d3:80:62:70:18:30:c9:
4a:84:43:f1:58:80:56:8c:1b:c4:c5:7e:d4:10:db:
9a:53:aa:88:a0:a7:f8:d0:b4:f5:fb:44:de:c5:f3:
a3:ff:74:38:97:17:e3:91:da:95:1d:e0:a7:40:83:
80:2f:c8:a0:3b:5e:59:5e:c3:7a:64:4e:49:a2:bf:
3e:8d:b0:57:5f:28:7b:3a:d6:62:ee:0a:6c:7c:07:
04:29:33:6d:e7:c0:e4:fe:89:15:c6:b9:05:20:0f:
f5:b9:30:f4:1e:a5:f1:9c:af:d7:e7:4c:3e:8f:72:
39:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:B1:CB:F4:9B:85:7B:D3:EE:AC:CD:C1:B0:53:BF:21:42:98:2C
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:b2:5c:09:b5:01:d2:c2:2b:62:9b:55:cf:8b:7c:57:5a:
fb:38:01:d2:1e:c1:a7:5d:6e:10:b4:0b:aa:3e:cf:d3:ce:13:
69:c3:61:71:0a:60:5c:55:ff:3e:30:de:d1:66:8c:f5:38:ab:
31:4f:72:32:ad:c3:65:e4:a6:da:c6:ba:41:5d:d3:1f:f8:7e:
d5:8e:34:6c:99:cc:24:ca:7f:32:60:b8:47:0c:71:a9:88:f1:
41:b9:c1:31:36:a8:37:3c:4b:f7:96:4a:a0:fd:ba:c3:d3:d1:
4c:46:73:c4:a1:a3:0b:1c:9b:f3:00:68:09:29:d4:77:b1:c0:
d7:40:26:4d:a0:20:1b:af:3b:d9:45:d8:20:63:68:8c:db:d6:
0d:44:e5:a6:11:e4:b4:51:ea:0f:84:9f:bd:ee:31:0b:c2:45:
08:f4:06:c2:fb:77:db:00:66:a1:f7:f0:28:05:88:cc:cd:cf:
68:a3:cb:1b:ad:c6:c8:ad:5c:55:c5:a8:52:a3:a7:6a:45:81:
90:5a:81:65:bb:78:15:d4:65:23:ff:25:cd:06:6e:47:9c:ac:
23:24:b1:07:85:b6:26:f6:50:f7:f6:bf:71:ac:dc:05:42:79:
b2:19:0b:6b:d4:eb:96:b1:e0:df:d0:af:5e:d2:dc:f0:57:c9:
19:5d:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:24 2025 by rpki-client