Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: xRSRS4y8wFwRXAxzaUgjTRGQU+bpOsXLYJ7lP65Dlgw=
Subject key identifier: B2:59:BD:64:8B:17:06:56:06:C0:41:1B:00:71:3B:A3:C5:81:52:AF
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 01974855654CC128745F5BD34A320B127CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 04A6
Signing time: Sat 07 Jun 2025 03:00:45 +0000
Manifest this update: Sat 07 Jun 2025 03:00:45 +0000
Manifest next update: Sun 08 Jun 2025 03:00:45 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: hFsBeWgFNPwJaBe+M78Zb2PmVdV2MSxk4wS1MMCL5NI=)
2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:65:4c:c1:28:74:5f:5b:d3:4a:32:0b:12:7c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Jun 7 03:00:45 2025 GMT
Not After : Jun 8 03:00:45 2025 GMT
Subject: CN=b259bd648b17065606c0411b00713ba3c58152af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:eb:9a:ca:cd:7c:0b:0d:b6:11:97:70:5b:
bf:e7:0e:0e:15:c4:39:21:a1:13:56:9b:bf:66:52:
21:ef:9a:1b:4a:09:2a:5a:a7:38:ea:f4:28:98:aa:
6a:97:39:9e:71:f2:b9:ad:6a:93:67:0d:ed:48:fc:
d7:14:6d:e8:dc:92:9f:56:a3:d6:9d:43:c3:e6:3a:
00:3a:5e:79:60:a2:16:cc:1f:ce:ba:ae:62:3c:84:
92:34:a5:92:35:cf:51:ea:54:d2:1f:2e:e3:a9:94:
d0:8b:d4:6d:d4:0c:b2:55:e1:ba:a8:09:11:b6:50:
c8:9b:5e:33:43:43:f6:fc:d6:19:91:e1:92:41:96:
11:cb:da:95:3f:0c:fb:5c:2f:b6:3c:db:5d:7e:70:
06:8a:45:47:ed:31:94:19:24:07:2a:29:0d:70:ca:
bc:8a:21:23:f2:b9:62:04:ff:b4:e7:c4:b5:75:a2:
4f:64:a8:ca:4b:4c:7a:33:c3:df:39:be:4c:ba:69:
dd:75:7f:fd:94:36:45:3d:2f:17:5d:a4:55:a2:9c:
14:93:0e:74:b8:d7:cb:e8:16:4d:fd:92:98:3a:58:
ac:ed:77:3e:0c:a0:12:17:a4:ac:c3:99:1a:0b:e3:
40:a7:ad:9f:f6:2a:6b:e4:46:23:66:71:ed:a5:85:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:BD:64:8B:17:06:56:06:C0:41:1B:00:71:3B:A3:C5:81:52:AF
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:08:95:17:76:fe:4e:51:5c:b8:7d:ce:b9:48:b4:6d:33:98:
12:95:0c:10:aa:a6:9b:7c:e4:ee:f7:fa:b6:73:f3:4d:1e:7f:
2b:20:62:9e:b9:1a:19:12:2e:c0:c0:a3:2c:6b:78:69:24:90:
45:b9:cd:2c:28:a4:fd:a6:1c:29:e1:ae:59:22:b8:9d:fb:3d:
56:f2:da:f4:96:3b:93:aa:c7:fa:ab:6c:63:87:e4:48:3b:96:
11:13:e8:c6:af:9d:dd:d1:99:46:c9:f0:bd:a0:e0:52:79:07:
33:85:db:6b:7f:96:8e:1b:36:b8:14:87:ff:3b:7f:b8:cd:ea:
ec:2f:fe:36:47:41:7a:9c:4c:c6:f3:da:2c:08:1e:34:2c:69:
83:dd:f2:01:d3:62:fa:91:1f:f5:54:64:49:cb:4a:ff:fd:e7:
1b:c3:e6:b6:57:28:77:da:f4:80:fa:da:83:03:dd:76:a9:a9:
95:5d:3b:f3:fd:6a:3a:9d:6d:a5:c6:bb:cd:91:3e:6c:99:e2:
78:72:27:a4:bf:56:bb:df:c5:28:4d:50:8d:d8:6b:8e:c0:55:
df:42:1b:49:81:5c:0b:99:81:6a:0c:bb:ef:86:d3:d8:d4:eb:
39:d6:70:50:8c:4d:3b:43:b1:3b:5c:43:22:d4:97:57:0a:d3:
3b:64:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:42 2025 by rpki-client