Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: OMtCseNSPJ5fy+NctMj+kYD/xV7dsvPBlrQeSC/pGgU=
Subject key identifier: A0:4B:4C:E7:52:EE:EB:1A:A3:EB:9B:5A:AF:30:5C:CB:A9:EC:AE:30
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 01974CD6FD5A752B5BCE676A8EB6EF9200F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 0121
Signing time: Sun 08 Jun 2025 00:00:47 +0000
Manifest this update: Sun 08 Jun 2025 00:00:47 +0000
Manifest next update: Mon 09 Jun 2025 00:00:47 +0000
Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: vV7yARdk0Cr9Xfz9A3dIkWZ8Y3BfWPk1U640MaHfCTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:fd:5a:75:2b:5b:ce:67:6a:8e:b6:ef:92:00:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Jun 8 00:00:47 2025 GMT
Not After : Jun 9 00:00:47 2025 GMT
Subject: CN=a04b4ce752eeeb1aa3eb9b5aaf305ccba9ecae30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:30:bc:20:c2:c7:40:0e:77:af:13:de:d8:
08:35:43:89:9f:f5:6c:7e:71:40:48:14:64:ac:06:
37:bc:1a:48:e8:69:da:ae:16:bf:0c:0f:a9:94:61:
59:02:68:a8:0f:23:f5:44:95:9e:34:73:21:9b:a3:
7f:3d:fc:2a:11:65:91:ab:85:ef:c6:0a:ab:3e:e6:
c3:8c:b4:48:6f:f5:ba:e8:42:d1:29:c6:d5:8e:69:
76:f6:2e:07:eb:2c:ae:6f:86:8c:c6:25:e6:48:fc:
33:b8:bf:80:8e:ce:4b:13:3b:3f:01:e3:4c:e8:3a:
d3:bb:29:c2:64:75:af:4b:0d:1f:95:b2:99:f7:5f:
d4:eb:a8:d8:f3:eb:3f:44:40:cf:e5:95:91:12:1f:
7e:6d:ef:3c:97:a8:8d:20:7a:80:b6:56:2b:68:b4:
d1:f9:50:eb:c4:0b:42:e9:ff:56:11:d4:f6:73:8c:
2a:a5:8c:81:7e:da:3e:3b:a3:ca:72:9e:13:62:46:
ca:e5:9c:39:ed:41:3f:c7:e6:6b:d8:7e:04:58:9c:
6d:e9:fd:07:09:0a:c8:ef:c3:2a:ff:aa:5f:28:cd:
62:9e:e1:94:c0:67:57:2d:63:30:12:65:7d:3c:77:
6b:e1:e2:c1:38:fe:2c:18:e7:4c:4d:1e:71:69:9b:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:4C:E7:52:EE:EB:1A:A3:EB:9B:5A:AF:30:5C:CB:A9:EC:AE:30
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:8e:8a:d0:5a:78:0f:79:5c:6e:21:d0:05:c4:a1:f6:81:
0f:32:b7:4e:ae:da:0e:10:fd:47:21:5a:d9:58:f8:e6:0e:4c:
73:52:96:16:b0:ee:54:dd:aa:3c:a6:08:26:84:dc:bd:1e:5a:
75:04:69:12:88:a1:92:4f:38:52:70:3e:40:4a:6a:e9:e8:16:
82:f8:4d:c8:e1:86:c5:e7:3c:a1:81:78:94:fa:d0:e7:2b:e7:
3e:04:4d:c8:69:fa:0b:65:ea:84:74:16:74:29:a3:a2:75:fc:
59:13:e2:a8:6c:a8:45:e2:89:03:7f:a2:e1:b6:62:cd:1a:12:
86:7e:40:e0:d7:9f:80:37:c4:d4:19:a4:82:55:a8:a9:1c:07:
4c:55:41:a6:45:a4:53:5c:4e:26:02:c5:94:f1:97:64:59:ea:
01:ef:c2:4e:fc:54:7c:69:b4:b3:cb:21:c4:de:5b:c4:a5:39:
21:c8:7d:43:2c:92:4e:b3:53:35:d4:fe:01:0d:46:1e:62:45:
f9:ab:c8:40:2d:38:82:7e:fd:bd:e8:6f:89:f8:98:f8:23:41:
71:e8:15:89:2c:c9:34:e6:fe:32:3d:5b:b3:70:f6:70:29:22:
75:07:c5:b0:cf:01:aa:4c:9d:9b:b9:c9:76:73:58:92:32:e0:
1d:85:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:16:45 2025 by rpki-client