Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: heK6+tGRIr3iIJ025h8sTItcPTO3uPY0TDc95ZnZ0WU=
Subject key identifier: CF:FC:51:BE:3F:C5:E6:0B:84:C0:F5:FA:48:4B:54:57:45:F7:AB:09
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 01976BF3F9F8AF1DA96C04454F17A5F2BD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 0F51
Signing time: Sat 14 Jun 2025 01:00:40 +0000
Manifest this update: Sat 14 Jun 2025 01:00:40 +0000
Manifest next update: Sun 15 Jun 2025 01:00:40 +0000
Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: /iR7HauS4Q2FoiIIFGrHgQ18DrwzuRBoVUo5Y4BhzrM=)
2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f9:f8:af:1d:a9:6c:04:45:4f:17:a5:f2:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Jun 14 01:00:40 2025 GMT
Not After : Jun 15 01:00:40 2025 GMT
Subject: CN=cffc51be3fc5e60b84c0f5fa484b545745f7ab09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:30:9e:35:1c:ad:5a:fc:98:9a:cf:0f:67:
59:46:fc:63:bc:a3:c5:19:f2:e5:ba:10:33:80:d7:
5a:bb:d2:0f:81:d1:07:2a:03:d5:9e:90:56:7a:6c:
36:1d:6c:37:a7:d4:fe:85:9b:b1:0f:21:22:17:e4:
e4:7f:8d:43:e1:8f:36:e0:76:38:25:61:b4:82:b3:
b4:78:6d:10:f0:4f:24:dd:d2:a3:d9:99:63:a1:1e:
c6:a9:90:44:28:52:61:dd:82:31:e9:00:34:f2:93:
4f:9a:8e:c7:5d:67:4a:4a:08:69:51:3e:09:16:a7:
8b:fb:27:5e:b9:fe:fb:9e:79:6f:88:47:53:4b:c4:
8c:b0:49:bd:8c:68:75:b7:28:70:4d:b8:1d:bb:a5:
c7:a2:d4:a6:2c:f6:45:b0:9c:2a:eb:1c:f3:ba:fb:
a3:ba:c7:24:a3:26:6b:c0:88:97:d6:6d:2e:d8:12:
ba:e6:a4:ff:25:d1:f6:1b:77:a6:87:e8:88:55:e9:
c1:9f:c6:84:04:f6:c6:af:56:ef:53:b6:6e:a6:d0:
9b:17:a3:de:26:88:d1:3d:10:cc:21:3f:81:dc:14:
53:13:1d:d2:2f:02:bb:d8:7e:c6:49:94:fd:58:be:
6a:3f:f9:d7:53:ce:7e:7b:a8:4e:74:53:96:65:48:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:51:BE:3F:C5:E6:0B:84:C0:F5:FA:48:4B:54:57:45:F7:AB:09
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:5f:12:dd:71:d4:b4:b3:e8:c5:27:37:d6:35:3f:7b:67:
f1:b2:31:e9:70:67:50:60:45:2b:e5:5e:72:3f:25:05:b8:24:
1f:6c:70:90:75:59:a1:e8:b6:da:25:e5:90:45:c3:f1:c2:0c:
b7:d0:34:8c:85:63:8c:f5:62:f3:da:a6:f6:43:ec:f8:67:9c:
0a:c2:e2:46:f0:0b:bb:10:8e:d4:78:28:5a:a5:78:ab:80:c1:
3a:a2:22:ac:37:db:ed:44:a6:71:f9:2e:ca:41:b7:8d:45:b6:
fc:52:72:77:f5:1d:c7:55:48:2e:dd:a7:ae:e4:18:40:12:d1:
2c:70:72:6c:fc:ff:63:0d:f1:e6:a9:2c:a2:6a:8a:15:e0:ca:
53:f2:ae:dd:2a:a0:c4:de:2b:d2:4f:57:fb:77:4f:dd:c1:e4:
1a:ba:d4:c1:53:ef:0b:ed:b1:c1:76:28:7d:08:4c:63:bc:27:
83:38:be:13:38:c1:c0:92:09:db:4d:d0:2a:1a:08:e4:f8:79:
df:59:ed:c0:85:b6:05:9f:6e:16:98:79:37:65:fd:11:8a:98:
ad:17:4c:2a:56:5f:f1:3a:fb:85:01:9e:80:71:9e:31:28:75:
f0:cb:0c:5f:69:cb:09:3c:59:ec:ee:0b:91:3b:db:4e:3d:92:
26:e6:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:14 2025 by rpki-client