Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: imcxpiTpGXqJsMPIl8VGTt8P9FGFPBTAtoimI3mcw7s=
Subject key identifier: 96:14:F9:AC:D4:3A:89:F2:EE:4D:AF:F3:B5:4D:F7:C6:B3:C7:F4:14
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 0197485556C7A9079C54BB39D35C8C7EFE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 03:00:41 +0000
Manifest this update: Sat 07 Jun 2025 03:00:41 +0000
Manifest next update: Sun 08 Jun 2025 03:00:41 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: GUSdQMXzlIUmxdubpbkl3y7ZqwIWuBHx1PQOu8wbVxU=)
2: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (hash: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=)
3: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:56:c7:a9:07:9c:54:bb:39:d3:5c:8c:7e:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jun 7 03:00:41 2025 GMT
Not After : Jun 8 03:00:41 2025 GMT
Subject: CN=9614f9acd43a89f2ee4daff3b54df7c6b3c7f414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:a4:4f:de:6d:83:98:42:64:0c:7f:92:8e:
d9:ec:fb:6e:8b:df:cf:6b:39:f0:01:2e:a3:28:a0:
a5:37:f4:95:ac:b9:68:bc:80:67:f6:3d:ad:ca:0f:
2a:d7:bf:be:62:bb:17:38:27:cf:f8:47:dd:c5:eb:
6d:81:09:34:d4:ba:fc:43:31:29:73:ac:75:8c:31:
73:f1:0e:58:42:1e:ef:93:d0:37:a1:4e:24:dd:64:
66:de:07:8d:4b:4e:13:2f:c4:f5:ad:b7:86:cd:b8:
e2:68:4b:62:97:a5:40:a4:73:27:7a:52:bd:2c:72:
92:df:67:0f:e4:be:b8:71:85:7b:1d:31:9d:65:aa:
06:e7:15:24:cf:5c:74:3a:29:ba:04:3e:f8:0b:5f:
4a:7f:f2:3c:ea:45:da:a4:1a:c7:73:04:32:9f:d3:
41:e4:f9:ed:12:37:68:75:40:c3:3b:62:d1:b7:c5:
20:ba:2a:76:08:25:77:4e:a6:46:d2:af:d0:49:4b:
52:8b:b8:0c:a6:8d:ee:e7:92:99:d3:9d:31:24:39:
7c:24:1e:92:67:e3:1c:a3:c3:64:62:c6:37:99:cc:
a8:fe:b7:93:d3:32:da:dc:fd:7c:72:e0:0c:f3:28:
5c:3e:c2:32:51:1b:f6:02:30:8c:66:ba:38:97:e5:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:F9:AC:D4:3A:89:F2:EE:4D:AF:F3:B5:4D:F7:C6:B3:C7:F4:14
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0b:30:7c:a8:bf:66:42:74:61:ef:57:af:e4:71:cb:b0:31:
fa:16:db:2b:ef:f2:1f:4f:d9:08:6a:5e:28:29:e4:aa:3a:24:
37:70:c1:45:dd:b8:9b:1a:ec:59:49:a5:42:df:84:38:46:7c:
1c:b9:ae:a8:cf:75:ef:12:c7:53:08:49:41:c3:93:db:9c:f2:
4b:00:2a:37:44:02:dc:5e:3f:d8:c5:06:a8:cd:c6:d1:1c:2e:
8e:2e:a8:1f:66:a1:55:78:ac:a3:b0:c2:ed:57:09:c5:38:e5:
60:49:eb:f4:a1:23:cc:12:53:3b:d7:93:8d:f7:4e:ad:e3:50:
3b:b4:46:f7:d7:8f:12:5c:54:d3:8c:86:87:2e:14:0b:43:93:
0f:69:84:9c:46:6f:e4:4e:6d:74:df:c4:f1:d8:72:29:ed:3d:
92:05:f1:ad:15:2d:36:f2:66:fc:4c:4b:2c:fd:58:fc:45:c9:
ee:a1:f6:82:67:cf:f3:6e:5c:42:4a:d4:1f:a0:75:37:5c:98:
1f:9f:2d:6f:9e:dd:86:d4:b0:12:69:35:bc:97:6f:53:86:ae:
3c:c0:f1:ae:d9:f9:aa:d5:01:f9:75:4e:20:0a:33:5c:37:43:
3a:fb:ae:ad:a3:ac:ab:92:b7:e8:ea:cc:50:1d:1d:bf:85:71:
89:f3:1c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:45 2025 by rpki-client