Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier: 2krf65FxHxGGssSCblLBSQU8vs9uRU+tGFR7/KuIbWY=
Subject key identifier: 63:29:A7:23:FB:79:EA:2E:0F:87:38:FC:AE:7D:DA:50:6E:EC:19:7E
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 0197711A7381F6644A6217D7660FCCA5CE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number: 0CC2
Signing time: Sun 15 Jun 2025 01:00:48 +0000
Manifest this update: Sun 15 Jun 2025 01:00:48 +0000
Manifest next update: Mon 16 Jun 2025 01:00:48 +0000
Files and hashes: 1: RBq_sIlJapW_qBhhOYs3cfjmb6g.roa (hash: fg25CTdh4wWfSSlLDFZZPAEIB6IEQNMofjk6UtMoVYc=)
2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: NDnRb9Hv8Zj3DqF3Sb0uzVuEEPJdzlRGeAWDrJ2sty8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:73:81:f6:64:4a:62:17:d7:66:0f:cc:a5:ce:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Jun 15 01:00:48 2025 GMT
Not After : Jun 16 01:00:48 2025 GMT
Subject: CN=6329a723fb79ea2e0f8738fcae7dda506eec197e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:45:f5:26:c7:39:3a:fd:c2:cf:cc:df:48:
b0:8a:f4:c7:12:bc:cd:60:d4:66:16:78:6c:e2:8b:
c6:f9:d1:7d:17:cb:99:01:cd:5b:5f:27:a1:f8:69:
11:5b:51:46:53:2b:a0:59:7d:27:66:b1:6e:4a:12:
53:2a:b8:3e:2a:c6:b0:18:1a:de:81:94:34:6c:fb:
16:70:24:c1:d8:16:4a:a5:7a:35:8d:6f:2f:0f:c4:
b0:fd:24:36:8a:c4:d2:f7:ee:87:0f:52:7d:91:8d:
82:f7:76:24:61:d6:fe:b7:60:9a:25:b5:d2:9b:b3:
ec:fb:9c:e2:99:07:89:19:3d:5f:72:ba:83:eb:ac:
d2:93:a6:87:c8:7e:04:2c:cc:82:dd:2f:d9:80:20:
5d:d7:a1:d0:e5:5e:d3:25:ee:ac:cb:54:a6:72:62:
e3:5c:42:64:20:66:f0:26:a1:d0:28:b3:26:3d:d3:
cb:1b:84:3b:d4:f8:14:fe:19:1d:70:42:6d:bf:32:
ad:b9:81:1c:df:9c:8c:06:66:6d:15:68:ee:aa:78:
a8:8d:b5:0e:b8:19:9e:da:7e:87:6f:10:5d:87:a3:
23:ea:59:e5:1c:dd:43:e4:ea:39:9d:79:4a:90:f5:
3e:d4:cc:5e:e1:ff:79:13:54:eb:f1:3f:49:ac:28:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:A7:23:FB:79:EA:2E:0F:87:38:FC:AE:7D:DA:50:6E:EC:19:7E
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:76:6f:66:85:a4:75:4c:bf:e5:8f:99:ec:78:73:c5:f4:d2:
2a:e8:06:cb:a5:52:96:e0:14:26:80:63:9c:7a:c6:14:00:a3:
c2:2e:f2:c4:e5:2f:0b:66:09:fa:4c:d5:79:b4:2a:60:94:9c:
4c:83:bf:5e:cc:87:1f:6e:7b:b1:40:6b:68:bd:3c:b1:74:77:
c5:fe:ab:64:19:f8:8a:3e:d0:d6:53:e4:37:59:f6:d1:55:12:
58:80:6c:35:12:4c:bd:9f:0e:7d:a0:ee:dc:16:27:75:d3:45:
03:9a:22:88:b1:eb:1e:9c:b0:b4:41:81:49:96:93:c1:79:a1:
f9:f7:3b:7b:9c:07:fe:6d:1a:c7:66:8c:5a:7f:8f:f4:92:5a:
30:82:81:73:98:62:72:55:e5:58:19:3f:c6:4c:ee:d0:21:d1:
de:ea:d5:b7:28:c6:a9:10:d9:56:2c:8f:4f:8f:d0:3c:e5:06:
d6:27:ea:ba:67:92:c4:6e:fb:7a:b6:3a:7a:5d:df:2e:bf:f7:
e5:7f:00:e4:ad:f3:4d:97:d7:bf:fa:de:d6:71:ef:e5:f6:89:
a7:e7:a9:87:3a:4c:d2:27:58:d7:9c:5a:6c:bc:a7:9c:12:f4:
12:2e:fa:84:d7:be:92:92:2a:c6:c3:13:f5:e9:b1:df:69:21:
a7:f2:ac:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:08:06 2025 by rpki-client