Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: /PJooXnyHP7IIyfu2uuv+9++2kgOFsLJO6/DAo48TNI=
Subject key identifier: 97:28:80:40:1F:5F:6A:35:41:60:83:3A:92:03:78:C1:10:A7:69:D0
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 019769612563A3988DA0111FBE5D1DB8C380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 05A4
Signing time: Fri 13 Jun 2025 13:01:03 +0000
Manifest this update: Fri 13 Jun 2025 13:01:03 +0000
Manifest next update: Sat 14 Jun 2025 13:01:03 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: AkQfqG+UVBpMn7BTIhALg5VCLW7Rzmne4jm/QACI820=)
2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:25:63:a3:98:8d:a0:11:1f:be:5d:1d:b8:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Jun 13 13:01:03 2025 GMT
Not After : Jun 14 13:01:03 2025 GMT
Subject: CN=972880401f5f6a354160833a920378c110a769d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:bf:fe:ba:f6:4a:71:98:d8:75:8f:b9:90:
94:3a:ca:35:a3:d3:a9:f0:c3:84:40:7d:1d:bf:33:
9c:f3:16:c5:78:63:ac:ab:62:c5:19:07:3d:27:e3:
6e:92:f5:b1:4e:32:f4:fb:7a:be:a8:36:d1:90:c7:
39:52:98:12:53:b2:51:85:67:f1:14:0e:78:85:91:
40:83:6a:37:0c:c1:49:28:a7:4e:91:72:29:bc:3f:
19:2d:5b:4d:b7:4b:38:bc:91:50:69:da:14:c2:77:
c5:2d:b8:97:4d:76:6b:d6:2d:08:2c:84:a3:17:78:
9a:2e:56:65:d1:bd:6a:d3:5c:6e:1c:32:95:7a:93:
62:3f:82:59:fd:ca:9f:a9:c6:d3:61:19:df:a6:b9:
95:75:64:82:c4:27:05:a7:95:99:d9:12:6f:6d:d1:
6c:80:92:6e:4e:cf:06:0b:cf:35:af:88:41:e9:c4:
cc:12:e3:9a:2d:34:e0:51:17:5f:d0:80:3d:c2:83:
31:bc:a1:53:7e:68:e0:b8:6d:85:6c:09:17:1e:8c:
db:6b:9d:a6:ca:69:c4:a7:35:b9:39:2a:c2:25:36:
ae:b3:d6:85:6b:04:4b:bd:0f:ec:0a:a2:8f:ef:b9:
f6:67:c9:dc:d9:31:78:0b:69:92:5c:54:6f:e8:ee:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:80:40:1F:5F:6A:35:41:60:83:3A:92:03:78:C1:10:A7:69:D0
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4e:4c:76:f5:bc:ab:e3:e8:f3:c6:da:f3:e8:b1:9a:a9:28:
b5:b0:d9:e1:5b:0b:9c:86:ed:8e:e5:73:75:23:22:87:88:d3:
f3:a9:0e:19:ea:71:7e:bd:b0:cb:0f:13:13:7d:5a:3f:ac:33:
69:ac:d0:72:09:c7:8e:1d:41:02:57:3f:ee:cc:68:9a:27:35:
c0:14:aa:8a:88:5b:cf:ce:ed:53:b2:1f:b7:4f:44:16:0c:8b:
eb:4e:d1:a4:03:c5:06:29:8c:32:6f:ac:f9:10:8b:0c:13:88:
a4:02:1e:82:ab:76:7e:83:b3:fd:cf:70:7a:b3:80:a3:53:a4:
3b:89:6d:22:8b:3e:89:44:ae:67:e1:73:0b:fb:7a:64:72:e5:
8e:12:93:69:09:12:9b:f7:dc:8f:b3:22:2f:9f:79:f6:37:ac:
85:ab:ba:ef:7b:ee:75:51:3b:9e:08:24:7c:33:63:a2:1d:68:
69:c7:63:ca:9b:61:06:4a:e3:ab:dc:2a:a7:7f:a3:93:2a:f7:
db:53:3a:27:95:18:51:73:62:5e:d4:45:02:33:72:05:67:2c:
61:76:f3:fb:64:45:22:56:a5:e7:12:c7:be:c2:4b:4d:c1:8e:
3b:1d:f2:61:79:57:ff:26:3c:d7:ac:35:db:c2:1d:f7:30:da:
6a:4e:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:13 2025 by rpki-client