Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: c10usgYvPfzZKKTaJfMEdR6cZbafiiHZbXk9lMJYq/s=
Subject key identifier: B1:7B:F1:6D:03:F2:7A:E3:BB:09:C9:8C:CA:18:7B:5B:0C:9B:85:74
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 01974D450D5AD96BE1EDF57FD7607C06D576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 1218
Signing time: Sun 08 Jun 2025 02:01:00 +0000
Manifest this update: Sun 08 Jun 2025 02:01:00 +0000
Manifest next update: Mon 09 Jun 2025 02:01:00 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: JEu0yrsA5jvt42rSrFq2yyisHSUPSViQqNPifPEjZFk=)
2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:0d:5a:d9:6b:e1:ed:f5:7f:d7:60:7c:06:d5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Jun 8 02:01:00 2025 GMT
Not After : Jun 9 02:01:00 2025 GMT
Subject: CN=b17bf16d03f27ae3bb09c98cca187b5b0c9b8574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:86:10:3c:c7:e6:14:0f:ad:97:50:06:e9:
bc:96:0a:cc:fe:9c:79:c3:68:68:fd:1c:0d:85:cd:
2f:2c:db:59:79:40:8e:e7:22:b8:aa:fd:b8:eb:6f:
a2:55:59:63:87:af:1f:a3:e6:43:c8:bc:fa:90:e6:
e1:89:4f:b2:e5:2d:4d:3b:3e:c8:c1:a3:39:71:3c:
96:bc:2b:6d:84:c7:09:6b:7f:09:80:40:64:1a:e6:
40:0d:2c:4c:dd:0b:b1:7d:0a:0f:99:cb:76:3c:0c:
46:42:b2:49:8f:d8:f1:c0:63:8d:ab:4a:68:b2:f1:
9d:f1:2b:20:d3:32:3a:c9:b5:71:5c:ae:c8:32:6d:
13:97:b6:fb:46:5b:f3:21:70:f8:fa:1d:b5:34:e8:
29:33:c7:27:3a:a4:b3:f1:94:42:e6:d1:a5:f9:4b:
9d:ce:66:d0:30:e7:13:f4:67:6c:9a:06:5b:bf:9b:
f6:9e:85:f1:d1:94:73:69:ef:6b:3a:6e:43:46:fb:
85:49:42:ef:0b:40:a5:71:40:34:41:4e:16:8a:91:
70:b8:3c:b9:18:b3:e3:6b:06:38:39:84:af:ab:04:
8e:59:c6:b1:4f:56:c9:15:d2:91:3c:56:c4:32:a0:
ef:5a:20:9a:73:65:4a:08:dd:a3:7c:3f:36:d9:09:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:F1:6D:03:F2:7A:E3:BB:09:C9:8C:CA:18:7B:5B:0C:9B:85:74
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6b:8c:84:e0:d7:a3:86:9a:c4:c4:c9:4b:71:69:01:62:26:
13:b2:b2:e4:ac:b9:91:28:0d:ec:e2:ee:d3:95:e4:b9:64:9b:
5d:d4:3b:36:53:36:7a:52:e3:79:84:92:b7:d1:c1:7c:df:0b:
f6:52:2b:63:80:82:80:c9:9c:2f:03:c7:aa:1b:f5:81:2b:b3:
20:49:47:14:ea:16:04:6a:75:1e:eb:2c:4b:af:35:3b:fb:e5:
8d:43:13:91:d6:c1:85:24:4c:83:71:bd:de:08:5a:d5:0d:1d:
a3:e2:ae:08:0c:1c:75:cc:3b:2a:12:9c:2f:04:95:1d:f0:34:
97:90:3c:e4:76:ba:2c:1a:bf:e2:c5:85:f8:a0:50:8b:22:49:
d5:36:32:12:eb:2a:63:9b:d4:41:8b:2d:36:58:30:ab:ad:10:
63:29:14:3b:56:a7:f2:52:1d:c8:e7:7e:90:65:ea:2e:69:79:
d5:29:c0:aa:23:0f:38:70:a1:f5:fe:68:20:d9:86:37:97:44:
46:31:6d:3d:de:1c:f4:d8:b8:14:ae:32:b6:c4:81:43:70:e5:
a4:ad:43:f7:e8:3c:dd:87:ba:e7:4b:b7:6a:70:99:7c:b4:4f:
eb:c5:cb:85:75:20:33:6e:86:9a:5b:27:77:02:b0:b8:5d:be:
36:03:1f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:41 2025 by rpki-client