Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: ncyRbYl1+Jtwwc1XEsrdFKBcZgNUBVeEVzO0S6d1CzI=
Subject key identifier: 0D:E9:95:62:09:0A:63:98:E9:58:01:F2:F4:58:50:B3:56:F4:B0:BE
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 019749D5CC506022195AEB2BDBDF0C72A8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0C21
Signing time: Sat 07 Jun 2025 10:00:37 +0000
Manifest this update: Sat 07 Jun 2025 10:00:37 +0000
Manifest next update: Sun 08 Jun 2025 10:00:37 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: ZyxzReYrcimGLMT+RfydLy+r5nwSg3GDsXccXIJFJeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:cc:50:60:22:19:5a:eb:2b:db:df:0c:72:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Jun 7 10:00:37 2025 GMT
Not After : Jun 8 10:00:37 2025 GMT
Subject: CN=0de99562090a6398e95801f2f45850b356f4b0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:c2:8f:2f:1c:cf:e4:df:5b:47:cc:17:d8:
f4:23:46:15:d7:62:7c:35:8c:0d:31:99:36:0c:aa:
3a:7f:18:c4:1b:02:bc:f2:fd:cb:18:b8:eb:57:d2:
2b:03:bf:d4:6e:be:20:91:b4:9e:5c:40:1a:05:bd:
81:44:b4:64:d2:5c:fb:f7:91:e9:e1:58:d1:45:17:
6e:41:41:45:b6:ef:4e:c0:b2:40:a7:9c:94:01:43:
50:cb:74:25:ec:cc:c4:6c:75:9d:90:f0:58:f4:a2:
64:76:dc:6c:d3:92:c4:46:5a:ef:9a:de:9d:b2:8d:
f5:09:04:84:42:21:0e:7e:f5:24:97:00:94:a7:8b:
d5:34:00:f0:72:22:f3:58:bb:78:9f:c6:fa:29:02:
19:c2:20:b1:34:d6:19:3e:fc:4a:68:02:ae:10:d3:
38:40:fb:56:a8:10:11:87:c4:93:db:2d:6a:ad:e0:
b5:12:08:dc:eb:90:89:ff:ac:45:3d:cd:87:1a:0f:
4b:4a:cb:4d:7c:22:95:07:09:34:56:11:43:26:40:
10:c3:94:ca:62:61:73:6f:c5:b0:76:9e:ea:38:ea:
06:d7:70:66:2f:49:ae:0f:ae:7d:da:7c:fd:4e:21:
9c:31:80:0b:bb:81:2d:22:51:1b:57:a6:69:ff:39:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:95:62:09:0A:63:98:E9:58:01:F2:F4:58:50:B3:56:F4:B0:BE
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2a:db:6f:9f:7c:d2:f2:4f:d6:73:cd:f4:a2:eb:b1:c8:a3:
db:14:ff:85:09:be:d4:af:ea:27:d5:65:8e:74:2b:d1:70:5e:
6c:95:a4:a3:87:04:05:b8:06:81:57:d7:87:ce:1e:fa:eb:3e:
4e:3e:f6:da:2e:1f:17:3b:23:bf:c9:9b:85:19:dc:16:8b:a1:
49:1b:45:02:c4:04:d4:e6:a8:41:d9:e7:4f:17:b7:1e:14:03:
5a:0f:5a:65:da:f2:21:de:9e:f3:6c:32:af:a5:14:d6:81:70:
ed:ba:76:2c:8e:05:97:93:ab:25:49:20:a0:6d:a4:64:ae:76:
1b:02:a3:73:58:2a:14:20:df:5d:d8:77:65:3d:02:0f:03:9d:
12:8f:b9:95:ea:a6:4d:b5:26:48:bb:19:37:c1:8c:22:9b:33:
93:e9:ca:67:a3:fd:5e:27:82:cb:70:b0:64:ad:09:dc:44:65:
64:d3:7d:32:4e:37:8a:20:28:88:c4:f8:01:53:2a:b0:0d:03:
75:32:fe:3d:ab:01:94:61:82:b9:22:f0:cf:be:47:27:84:0c:
8c:75:88:82:8a:c4:6e:77:70:f0:cc:10:08:2f:39:5e:e5:c1:
7e:3d:87:d8:c0:7a:db:f6:bd:03:7e:6e:ff:25:a9:99:90:4c:
fc:c6:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:17 2025 by rpki-client