Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: MbylnZ3B7zP+uuVm3++fOTHZkIkGdiEGiBs1bsOEc2w=
Subject key identifier: DD:07:92:83:57:0F:59:41:0E:72:4B:71:EA:5F:3B:E1:E4:2E:A5:46
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 019746D4EB3E0BB52BD42E2C69F787CE348C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 06ED
Signing time: Fri 06 Jun 2025 20:00:48 +0000
Manifest this update: Fri 06 Jun 2025 20:00:48 +0000
Manifest next update: Sat 07 Jun 2025 20:00:48 +0000
Files and hashes: 1: QZoLuFkftySTBFXm0IVGsdEjWSc.roa (hash: OleeaSAA+3wpsX1eMFtI7iInTKkVtH+3kKO3RFIPMMo=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: YygTvLJlEaPONAWMGageOIR0LrzOWEE9vVuzTSBcR88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:eb:3e:0b:b5:2b:d4:2e:2c:69:f7:87:ce:34:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Jun 6 20:00:48 2025 GMT
Not After : Jun 7 20:00:48 2025 GMT
Subject: CN=dd079283570f59410e724b71ea5f3be1e42ea546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:2a:4f:73:05:45:0d:7b:c0:9b:8e:26:58:
2c:06:a1:44:7e:f2:cb:40:1e:0c:76:73:d6:75:04:
be:f6:c5:84:b5:bb:38:f3:c4:24:8c:50:b0:07:51:
19:9d:f4:67:ad:97:65:d5:03:77:fd:10:61:b2:49:
a9:4c:ba:e2:06:e9:62:2a:34:50:13:06:41:bc:54:
85:02:86:b2:68:2d:39:55:58:17:b7:95:0d:6f:e3:
e1:66:18:68:c9:4e:f4:b9:49:ef:51:d4:05:fd:54:
0a:a4:52:83:e0:a8:1a:ac:36:47:07:88:a4:35:6f:
c3:66:3d:f2:3a:ee:33:01:3e:1e:98:f8:60:72:30:
88:1e:92:38:61:e7:d0:d8:8e:b6:c7:62:89:9b:e6:
77:c2:43:c0:f8:44:9b:34:80:d6:9b:f3:36:e8:d2:
72:38:a4:12:18:5a:d5:12:6d:0f:01:64:b8:bb:80:
a7:06:e7:b8:6b:18:ab:28:b6:bc:04:85:0a:e7:02:
d1:d4:8c:5a:f3:8b:a7:8d:1a:03:91:ad:fe:39:26:
06:19:68:6b:65:31:d4:a3:ee:d9:11:6c:fa:30:dc:
21:65:ca:b9:22:4f:85:82:30:3c:dc:a2:d7:2c:07:
f1:9e:6a:b5:86:dd:12:7c:a8:a5:ee:5b:af:73:58:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:07:92:83:57:0F:59:41:0E:72:4B:71:EA:5F:3B:E1:E4:2E:A5:46
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e5:79:a5:b5:63:f6:c6:2b:0c:cf:e6:23:86:db:2c:80:87:
50:5b:7c:99:c7:a8:be:84:19:fb:c8:35:90:84:39:3d:9c:8f:
81:d7:d9:85:0d:82:1f:37:e4:b4:f7:59:93:c0:15:1e:36:ca:
a2:b6:5e:a3:3d:52:6d:84:91:98:0a:83:7c:1f:da:b4:79:57:
72:6c:3f:13:32:98:1a:82:24:d8:cf:33:a9:3b:42:af:13:91:
4c:c8:80:dc:7d:8b:f2:43:39:36:fe:96:2e:f7:0c:32:61:ee:
d7:51:be:90:5d:11:f8:07:d1:50:b3:b6:c1:0d:ad:6d:fc:5c:
05:fc:5d:0c:60:ef:ff:7c:11:44:d7:44:df:d9:91:2b:d2:10:
d5:a5:79:7c:33:d8:59:14:23:c3:d1:47:c5:8d:e4:53:15:6c:
96:ad:cb:d4:a1:50:28:4e:ac:4d:b3:6b:34:39:e7:95:ea:52:
b4:cd:d3:57:d2:25:b9:5d:b4:90:03:f4:ab:2c:b8:88:ad:f2:
a8:83:8b:11:dd:6d:58:d6:0b:0d:d5:72:36:39:93:ea:80:0d:
20:62:96:2b:46:53:78:fa:6a:04:32:96:5d:b3:21:f8:ee:a9:
e3:33:9b:22:4d:35:2a:af:79:5b:57:f8:92:11:5f:d1:4e:a6:
4d:81:14:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:50 2025 by rpki-client