Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: cJNQNemu5CF2/YeFY1tOV940d0X/tL62W8CfnoUQ0Ag=
Subject key identifier: BB:E0:89:BC:49:E0:26:9D:3C:7F:7F:68:4B:AE:87:43:B5:8A:4A:30
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 01976BF483B568D7BD9D7CF71D8091A0CC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 1192
Signing time: Sat 14 Jun 2025 01:01:16 +0000
Manifest this update: Sat 14 Jun 2025 01:01:16 +0000
Manifest next update: Sun 15 Jun 2025 01:01:16 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: jmg12pNZWo2BcseMzrB/Y8XGrQVOuMUgZUQR44gQW0g=)
2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:83:b5:68:d7:bd:9d:7c:f7:1d:80:91:a0:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Jun 14 01:01:16 2025 GMT
Not After : Jun 15 01:01:16 2025 GMT
Subject: CN=bbe089bc49e0269d3c7f7f684bae8743b58a4a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:f2:dc:65:a2:55:bf:6a:a3:cd:6d:9d:92:
ee:0e:5b:ea:c9:65:6a:3c:dc:5e:cb:2a:a3:55:e3:
6d:a4:0b:57:e9:8a:a0:c2:81:ec:bf:dc:30:31:88:
87:b4:c6:f8:41:80:a3:c2:e0:1c:7b:24:9b:3a:7b:
1b:01:67:2f:5e:5f:3e:91:2b:4e:45:30:2b:7a:80:
c5:93:04:c2:b1:b1:f9:4f:6c:5b:f6:49:5e:bf:8b:
33:49:63:12:af:c0:82:cf:88:f0:dc:b4:b6:06:c2:
ba:5f:a7:f3:c2:24:f9:5c:eb:93:80:a0:4f:ca:cd:
de:46:3c:53:56:90:f8:a2:64:50:17:26:b2:65:04:
77:05:94:bb:9f:e1:7d:e4:18:22:30:77:e3:2c:51:
e9:f3:82:54:72:9c:d9:cc:79:41:f4:16:ff:44:d7:
cd:c7:d2:84:ca:8c:73:c2:ca:b4:cc:4f:23:45:a6:
db:32:26:b5:2f:72:6a:6d:04:91:bd:eb:fc:7f:e9:
60:66:91:e9:93:64:40:2e:3d:3b:65:de:76:dd:61:
6b:d5:f5:2a:82:43:10:ab:94:5a:6c:4d:7b:21:c9:
52:6c:b9:f4:66:bd:51:23:3f:c6:6c:19:01:9d:04:
4b:42:ec:c5:3e:18:af:93:97:0c:78:63:de:1f:01:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E0:89:BC:49:E0:26:9D:3C:7F:7F:68:4B:AE:87:43:B5:8A:4A:30
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:52:fe:f9:7a:00:77:b1:5b:f7:11:b6:64:af:bf:4b:b8:5b:
e4:5f:ed:6d:e6:3d:e2:10:dd:88:6d:39:af:bf:7f:33:33:6d:
2a:b9:4f:a9:97:3a:cd:63:cf:9a:4b:3d:d8:5c:d6:7b:b0:9e:
8a:48:0d:03:c4:53:b0:7d:8f:e5:e7:99:92:4c:69:1e:e2:fe:
77:51:b9:cc:ad:b0:df:3a:d1:10:28:ee:b8:eb:6f:b4:e0:e7:
c8:99:40:da:55:b3:a2:e5:bf:c5:54:e3:64:31:22:a9:16:44:
92:08:06:54:c4:6c:bf:fe:e1:26:0b:63:a3:9b:03:da:45:97:
60:b6:94:89:c8:27:14:37:0b:93:f5:d8:3a:05:a1:fa:4f:3a:
60:b6:a8:8f:9b:9a:b9:bf:1d:73:d2:43:f3:d3:63:db:78:03:
87:7a:48:1c:66:b6:4c:da:46:b1:18:8e:7f:35:32:df:19:a3:
d3:88:a3:19:e0:9a:46:d0:a1:1c:ab:ff:93:1d:bc:64:88:26:
27:cb:f1:f8:41:1a:f4:1d:23:f6:8b:d5:32:63:5e:c5:cc:23:
9e:97:6e:20:20:26:98:7a:f9:a3:3c:92:6f:ad:54:44:be:b6:
8f:28:04:3c:5a:12:b9:c2:c4:c5:a2:fb:74:0d:73:8e:99:a3:
d2:12:f6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:52 2025 by rpki-client