Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: EImh0JfHUFTOipSqbS7vWG7sk5jwrkflK9UkZjjzox8=
Subject key identifier: 2B:FF:71:05:6F:BB:E0:58:F0:31:75:05:D1:76:AC:B6:50:14:67:F0
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 0197488D406CC558E1B3775B267E8870CA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 10BE
Signing time: Sat 07 Jun 2025 04:01:45 +0000
Manifest this update: Sat 07 Jun 2025 04:01:45 +0000
Manifest next update: Sun 08 Jun 2025 04:01:45 +0000
Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: Ez74/hMxz+C5dbBpI1x8AqqkUrrOarUbDflK2cKVBLI=)
2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:40:6c:c5:58:e1:b3:77:5b:26:7e:88:70:ca:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Jun 7 04:01:45 2025 GMT
Not After : Jun 8 04:01:45 2025 GMT
Subject: CN=2bff71056fbbe058f0317505d176acb6501467f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:2f:81:95:6f:df:e8:79:4d:20:9b:b7:7b:
cd:41:06:2e:eb:6a:d7:89:a7:f3:1a:6c:c7:33:3c:
bd:80:0d:5a:2f:31:56:61:0d:79:db:80:e2:fb:d2:
8d:b0:44:10:47:13:c8:e9:ee:92:9a:e7:43:dd:f4:
df:c8:d7:1d:7f:5e:f0:71:a2:86:07:2c:f2:04:50:
23:91:6b:02:62:62:70:03:88:ee:47:b1:d7:41:56:
a3:04:8f:57:54:55:1f:4a:1d:0c:0f:e2:1c:b8:03:
4d:7d:c8:1b:32:b8:79:b0:0e:97:d6:09:8e:44:35:
aa:36:98:b5:73:32:4c:3e:34:21:00:db:81:02:d2:
58:51:11:f7:bc:71:c4:09:36:32:95:19:7e:2a:05:
b4:4c:9e:f8:2f:a6:61:4d:c7:06:b7:c2:35:97:78:
d4:b8:b6:bb:b4:e9:48:3a:b1:34:95:2b:ed:61:f8:
04:4f:41:01:45:c9:5d:8c:86:6a:a5:84:60:71:cb:
2d:9f:b5:ca:bb:34:da:93:03:af:61:39:d1:c5:e2:
50:d3:2f:93:ae:7f:43:73:6c:38:88:fd:6d:db:88:
97:7e:2c:12:26:73:27:91:f0:c2:32:36:d6:d1:f7:
38:55:68:c8:52:8c:52:83:d0:38:53:6f:e2:d6:31:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FF:71:05:6F:BB:E0:58:F0:31:75:05:D1:76:AC:B6:50:14:67:F0
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9f:d0:d1:6d:9b:36:c0:26:25:58:15:5b:ac:ae:52:da:f4:
6f:54:3a:2a:2f:f8:ec:fc:83:20:ac:f7:d8:4b:6b:2d:d7:8a:
33:54:0e:d0:d1:a5:4c:87:13:2e:32:79:5a:2c:27:46:4d:29:
1f:09:82:3c:31:6f:d6:36:ee:4b:18:fe:3f:84:5c:be:f5:d6:
ef:95:0e:85:46:8f:f6:c1:1e:a2:bc:fb:8f:9a:fd:e0:d0:b4:
33:3f:f3:fa:e2:1c:0a:24:24:ff:a0:33:80:47:44:47:30:9e:
9b:ab:f2:6c:87:f9:79:bd:47:a0:3f:4d:15:a5:99:dc:5c:6f:
18:f2:85:90:9a:1e:fe:df:76:87:66:47:16:6e:3a:0b:cc:6c:
db:ea:76:94:7d:6f:a0:e1:c9:f0:f3:ae:4e:d6:d9:7a:33:4f:
2b:ed:a5:47:e0:ef:a2:76:51:6e:a4:a5:8d:ed:dc:19:30:bc:
5c:52:56:c4:b3:b6:43:58:27:9f:8e:86:1b:e8:7a:87:6d:b6:
84:c8:ac:52:d0:88:56:f9:15:6b:ff:8b:19:ed:59:61:12:81:
d6:ad:8b:6d:b8:6c:46:33:c3:3c:e0:7c:8e:76:ef:e2:f1:df:
41:b2:17:2d:33:64:a1:ec:49:b6:ef:f3:4f:5a:5c:4c:47:9b:
6a:1e:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:04 2025 by rpki-client