Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: cH1CdKA6Oce3XcxQrvPkvd+D+CA6/Ts43zVsneiuVPs=
Subject key identifier: 98:65:D1:68:7D:7B:E1:F4:B3:FA:E1:52:21:F5:62:A9:20:B6:AB:0E
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 01974779BB64D75ACA30A37A752DEA83E506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 03E4
Signing time: Fri 06 Jun 2025 23:00:49 +0000
Manifest this update: Fri 06 Jun 2025 23:00:49 +0000
Manifest next update: Sat 07 Jun 2025 23:00:49 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: 8qZ5+VstzhqO0kKx9TqgYKlkDshTtmOInpmEH68ksTk=)
2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:bb:64:d7:5a:ca:30:a3:7a:75:2d:ea:83:e5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Jun 6 23:00:49 2025 GMT
Not After : Jun 7 23:00:49 2025 GMT
Subject: CN=9865d1687d7be1f4b3fae15221f562a920b6ab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:6f:07:99:99:cf:d2:44:95:07:07:5c:1a:
24:1a:be:1e:21:50:cc:be:ec:8c:0c:9e:b7:c4:3b:
1b:db:c4:72:aa:e0:1b:da:eb:77:83:95:20:b1:f6:
c9:7d:56:ed:14:b8:39:59:7e:a9:f7:ad:77:73:85:
74:44:7e:98:fc:1f:3e:ec:58:10:8f:07:5d:ec:2d:
0e:84:4b:cb:99:17:84:1e:32:6b:dc:70:30:8e:95:
9d:f5:c4:2b:8d:dc:86:51:3a:37:97:c0:b0:78:da:
a3:64:ca:0e:b1:8a:47:6b:44:8e:20:54:b2:6b:9f:
72:34:fb:a6:ea:55:f6:dd:d0:71:06:67:66:ae:5a:
16:5c:17:e1:17:4b:3d:ef:fa:89:2b:9b:89:c4:6e:
c9:d3:c6:25:3d:5a:78:46:42:e9:24:a2:de:a6:ec:
48:46:42:1f:f5:c8:66:94:3c:30:c0:4b:32:8b:d7:
37:5b:2a:73:65:49:5e:31:4d:5d:93:76:58:a6:8b:
45:2f:e8:f6:d1:a5:9a:9d:b6:fb:57:c5:9d:7a:4e:
d0:2a:da:77:5e:35:24:85:ec:b2:c2:c7:03:7a:45:
15:a4:55:a7:79:cd:8d:b2:3f:a9:5b:da:42:b8:a2:
cb:3a:48:90:27:c7:ce:bf:62:8c:54:02:9a:1b:c6:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:65:D1:68:7D:7B:E1:F4:B3:FA:E1:52:21:F5:62:A9:20:B6:AB:0E
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:58:d6:65:ab:aa:96:2c:7d:44:74:3a:09:70:b0:ff:48:2f:
60:02:2e:5b:da:49:42:ef:41:2d:c5:c6:94:f1:0a:a2:86:13:
36:fa:7f:7d:76:77:8e:06:c1:ca:86:56:eb:e1:c3:29:51:91:
d2:fd:6c:1d:f2:21:0d:be:6d:72:0f:06:58:82:a3:7a:fd:57:
91:6f:11:90:f3:b7:da:3f:65:89:e5:2f:3e:96:02:16:8f:99:
db:d7:31:8c:49:d3:05:23:4f:06:6b:43:e7:d7:95:42:1e:af:
70:d3:fd:a1:6e:5e:81:4c:9a:71:65:6b:6d:87:1c:9f:29:84:
c4:3e:c9:b2:f8:04:ea:5e:8a:6d:83:26:b9:3c:75:1c:3b:d9:
3e:bf:74:18:c4:a7:a3:f8:d8:60:e4:92:a6:bb:f5:c3:fc:cb:
04:cc:01:65:50:09:53:90:5d:d3:52:64:9c:9b:06:5a:a6:1a:
86:79:2d:ed:b9:06:16:3d:02:90:58:86:f2:0b:3d:4b:fd:66:
b3:38:42:91:c1:c7:93:47:13:10:d0:15:83:a6:af:ee:d4:08:
45:93:d0:5c:03:1d:56:29:3a:38:1c:59:1a:60:38:54:b0:fd:
33:cd:98:04:23:e8:b2:1d:fc:f7:71:f2:ea:77:26:da:b7:88:
cc:4f:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:36 2025 by rpki-client