Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: WTBcWADjhgN96ZbHeYRSMpON2mzWGnp8prgFO+u9BGo=
Subject key identifier: 79:8C:6B:BA:BC:7A:04:8E:AB:EA:CF:C4:DB:89:89:AF:47:F3:6D:23
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 01974A0CDF6BED508367CA482FA636462CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 02E2
Signing time: Sat 07 Jun 2025 11:00:46 +0000
Manifest this update: Sat 07 Jun 2025 11:00:46 +0000
Manifest next update: Sun 08 Jun 2025 11:00:46 +0000
Files and hashes: 1: 7SbxWOq-MRP5ULWQ2099XB6fnsw.roa (hash: 5+GTdZJjZ/hGlJyiza+hMgn0Xvc9DgVXyOpbY9SRSSQ=)
2: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: 6HIH9Pjkr4SD5G8DbBUaFW9wB8coUMULhmFd/zzKMh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:df:6b:ed:50:83:67:ca:48:2f:a6:36:46:2c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Jun 7 11:00:46 2025 GMT
Not After : Jun 8 11:00:46 2025 GMT
Subject: CN=798c6bbabc7a048eabeacfc4db8989af47f36d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:19:2e:7e:f3:4d:72:7b:68:d9:8e:cc:9b:
8e:c0:6a:fc:d6:b1:ce:11:b9:c3:d7:82:91:c7:0a:
08:c9:7f:a6:47:d5:35:00:6b:0f:a4:6d:de:dd:2c:
86:eb:ed:9f:09:f3:1b:38:03:63:f8:81:be:b3:dc:
0d:6e:26:82:6b:71:30:d0:df:2b:67:80:6f:1e:31:
91:0f:f4:8a:c6:c2:2e:c6:cd:78:9a:05:30:90:1c:
07:88:e0:d6:99:8e:43:3e:83:c9:46:7c:61:bd:17:
d6:4f:4e:a0:fa:62:e8:0b:50:df:0e:23:2d:39:e2:
39:e2:e2:f2:dc:7a:5f:59:8b:8e:83:b9:1e:d4:17:
8c:20:17:75:f0:98:7b:7f:16:48:d0:e0:5d:24:f2:
e8:d2:72:4b:e8:61:04:71:bf:df:a0:71:fe:7f:76:
35:4c:e2:30:d9:12:1c:66:ba:b0:a0:66:ca:04:53:
f6:8d:e3:5d:b2:87:e4:af:c1:22:5a:7b:bd:a3:c0:
c4:a0:e7:ad:7b:48:f1:de:9f:42:59:76:d1:54:99:
fc:f2:86:3b:60:7f:5b:c1:8d:36:7a:83:0e:7d:a5:
4f:b9:43:4d:61:f9:81:cc:fb:16:84:91:5f:ee:b0:
99:a4:87:e7:c3:36:ab:b2:5c:d2:08:23:02:92:d8:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8C:6B:BA:BC:7A:04:8E:AB:EA:CF:C4:DB:89:89:AF:47:F3:6D:23
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:47:bf:da:b3:b7:d4:11:77:52:66:0e:7c:ee:0e:5d:c3:3d:
18:24:af:12:e6:d8:57:f2:50:c1:f9:0a:ba:92:40:f8:23:ee:
56:62:c1:7b:40:65:ce:5d:47:95:50:35:ef:56:1e:4f:c1:c6:
a1:7e:13:34:17:a6:52:8b:0b:99:c0:d6:95:f8:5e:f2:46:72:
6f:33:87:b1:e3:cd:14:46:c5:ce:86:36:75:81:df:3e:b9:8d:
d1:0c:f6:3e:c7:13:5f:4a:59:b3:c9:5a:00:a1:38:2c:56:6e:
5e:31:5e:3c:5d:98:6f:0c:77:be:17:ab:b2:2f:dd:b5:bd:96:
a9:9c:23:82:db:ea:0b:85:41:4b:ed:ed:77:14:85:14:b9:3a:
f5:ba:ab:94:3b:64:3d:68:34:31:34:bd:93:54:84:f9:7b:e4:
be:2d:68:c6:4b:a6:b8:d0:86:16:d7:93:e8:d9:70:da:23:e9:
db:77:d3:7c:c8:7a:d9:9f:b4:c3:6f:76:48:3f:59:02:a9:13:
30:3d:2f:02:57:c2:76:c0:c8:4a:82:f4:03:14:3f:17:66:ea:
84:f3:e5:ad:1e:1e:13:c4:f8:fa:1c:e1:d4:8e:ca:ff:3b:ad:
01:9e:57:4b:7a:ba:fa:8f:fc:7a:b4:2c:04:ca:45:7d:b0:d5:
6e:a4:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:03:04 2025 by rpki-client