Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: 0QTFCvZ+dZ0VvjkCrQOithmAuaPzULLmnrpPnAZ7iIA=
Subject key identifier: D1:F9:BD:5A:20:E9:05:58:B0:D0:29:47:FA:AF:6B:38:2E:4B:78:63
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 01976960A69A09C6955C7CA67B376FDFCD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 054D
Signing time: Fri 13 Jun 2025 13:00:31 +0000
Manifest this update: Fri 13 Jun 2025 13:00:31 +0000
Manifest next update: Sat 14 Jun 2025 13:00:31 +0000
Files and hashes: 1: 4vVSxg0KLKszb_U4S9rSdoaFOw8.roa (hash: RPAXRjtOt5jMNeEYJ4PrQAbbA73WZ8/bw4emEczQVts=)
2: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: e7ix+yq7yvR5oPDpcOCClXTNKL3TTRapepmPiuRj7i0=)
3: t3uXJVNYIcETNH2wbIt0kGmTa3E.roa (hash: TpjYWQB/dEWPF8i95tLxQWL3noXfiwIkXuk9Gm2aR3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:a6:9a:09:c6:95:5c:7c:a6:7b:37:6f:df:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Jun 13 13:00:31 2025 GMT
Not After : Jun 14 13:00:31 2025 GMT
Subject: CN=d1f9bd5a20e90558b0d02947faaf6b382e4b7863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:93:44:69:d6:30:39:5f:fb:90:9d:1c:22:
03:fb:bf:f3:ff:bf:37:12:d0:a5:a4:7c:cf:36:66:
54:02:db:00:8e:b8:93:5d:67:8b:ca:24:d4:fe:72:
36:0a:b4:8e:ef:62:fb:b5:5d:e3:5f:5c:aa:b0:df:
68:7d:00:5c:45:0c:90:df:bb:cc:06:4d:f9:f4:7d:
0a:b3:cc:8d:f4:cd:e0:3b:2b:70:e0:0c:3f:59:03:
a4:cd:4d:31:ca:2e:94:6a:79:a2:93:35:b4:fd:6e:
8c:0f:2d:76:98:a4:8a:c3:27:a7:72:30:df:74:3d:
77:ef:bd:e8:e6:97:d3:a9:9d:de:89:5a:14:23:b4:
ba:2b:f5:07:54:33:4c:25:73:e2:48:29:60:42:b4:
b1:8a:e6:86:5f:cf:1d:5a:15:3c:d9:ec:b9:14:12:
d4:b2:b6:05:b5:c1:05:74:12:d8:1b:fc:7d:71:3b:
36:c7:55:89:26:b1:05:7e:d2:d0:05:1b:2d:31:af:
11:e7:c8:4e:b9:77:ea:48:80:0b:f2:46:57:f7:84:
d2:f6:df:d2:b7:02:e0:02:ae:9a:c7:4e:98:e9:c7:
fa:ec:9c:bc:c5:b5:12:af:fe:b3:74:e8:85:43:83:
57:20:ea:26:96:f6:2e:83:da:ce:d1:76:22:d9:11:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F9:BD:5A:20:E9:05:58:B0:D0:29:47:FA:AF:6B:38:2E:4B:78:63
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ad:1c:40:d3:55:32:de:70:4c:12:a3:8e:71:ef:49:f5:21:
99:00:bf:84:1c:73:3e:59:4c:28:5a:4f:b8:70:1d:62:59:1e:
9a:12:1c:05:af:a6:e1:43:86:44:bb:e4:9b:08:e4:ea:36:50:
83:60:47:6b:87:5c:58:23:08:f4:17:30:e2:7c:43:be:7a:78:
be:34:32:7e:37:a3:29:bd:3b:ae:35:fd:1a:65:df:af:a8:e4:
24:8d:da:9e:49:96:99:39:06:21:51:1b:a3:6c:02:1e:8d:ce:
d4:11:3f:d5:b4:ce:55:4c:eb:b3:42:e6:a9:54:38:b8:cd:a9:
29:59:b2:cf:9b:40:16:85:30:dd:0d:4e:ae:f5:2c:90:b5:9d:
ab:d3:e6:f9:89:95:e0:eb:45:4c:cb:f7:7d:65:91:8c:24:d6:
5f:14:38:92:c1:fc:d8:e4:a2:b6:42:46:02:f3:e7:3e:f9:81:
06:40:81:1b:21:8d:f1:4e:9e:33:18:a5:c9:84:f0:5a:51:cd:
2e:ec:78:6a:98:33:3b:a3:b0:1e:d4:3f:0e:69:e2:ae:7b:c6:
e2:92:75:91:fa:15:d7:0d:9b:ef:43:48:05:7d:e9:a8:4c:21:
34:d5:6e:25:bb:68:54:8c:ab:41:2d:5c:7c:90:b1:3e:cf:ff:
7f:ca:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:29 2025 by rpki-client