Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
File: cdm6oCIZQu3-SzqaVwgpXARBboA.mft (raw, json)
Hash identifier: /AsmNkA1wjROAA7/k2fWBKc51QFCwqxUk1sBNNfS6/o=
Subject key identifier: 5F:A3:F9:C5:F7:35:7D:C5:86:01:66:15:56:07:FE:2C:7D:9E:79:70
Authority key identifier: 71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
Certificate issuer: /CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Certificate serial: 0197711B364155B0DBEA6B861D3D5A2CFC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 01:01:38 +0000
Manifest this update: Sun 15 Jun 2025 01:01:38 +0000
Manifest next update: Mon 16 Jun 2025 01:01:38 +0000
Files and hashes: 1: Uqk6ZpOTGE36LT5fcwe3jUUK8bs.roa (hash: 3ocr9qZ6ri2OW2BEWPNTcZs9jR00BhDPO+YzVSk3MLY=)
2: cdm6oCIZQu3-SzqaVwgpXARBboA.crl (hash: UGPzfD8wBBnSbR3jFhI/pmLDtwdesdfADfP096x68Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:36:41:55:b0:db:ea:6b:86:1d:3d:5a:2c:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Validity
Not Before: Jun 15 01:01:38 2025 GMT
Not After : Jun 16 01:01:38 2025 GMT
Subject: CN=5fa3f9c5f7357dc5860166155607fe2c7d9e7970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:bf:50:78:fb:86:a2:80:21:e9:3d:f5:f6:
27:5c:41:40:dc:a3:64:45:84:30:34:55:9f:c7:2d:
75:91:68:43:44:83:52:9a:5b:11:d5:a4:81:1e:b3:
b8:13:c1:4c:3b:1c:5e:c6:73:50:fe:72:39:21:64:
6d:33:1b:57:bb:d4:0a:98:71:5e:27:30:f0:3e:2f:
36:de:12:b7:b2:cf:c4:56:6b:af:af:2d:33:cc:9d:
9a:c7:0c:15:63:5a:94:18:d6:31:64:f5:9d:89:60:
78:82:d7:d0:7f:0c:cb:9a:19:c4:a8:9a:b5:5c:31:
0f:2c:24:c4:b3:41:3b:07:21:e8:55:76:7e:ea:2f:
4b:18:bc:74:03:7b:d7:78:61:67:ed:4e:b7:71:3a:
6c:36:ee:a5:77:e6:1c:fb:20:46:23:4e:10:ff:1b:
dc:cf:c2:dd:6c:53:65:05:8e:a9:21:50:01:c6:4f:
ec:28:7d:d6:f7:da:dc:f0:6e:ba:6e:2d:ba:4f:72:
ce:ef:17:86:d0:cd:b7:87:b4:3b:05:70:63:ca:b6:
3f:39:17:c3:77:0c:66:7f:96:86:f6:49:c8:cb:af:
53:99:c7:20:7a:79:53:1d:38:36:83:7a:51:c3:92:
f4:d0:c6:19:db:5a:5c:79:35:f7:92:09:6d:0b:77:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:F9:C5:F7:35:7D:C5:86:01:66:15:56:07:FE:2C:7D:9E:79:70
X509v3 Authority Key Identifier:
keyid:71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5f:bc:da:c0:a4:fd:51:63:9c:90:b0:6a:5c:0a:2c:1c:91:
5f:21:a6:9a:b1:2e:36:d2:39:6d:77:8f:17:7a:93:9a:c7:c0:
ef:b1:85:b6:6c:1a:4e:2d:28:0e:26:78:18:19:7b:b8:a4:20:
18:f9:77:cb:c1:28:4b:cd:62:9d:4b:ab:95:c7:e0:0a:15:39:
26:da:fc:b7:86:2c:5a:01:10:ed:40:9c:c8:3e:f0:46:90:77:
7d:5c:70:f4:68:7f:4a:90:b5:ca:9e:07:de:09:be:8c:16:33:
9e:e6:d1:04:14:68:ee:cc:5a:a4:93:8d:20:94:d9:1f:fd:8b:
c5:e3:5b:ae:aa:54:e9:af:62:87:0f:2c:8e:12:69:91:bf:b3:
fe:6e:22:0b:0a:41:52:84:be:e1:87:33:8a:97:dc:7a:c3:86:
7c:0d:9c:4f:d1:ce:6f:bb:6c:33:95:23:8f:e3:f1:8a:17:59:
0d:0f:ed:88:89:e9:b1:fc:81:68:f5:dc:74:94:fb:14:df:43:
ed:25:fb:c6:4b:1a:3b:11:04:4e:6c:65:7d:d2:27:c6:b1:77:
4a:35:79:ca:d8:49:5d:c3:fb:e1:89:f1:ac:69:52:87:dd:ab:
99:ee:b9:73:55:fd:d8:d1:3e:30:20:a3:32:bd:a3:e8:d5:f4:
5d:10:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:48 2025 by rpki-client