Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: b/WhrSxfgavoYJOXFpzsdnoTKwNYQoqfrtjzvLzWdcA=
Subject key identifier: D5:A6:9A:03:ED:0D:E0:AE:DE:9C:CF:CF:DA:26:2F:3D:07:36:61:66
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 01974A0CDE3FB0045824DC0CF3F4DE758150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 08B5
Signing time: Sat 07 Jun 2025 11:00:46 +0000
Manifest this update: Sat 07 Jun 2025 11:00:46 +0000
Manifest next update: Sun 08 Jun 2025 11:00:46 +0000
Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=)
2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: GiqPHGrKRRF37DdCTBQ6XijANbnB0JLLkEU9FuLSSXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:de:3f:b0:04:58:24:dc:0c:f3:f4:de:75:81:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Jun 7 11:00:46 2025 GMT
Not After : Jun 8 11:00:46 2025 GMT
Subject: CN=d5a69a03ed0de0aede9ccfcfda262f3d07366166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cf:75:2f:c5:c9:a2:b4:2d:8d:1b:07:dc:6d:
07:42:76:d5:45:f4:73:29:bc:8d:9b:98:e7:7e:75:
a2:64:30:b8:5c:40:a2:a6:80:6a:ec:17:17:1e:bc:
4a:9c:76:61:95:76:47:c9:3f:97:c5:9d:5e:81:9c:
a5:84:fb:4d:66:e0:91:8b:68:0a:0e:fe:ac:5c:2e:
5a:77:fc:0c:1c:81:de:86:6b:0b:41:3d:20:c8:d7:
89:f5:f5:0a:a5:67:ff:4c:25:24:ac:d4:75:fa:0b:
54:af:1d:79:bd:65:8f:b0:0a:20:c4:0a:01:fe:0a:
79:b8:d7:32:af:6e:c1:82:07:1c:3a:c2:13:97:01:
c5:36:44:64:a8:1d:09:09:e7:29:25:6a:6b:5e:8d:
90:5d:20:e7:f5:c0:39:68:16:af:db:38:a9:92:e1:
78:c5:2e:8d:fa:40:51:a0:b5:f0:08:88:db:04:6e:
0d:30:1f:0c:86:fa:29:6a:2e:e8:5f:b6:19:37:99:
f7:24:a4:7f:f1:ab:8d:31:b7:7e:4c:1f:57:8a:76:
5d:60:09:fb:2c:8b:e1:23:a1:45:e8:56:62:1a:72:
f1:a9:b3:71:92:09:ae:39:7e:ac:84:76:c1:ff:61:
1b:de:f3:b8:64:0f:4b:7b:3c:63:78:de:d7:f8:bd:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A6:9A:03:ED:0D:E0:AE:DE:9C:CF:CF:DA:26:2F:3D:07:36:61:66
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:43:f9:fa:5c:24:6c:4a:5c:a1:9b:b7:3f:56:6a:d7:cc:fd:
4a:b0:5f:ff:94:5f:58:9a:a5:a3:66:cb:75:01:39:47:d0:ec:
bc:c5:3c:e4:ab:69:19:a1:1d:83:13:9a:48:e1:73:32:51:4e:
ba:81:9f:a7:ab:72:2e:d0:20:b0:b0:14:fd:53:72:37:53:46:
d6:23:2d:a4:23:5e:b8:f7:22:3b:04:62:7f:ae:d0:65:49:23:
24:e8:f5:97:85:f2:04:1d:33:74:9d:30:b1:b5:a0:42:67:57:
0d:c3:cb:ee:88:1f:dc:7b:07:1d:af:38:fb:09:a7:f6:75:7b:
3f:aa:f8:ca:20:80:74:0c:3d:69:81:28:11:59:de:93:b0:0d:
a5:47:5f:87:47:c3:e1:e8:61:40:ba:60:da:98:30:ed:1b:07:
fb:2a:16:e6:58:28:7d:81:3b:fb:05:e7:52:b9:04:14:8e:e5:
b4:61:08:23:c9:ce:48:dc:ff:7c:10:42:65:f3:c8:54:87:43:
7a:07:19:95:dc:24:ac:9d:a2:99:a1:bd:2b:27:92:6b:c6:cb:
9c:55:87:e4:e8:28:12:4c:b8:e0:d2:7f:5f:bd:ea:df:b9:36:
cc:55:b3:a5:82:b3:10:89:a4:f8:75:95:05:f7:a9:8f:32:b7:
aa:41:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:32 2025 by rpki-client