Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: oQyh8D7jPNEd04z4h+s0kECCqxfReEVX8k+UKWJ66gY=
Subject key identifier: 7E:A2:6C:73:C3:CD:7F:06:57:6B:B7:9B:6C:70:A4:58:64:4D:82:AB
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 0197488C50B492F836427349BD781EB4A5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 128D
Signing time: Sat 07 Jun 2025 04:00:44 +0000
Manifest this update: Sat 07 Jun 2025 04:00:44 +0000
Manifest next update: Sun 08 Jun 2025 04:00:44 +0000
Files and hashes: 1: 26OroNSilLDsLnRmS90OawnRg8M.roa (hash: 2vZiL1ss373Q0TX+B8Q8SMDZKCr1m9fpyjjeqgVg0rI=)
2: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: 6sNYggmgce2Ld/zVwGRS/xhHXjv+5SR4qNlP+dxTD7k=)
3: yFq0JfOaNjdhRiNZMahKgBz5pBs.roa (hash: HLvs21UJM8ndMu/vC6YjvpshtGffGUPV1RHDv0ERCAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:50:b4:92:f8:36:42:73:49:bd:78:1e:b4:a5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jun 7 04:00:44 2025 GMT
Not After : Jun 8 04:00:44 2025 GMT
Subject: CN=7ea26c73c3cd7f06576bb79b6c70a458644d82ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3a:25:44:49:a5:de:85:ec:a6:d0:94:a8:ed:
2f:07:7c:de:fa:96:54:86:96:d1:15:b8:99:ed:43:
3c:ef:fc:a1:e9:01:c5:63:78:86:cf:ad:dd:fe:90:
b5:a5:40:2d:83:11:5b:db:2b:36:17:b5:20:14:5c:
0b:eb:d0:12:4f:b0:9e:d4:29:bc:c9:3c:02:5f:9c:
25:79:92:ce:68:ae:9a:02:aa:2a:65:5c:d6:82:e3:
84:ac:06:fc:3a:11:93:22:e5:b7:34:a0:2d:5c:40:
92:92:2c:64:63:ec:73:b5:2f:50:e9:a2:50:42:a2:
53:ab:85:14:31:a3:7d:fa:f7:2b:81:a2:4e:48:73:
03:0e:cd:f7:b3:69:80:17:a5:d8:26:fa:c8:c9:7a:
61:d7:45:f7:34:06:e9:65:00:9d:07:3f:3d:5f:53:
e7:92:2b:2d:49:89:30:8e:9b:31:c0:5c:bf:aa:d7:
c5:86:5b:c6:8c:4b:17:01:e3:16:c3:5f:a2:89:4e:
d1:91:8c:df:0d:62:ad:76:f7:c0:a8:97:40:8b:67:
b9:a4:ed:c5:b6:fe:29:5e:49:33:a5:94:4b:63:e5:
94:2c:fb:1f:3a:1e:c0:98:eb:79:0a:eb:51:a2:b7:
bd:04:d0:6f:4a:4b:5b:d9:8e:26:de:16:d1:08:47:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A2:6C:73:C3:CD:7F:06:57:6B:B7:9B:6C:70:A4:58:64:4D:82:AB
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:e4:d3:79:1d:2f:0f:29:c4:1c:35:fe:50:1e:74:cd:2b:
41:54:51:45:41:28:cd:6f:4d:1d:5a:a2:a1:7d:33:b6:66:b0:
4a:57:3c:2e:85:20:8b:8c:a7:78:dc:da:1d:1a:d8:a2:b2:2a:
37:21:50:a5:75:9b:ae:3d:52:7b:41:68:26:09:33:cf:56:07:
c9:39:90:aa:fd:0f:18:8e:4c:34:e4:43:a7:c7:18:71:91:97:
15:b7:32:20:d2:4b:cd:f8:f5:6b:53:a3:e7:5d:fc:28:e7:d3:
ac:7e:13:62:3b:24:33:2a:1e:89:4c:07:0a:64:6f:35:97:3c:
d2:16:81:63:45:ee:ab:72:9e:e8:a7:bd:dd:07:2c:e3:18:80:
e5:ee:a8:86:c2:d3:90:cc:28:5d:c5:f5:2d:2d:07:a5:b3:76:
44:59:4b:71:5d:c6:b3:2e:bb:a1:1e:26:69:c0:77:56:c7:0d:
2a:77:0c:50:90:a3:ad:00:15:14:87:3c:26:76:ef:2e:08:85:
ee:0f:bf:a7:5e:77:91:2d:21:ad:e8:98:b3:1d:f1:21:27:7f:
7e:1b:d8:f9:da:24:c1:72:ed:eb:bb:a0:c4:7b:94:78:9e:79:
34:b9:3d:9f:fe:cc:17:3e:53:9e:45:48:c0:d4:18:d4:2b:50:
d8:c5:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:54 2025 by rpki-client