Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: ieFVOCHp0dIt6EgoC4gyg+5BcmvoPEZt9mPRnUSBhJo=
Subject key identifier: 15:5E:7F:94:41:E5:D2:85:9D:91:CE:72:04:B8:B8:37:EF:DA:EA:C3
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 01978C234D12FFAAA944A8E3B305F2D4D99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 0225
Signing time: Fri 20 Jun 2025 07:00:13 +0000
Manifest this update: Fri 20 Jun 2025 07:00:13 +0000
Manifest next update: Sat 21 Jun 2025 07:00:13 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: xzq7HfBFg4YZ9Vni5MGc867X52P4MQUeXjqIe+RP0GI=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:23:4d:12:ff:aa:a9:44:a8:e3:b3:05:f2:d4:d9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Jun 20 07:00:13 2025 GMT
Not After : Jun 21 07:00:13 2025 GMT
Subject: CN=155e7f9441e5d2859d91ce7204b8b837efdaeac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:39:36:96:62:a1:14:69:30:d0:b8:13:9b:
d7:14:aa:63:82:21:78:d7:60:54:b6:6f:e3:0b:12:
50:c0:96:82:bb:01:14:68:6c:91:01:c5:d5:94:40:
44:3e:0e:8c:e3:1e:b3:ae:da:3c:84:b1:a0:61:40:
00:b1:e0:69:b8:17:13:bf:b3:3e:2a:b9:0b:03:9d:
b4:aa:3c:ff:14:52:2e:fa:c6:0a:3b:07:31:89:8b:
dc:7d:5c:59:88:76:02:19:1b:f1:a7:1e:6f:37:39:
9a:79:93:47:8a:db:f2:23:11:36:8f:2f:37:0d:7c:
8a:b9:76:9a:b5:cc:5a:b9:5a:53:f6:2b:df:c6:6d:
ab:40:d6:18:0f:64:4f:73:4e:a4:3a:ec:dd:c2:ec:
dd:be:d8:5d:36:f7:d1:32:07:4a:96:93:d0:60:e9:
98:98:42:d8:5d:6a:7a:01:e2:91:32:0c:39:8c:4d:
1d:bc:e0:a3:1e:5e:a9:a7:97:2b:bf:9c:06:77:c6:
54:be:18:c6:22:7f:e8:a5:94:93:13:9b:32:4c:28:
72:5b:26:1e:f6:40:b6:14:61:32:c7:19:76:a1:5c:
b7:22:34:72:09:8d:ee:a1:54:d5:b2:a9:6d:54:4d:
d4:2a:2f:f7:5f:ce:1a:66:46:96:f6:0c:bf:6d:d4:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:7F:94:41:E5:D2:85:9D:91:CE:72:04:B8:B8:37:EF:DA:EA:C3
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ad:5a:75:38:e7:07:6a:8b:e7:18:da:26:a6:63:d4:ee:09:
a4:83:7e:82:09:e1:68:7c:a8:51:89:b3:55:8b:04:1f:d6:b4:
f1:e0:dc:53:cd:a0:6d:e8:5d:02:71:5a:54:41:46:f0:13:54:
56:ba:ca:4e:b6:5b:2e:c2:90:e4:66:0f:79:b7:68:20:82:04:
39:51:24:52:b5:db:21:0e:b6:14:65:3f:f5:c4:a4:92:5d:2d:
80:9e:87:42:4c:c8:d9:72:7c:38:0e:67:c6:0a:3c:08:fe:34:
f6:67:6d:02:04:85:0d:4c:c8:a1:79:a1:cf:0a:32:60:b2:0b:
2f:d6:d2:8d:d3:a3:46:a5:c5:cb:d1:0a:57:5c:4b:d4:9a:fa:
13:d8:03:08:da:1a:06:12:5e:c8:72:c7:0a:21:74:87:54:bd:
08:ad:44:27:02:f8:8f:87:a2:12:75:c1:ad:ca:ac:95:8e:24:
15:f2:87:0a:7f:4c:db:4b:2f:da:87:68:cc:c0:02:57:ed:d3:
3d:07:c1:75:5d:1e:5a:2b:21:6e:45:c2:2a:c7:24:0b:db:62:
e5:ee:79:ed:6e:e7:f6:79:22:f9:da:46:c5:5e:8b:82:03:e3:
db:b8:25:79:8e:52:80:71:45:de:d4:c2:f9:f0:c5:1b:6e:64:
29:15:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:48:46 2025 by rpki-client