Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: tzFfOdrjy4R7s/DCq+ZS9XZAomG0sgM1kk24gPJ1Jew=
Subject key identifier: 8F:A9:C3:9C:75:23:08:1B:93:DC:12:4E:A6:09:0E:4C:F1:28:A3:23
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 0197711A1E62459B05470422274AB8E004AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 01:00:26 +0000
Manifest this update: Sun 15 Jun 2025 01:00:26 +0000
Manifest next update: Mon 16 Jun 2025 01:00:26 +0000
Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=)
2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: lNw8+k8QGpf4fqB6FjDlCJDGEssvAWZ4z1sXQDbv2YU=)
3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:1e:62:45:9b:05:47:04:22:27:4a:b8:e0:04:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Jun 15 01:00:26 2025 GMT
Not After : Jun 16 01:00:26 2025 GMT
Subject: CN=8fa9c39c7523081b93dc124ea6090e4cf128a323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:59:46:08:56:15:09:2d:6d:5a:b0:1e:a9:54:
71:9c:63:96:70:b8:ff:24:22:ba:02:91:8c:1b:bd:
1d:57:46:c2:ff:05:3e:b5:bb:f9:94:26:3f:a7:f9:
2d:7c:ae:da:4c:97:04:14:47:04:f7:56:07:6f:fb:
9e:8f:8c:e6:6c:06:68:fe:38:65:32:65:e8:75:21:
71:21:3b:61:9c:56:2c:0f:ea:a1:eb:73:46:20:79:
ba:f0:b9:4e:b7:5c:b8:e8:57:c0:83:93:48:16:0d:
17:18:5e:05:29:07:38:10:6a:3b:6f:a2:69:cf:4d:
e1:f9:a9:56:c5:dc:e8:ac:fb:68:a8:76:0a:c9:4b:
2f:7e:20:3f:03:01:96:d0:8b:14:cc:16:df:1e:9d:
eb:bf:93:10:20:36:a1:c0:90:96:f4:0e:fd:a0:9e:
8c:89:9a:5c:1a:18:4b:38:c4:66:3a:a6:81:bb:c6:
15:a2:40:82:16:1a:bc:8e:9a:cf:7f:29:38:7f:49:
31:3f:35:ed:f2:c2:01:84:46:2a:40:6f:64:7b:6e:
8a:bb:b4:f2:28:4f:a9:bc:58:98:02:2d:32:0f:f7:
1e:ed:37:78:4f:02:de:f7:9a:7e:c7:e9:25:73:5d:
ac:5a:b1:33:ed:b6:4b:ae:9c:8b:a7:9e:51:6f:06:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A9:C3:9C:75:23:08:1B:93:DC:12:4E:A6:09:0E:4C:F1:28:A3:23
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ba:71:78:c0:b7:78:c0:f6:ba:41:02:c4:6f:f0:63:57:93:
ac:76:e3:01:49:3e:98:5d:cd:d8:34:64:ee:07:a2:39:51:3a:
40:7f:fa:45:9b:f4:87:61:00:b6:01:b4:f4:74:93:0d:79:bc:
0d:1c:66:f0:e9:c9:5b:ca:0f:82:46:17:ea:ea:d4:1f:f8:a4:
5a:2e:c7:f8:c6:dd:6d:8e:fd:d0:05:b6:8d:5c:24:99:82:ec:
e3:50:06:83:c2:14:3d:bd:fd:12:27:4a:cb:09:6e:7f:f1:5f:
d1:5a:98:a6:40:62:a1:e8:9b:b8:e6:b7:38:3a:d9:7a:1d:93:
0b:7a:81:78:51:f4:b4:a4:58:53:68:37:bf:fd:ac:46:8f:48:
38:a8:2b:26:38:51:a9:7c:e0:11:8c:2c:a8:45:7e:5b:ef:ab:
35:48:6f:b2:ff:b8:de:d9:b7:65:45:ac:af:e5:bf:2e:ef:34:
02:d2:a5:b5:21:a6:6a:83:c8:a9:0e:e8:5f:f4:8d:1a:f4:d5:
c7:bb:39:16:09:b6:09:be:4f:ab:81:4a:74:30:21:03:aa:25:
8c:cf:16:b1:00:1b:8f:f8:23:07:cb:9c:45:16:ff:04:11:33:
f9:05:78:cf:2e:4d:9c:c2:66:61:3c:d2:c5:a4:1d:16:bb:7f:
b3:99:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:52 2025 by rpki-client