Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: zqEZiNv0DPQCv6+ZYRxBdosDWN2xb8L+P+mMQoEnp6U=
Subject key identifier: 64:B7:0A:8C:23:F9:6C:ED:D1:81:74:0D:13:7F:85:91:17:39:80:84
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 01976884FAF39CDD5FD356970B870EFAF8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 0E79
Signing time: Fri 13 Jun 2025 09:00:34 +0000
Manifest this update: Fri 13 Jun 2025 09:00:34 +0000
Manifest next update: Sat 14 Jun 2025 09:00:34 +0000
Files and hashes: 1: 1xdt--r7pLEFi9mXxf_8plnoO9U.roa (hash: uBNn/aL6HR9ZcIyFxzznkQDCk3CxgIi9L2wMoXNB7qk=)
2: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: 9TWLpxhN/7ErmE0CKGgaZqmFhudXtaaXl9HtMHFrK0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:fa:f3:9c:dd:5f:d3:56:97:0b:87:0e:fa:f8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Jun 13 09:00:34 2025 GMT
Not After : Jun 14 09:00:34 2025 GMT
Subject: CN=64b70a8c23f96cedd181740d137f859117398084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:53:41:a4:c1:9e:22:75:d1:47:37:c5:61:63:
5a:71:a9:ae:f9:27:73:5f:fa:f8:1b:8d:4f:b4:0a:
d9:f3:27:dc:8e:37:50:89:5d:73:5f:2d:db:b6:82:
f4:5f:ee:c5:c4:9f:c2:49:90:74:fe:91:33:1c:66:
23:a8:a2:90:bc:fc:1a:86:78:c6:c9:06:64:cb:94:
ac:42:c1:7d:6c:41:17:94:25:47:34:2a:f8:6e:cf:
46:70:ce:d1:06:bc:7e:23:5f:ca:fa:9e:51:cc:f6:
21:e4:6f:2d:09:ce:61:ac:2b:3f:e6:53:26:cf:34:
32:75:9f:4a:65:ba:e4:17:15:8d:e7:ae:da:80:e3:
0f:56:47:17:d6:40:0f:37:34:2c:2c:fa:1a:0b:c8:
20:c0:06:d8:57:b4:3c:ef:33:2c:1e:ec:6e:ce:c9:
94:cb:37:37:16:56:17:ce:4c:90:c7:d0:41:d1:20:
53:ca:39:5e:44:61:6e:97:ce:20:39:e0:24:5c:46:
32:9b:e5:b8:25:94:6a:56:31:65:20:aa:47:2b:f6:
1b:91:65:70:96:1f:60:aa:c2:f6:01:15:b2:b8:8a:
e9:53:88:70:40:1e:e3:f8:6b:b6:55:de:8a:e7:53:
15:40:12:cd:17:61:ad:fc:69:e8:a1:27:0f:63:38:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B7:0A:8C:23:F9:6C:ED:D1:81:74:0D:13:7F:85:91:17:39:80:84
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:96:98:fd:00:a5:45:fb:c2:ba:b0:5c:82:f6:38:34:94:f8:
86:e2:53:69:d8:b9:4a:e5:3c:07:32:08:8d:fa:b1:28:bf:6b:
a8:3e:d6:14:ef:33:29:a9:2f:0b:c1:d5:86:0e:2e:7d:fb:12:
67:16:8f:46:04:fb:63:e7:38:c1:20:b4:ee:04:24:c4:56:53:
75:91:a2:c9:53:2f:04:28:35:4f:a1:47:07:d3:f2:a4:db:7f:
89:f6:20:0e:67:35:e9:ed:82:2f:74:6f:69:9e:22:18:7a:d6:
db:a8:dc:18:a7:da:77:b5:22:d6:7b:bb:a2:c4:a2:36:84:09:
b3:30:8f:c8:b0:37:8d:8e:69:9c:a7:65:e4:2f:d0:9e:a9:b4:
6d:1b:88:68:f5:4c:11:40:12:54:21:f7:ca:c6:77:f3:24:89:
0c:b1:92:f1:27:8d:96:ab:e0:df:9d:de:bd:12:ce:90:bf:c5:
c0:25:99:36:80:2e:d3:e7:de:6b:86:49:2b:60:78:e9:82:64:
b2:08:c0:bf:62:75:17:3b:57:de:53:4d:07:0a:c4:6c:3d:80:
b2:04:04:c9:93:7d:77:1f:8e:94:b4:6d:c8:93:76:0d:0d:69:
5b:24:10:a8:5b:d4:8c:c1:34:3e:55:2f:f0:20:6e:25:01:fc:
d7:27:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:04 2025 by rpki-client