Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: Xc1I0pwpQdBkXJnWrts+x2z4WO+Bj6Yq2V6LDEC+XlA=
Subject key identifier: C6:86:6A:81:B4:F5:67:4B:FC:CB:13:05:6B:33:C1:3D:C3:EE:A9:DE
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019832398642086030949C4572D084F64456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 15F6
Signing time: Tue 22 Jul 2025 13:01:27 +0000
Manifest this update: Tue 22 Jul 2025 13:01:27 +0000
Manifest next update: Wed 23 Jul 2025 13:01:27 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: Nf3de9o3PQQpxvAoFAgsK72l3J0YKiNFhHTAo7o26Kc=)
2: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (hash: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=)
3: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:39:86:42:08:60:30:94:9c:45:72:d0:84:f6:44:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jul 22 13:01:27 2025 GMT
Not After : Jul 23 13:01:27 2025 GMT
Subject: CN=c6866a81b4f5674bfccb13056b33c13dc3eea9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:35:44:aa:a5:a9:97:ea:1f:e5:de:81:68:
9e:1f:f1:04:ba:58:ea:e5:69:b3:8e:f4:dd:30:37:
a9:12:68:c6:1b:96:da:7d:41:3e:ff:14:d6:26:33:
cc:db:d4:b5:85:4f:29:ce:e4:30:b6:f3:f6:a6:6e:
95:24:fd:90:1c:fd:69:d5:f8:53:88:77:59:85:54:
86:35:bd:e3:a6:42:9a:a5:b8:66:49:86:1b:a0:39:
0c:3c:62:95:cb:b8:1c:b3:54:c3:c1:b3:34:c3:9f:
d7:fe:f7:4c:9e:bb:45:1a:e4:29:2b:84:cd:c1:ea:
ba:66:60:51:05:d4:26:05:36:bf:12:f5:1d:76:5e:
c5:67:58:65:97:ee:1a:5e:67:f6:64:0f:87:b4:a8:
6a:86:ce:39:ff:c8:8b:22:b5:40:e0:6c:cf:8b:56:
02:2c:b6:ac:6a:43:f6:1f:7f:44:16:46:d1:d4:56:
97:1a:17:48:08:d2:c3:64:0d:d4:12:6c:b6:5d:dd:
00:dc:cc:6d:9f:2d:99:8c:d8:fe:98:64:b2:e6:0b:
da:9d:14:d2:ea:79:b0:26:a7:b1:22:51:cf:33:61:
b6:79:f7:3b:f4:b6:4a:dc:15:06:42:f2:19:29:e0:
6a:08:b6:80:20:68:8b:bd:09:a4:78:94:e1:f2:6d:
90:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:86:6A:81:B4:F5:67:4B:FC:CB:13:05:6B:33:C1:3D:C3:EE:A9:DE
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:19:e7:01:45:41:63:3e:7f:92:f7:b9:2a:f2:b6:10:38:5e:
9e:53:ff:ed:b9:9c:79:4f:19:f7:da:d4:cf:5a:b1:85:47:53:
40:53:75:60:f6:d0:b5:71:4b:b7:0d:98:cb:b6:25:60:04:33:
e5:ac:23:85:8d:d1:57:3a:12:0f:9f:d7:f9:f7:79:70:78:cc:
88:07:34:99:fb:05:5e:e1:b8:db:1f:65:ba:d3:b2:b5:48:7c:
18:d1:11:5a:e2:2d:1e:c8:c5:20:36:d4:8e:1f:f0:f1:40:84:
c6:39:2e:15:3b:b0:1b:a2:56:8c:ee:aa:fa:65:63:36:7c:07:
8c:59:84:34:cf:db:8a:0a:3f:48:9e:75:ab:b6:94:94:43:6e:
0d:05:35:e2:3a:8b:67:8d:8c:51:11:c1:c2:2f:9d:8f:bb:c9:
89:cc:44:dc:ee:cd:67:6a:fd:74:79:09:07:9b:66:ae:73:ff:
45:14:f5:15:a5:0d:d9:4f:81:af:b1:2f:4c:fe:66:6b:58:6a:
e5:13:9b:e6:9f:96:fe:81:c0:37:6a:d0:2a:5c:c7:4e:07:5a:
d5:a6:13:33:d1:42:b9:2d:f4:be:56:e9:78:35:ee:17:f9:70:
94:e9:df:f9:d9:72:5c:d0:96:4c:6c:17:2b:5b:97:28:4c:d8:
24:98:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:31:18 2025 by rpki-client