Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: LnFSnRsbHo+tMv8mErJ47ginzU1phhEeJrqAfu8E7xw=
Subject key identifier: 0E:73:96:8B:ED:1F:EB:43:A0:2F:51:4B:86:0E:8F:93:A1:B8:04:BF
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019768BC53A8EFB4050AA5CE961FB16B8958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 10:01:02 +0000
Manifest this update: Fri 13 Jun 2025 10:01:02 +0000
Manifest next update: Sat 14 Jun 2025 10:01:02 +0000
Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: Tu+2daek7iXLBJPpCRd4h7WCEXMWXxt+HKrz6Jr/7r0=)
2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:53:a8:ef:b4:05:0a:a5:ce:96:1f:b1:6b:89:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Jun 13 10:01:02 2025 GMT
Not After : Jun 14 10:01:02 2025 GMT
Subject: CN=0e73968bed1feb43a02f514b860e8f93a1b804bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:1d:42:f8:a0:8c:dc:d8:24:91:bb:30:be:
a9:8c:7e:d1:bd:c3:02:5c:c5:b6:cc:bf:f7:87:22:
07:ab:fc:b3:6b:61:fe:59:7f:b6:0a:18:ef:2c:6e:
b9:25:a3:a2:32:b3:89:fc:c6:83:b8:16:d6:39:5e:
b8:ba:25:37:17:2d:3f:b8:8e:d5:a6:c0:1a:12:ac:
31:de:68:54:7b:8e:79:17:0c:11:8d:5b:38:38:18:
49:6e:b9:da:db:27:ac:28:e0:04:95:0d:0f:6e:1d:
86:16:ea:7d:e2:7d:fe:56:47:59:0a:62:4e:c2:b5:
4c:20:ff:df:b2:73:bb:cd:20:c6:9c:17:60:d1:11:
a3:46:cd:d2:e2:e5:7e:d3:65:2c:15:41:8b:56:ad:
e5:42:90:d6:06:64:f1:4e:de:db:e0:65:a1:5b:39:
b6:f1:de:93:d1:f2:58:6d:54:d8:87:58:af:89:9b:
04:8a:eb:0f:ed:7b:0e:90:3c:c1:16:d1:b7:76:58:
7a:fb:6f:07:09:b1:17:41:f4:6c:0e:c4:16:22:a8:
30:5e:25:c3:eb:43:71:b9:5e:c2:6c:c5:80:11:34:
da:cf:92:43:e3:df:e3:24:8c:e5:82:13:a9:4a:44:
6a:9a:fe:d2:e6:32:ec:da:5a:7e:f4:fe:61:02:e0:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:73:96:8B:ED:1F:EB:43:A0:2F:51:4B:86:0E:8F:93:A1:B8:04:BF
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1f:6a:f0:c5:28:b2:bf:72:4f:3a:25:03:95:13:66:ca:60:
b3:fa:09:7f:f1:3f:6f:21:36:27:5a:9c:e1:88:00:29:b5:a3:
a8:19:e6:bc:29:6f:ac:12:df:83:e1:b4:38:28:c9:c4:39:2a:
07:1c:ab:24:78:a3:91:ef:b6:cd:8c:35:fb:28:1c:df:cf:4d:
b5:d2:f4:0e:4a:17:23:88:99:83:4b:a1:b3:b9:65:4c:47:9e:
85:c0:4a:08:65:f2:be:a5:5e:a4:fd:fe:92:bd:b6:69:5f:31:
d9:e6:78:ba:29:55:7f:a6:0d:01:50:a1:b6:80:d8:2e:df:8b:
04:55:2e:57:a1:bf:e3:97:6e:1d:07:2b:fb:c8:30:65:a4:93:
96:66:32:49:65:b0:f2:1a:8e:44:9b:08:4c:1c:6e:01:2a:6c:
6f:04:f2:65:26:32:9f:53:88:ae:04:4e:c2:3c:d6:51:9c:a7:
f2:c1:1f:8d:25:e6:cb:e9:89:ba:ec:25:f3:d2:80:fe:d6:6d:
f3:36:8e:a4:73:46:c1:c6:95:79:bc:19:de:dd:8e:4c:f2:33:
21:4f:8f:f9:eb:70:48:61:df:d4:9d:3b:39:0b:7b:d9:f1:10:
d3:07:b3:fe:3e:3c:9c:ff:c2:fc:b9:3c:8a:c1:6f:e5:ab:79:
df:a7:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:03 2025 by rpki-client