Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: Gw+gEjqbW2rF+JH0OiDV0LEBIF4kU1kYdZPUQ11PUTU=
Subject key identifier: A5:D6:60:1E:4B:3D:7F:CA:0E:3F:FB:50:8C:0A:93:82:B5:61:0A:EF
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 01974AE8B04120691E3CAE65CBA9C14F1EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0A9F
Signing time: Sat 07 Jun 2025 15:00:52 +0000
Manifest this update: Sat 07 Jun 2025 15:00:52 +0000
Manifest next update: Sun 08 Jun 2025 15:00:52 +0000
Files and hashes: 1: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: OFharPHJg/1nWoEoJTmiSZRII+Id2I+Xz13y8FX6WhY=)
2: fS7Vtpenx3ISocQLcsKDmT4cdAc.roa (hash: lsacutCDcdT1KWfBtvedBOBvauWcszwNt+V8+YsxMyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:b0:41:20:69:1e:3c:ae:65:cb:a9:c1:4f:1e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Jun 7 15:00:52 2025 GMT
Not After : Jun 8 15:00:52 2025 GMT
Subject: CN=a5d6601e4b3d7fca0e3ffb508c0a9382b5610aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:bd:46:c0:eb:b9:9b:61:a9:a9:70:47:c1:
c4:6e:51:a8:34:df:69:a5:37:3f:b5:6b:97:6c:2c:
d6:7d:fa:21:55:89:3a:f7:25:9e:e8:02:ab:06:b9:
16:52:87:f2:b7:95:e8:1f:6f:82:cd:6d:7e:bb:4c:
94:7e:a2:d4:e4:31:05:7f:5b:70:ce:1d:5d:96:9c:
24:69:9f:15:02:4b:6f:bd:05:8b:95:70:6a:0c:66:
6b:fc:93:be:7e:0d:3b:7f:e8:c9:80:1f:e4:0d:68:
99:6b:38:3a:67:16:86:82:2d:e8:54:86:1e:e5:3d:
34:83:d6:d5:9d:f2:24:a3:9e:60:e2:81:41:f9:64:
4d:2b:c1:96:0c:6e:b3:02:a5:b2:86:4c:2a:23:cb:
aa:3d:01:e7:38:77:4a:1d:bf:5b:7c:7c:62:98:34:
3d:cc:b4:cf:5a:bb:53:46:22:56:a4:ff:39:ef:49:
2a:a2:9a:57:cc:79:c1:ec:2a:bf:e5:d5:86:98:71:
b5:b6:98:7e:49:ad:f0:27:02:96:be:2f:6b:89:9d:
10:50:0b:45:3a:44:23:62:0e:ab:eb:9c:67:70:dc:
68:e1:08:d4:84:b7:d6:a7:9e:39:39:d3:94:cb:ac:
eb:73:a6:df:3b:88:70:00:a1:75:89:5d:04:ec:99:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D6:60:1E:4B:3D:7F:CA:0E:3F:FB:50:8C:0A:93:82:B5:61:0A:EF
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b4:d2:8f:0e:68:2f:16:96:0b:92:f6:96:48:af:7c:7b:ca:
95:45:83:78:02:d6:0a:89:22:28:75:04:ee:28:51:de:60:06:
14:95:95:71:e2:8d:9e:3b:e2:b6:86:35:64:69:ca:91:06:77:
e5:80:84:46:3b:62:a3:a1:46:fd:e9:6b:fb:71:c5:0c:5f:c4:
2a:cc:12:83:2d:3d:6d:5a:66:36:b4:52:ba:2d:56:8b:da:6d:
1c:6e:a7:aa:9c:2d:53:57:9f:d5:d5:b8:fc:cf:6a:86:3e:a2:
c6:36:a6:7c:fa:62:60:f1:96:6c:13:53:c4:73:fe:1e:d8:fd:
74:a1:55:09:84:9a:71:e8:4f:72:38:d9:05:cd:58:b8:8f:1c:
7a:0d:3a:75:ea:e6:d0:93:1a:b8:01:b9:71:8a:41:9e:77:12:
61:a9:3c:09:c7:0f:f1:30:56:3e:95:93:b3:30:91:f0:2a:cb:
43:69:35:d5:84:eb:84:94:8b:fc:5f:a2:e9:9a:0e:94:6f:05:
67:db:51:d3:ce:bb:ed:56:56:0e:04:90:70:e0:22:9b:8b:bd:
98:1c:1c:e6:78:d8:3d:1e:1a:87:5b:40:43:ac:71:80:92:30:
7d:f2:75:e4:16:65:8d:4f:26:96:2f:a5:18:01:34:83:dc:6c:
9a:04:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:26 2025 by rpki-client