Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: ZCEM40hWhidYyGoucDX4KTKSw5xPJ+nXGsY2UrKhYk4=
Subject key identifier: B4:B0:FB:E4:98:55:CE:11:FC:38:AD:09:85:FC:26:C1:74:A3:ED:50
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 0197469DB4063423AA0B78B1D1850C1B9C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 0716
Signing time: Fri 06 Jun 2025 19:00:29 +0000
Manifest this update: Fri 06 Jun 2025 19:00:29 +0000
Manifest next update: Sat 07 Jun 2025 19:00:29 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: H5eqim+WtxLM0OYaSEZNAMJ8rqLWnGACA3eEesT1yB4=)
2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:b4:06:34:23:aa:0b:78:b1:d1:85:0c:1b:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Jun 6 19:00:29 2025 GMT
Not After : Jun 7 19:00:29 2025 GMT
Subject: CN=b4b0fbe49855ce11fc38ad0985fc26c174a3ed50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:62:e7:19:9d:93:a5:01:18:73:93:58:01:
86:dc:c2:35:73:fa:20:c5:33:fd:2e:55:14:0b:9b:
93:66:69:23:ce:ff:b1:5f:f3:5e:7c:72:7c:1b:40:
1b:78:83:eb:80:93:42:c8:a8:85:bd:b6:9d:02:76:
4e:fd:84:89:36:cb:2f:d9:c9:3c:63:ea:a1:79:50:
b6:10:38:d1:3e:b7:b0:d6:8e:ba:7f:4b:8a:2f:db:
b1:e5:92:d3:b6:00:61:0e:7a:a3:d0:35:18:77:ac:
34:b8:26:0d:67:44:c3:f0:a1:ad:df:44:b5:77:20:
37:c4:4f:6a:8f:af:37:b7:00:26:a6:0b:1e:65:d0:
20:28:67:bf:af:bc:7a:96:dc:e7:dc:59:4c:69:3a:
f9:76:56:2c:cb:c1:10:5b:48:38:0c:37:f3:6a:39:
de:8d:7f:e2:e7:3e:17:5e:23:4d:e5:8d:35:09:cf:
64:4d:c4:d0:64:ba:f3:fb:9b:5d:76:20:cf:87:35:
65:26:1b:b7:c3:ce:11:cb:97:da:27:81:0f:3c:e4:
73:3f:6b:e2:f0:53:15:2b:7d:43:8e:bf:9f:fe:25:
4f:66:27:eb:bc:8f:63:16:55:57:cc:47:56:6a:19:
12:d2:4b:df:3e:52:64:a3:51:49:84:b2:ef:99:5b:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:FB:E4:98:55:CE:11:FC:38:AD:09:85:FC:26:C1:74:A3:ED:50
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:62:9a:11:c8:fb:d1:a5:3a:4c:53:f6:3c:21:6a:c2:4a:dd:
76:09:4b:62:da:b6:5d:4e:b0:89:ed:e3:ba:30:39:28:9a:6e:
22:7c:66:3b:b4:de:d7:33:c0:ab:a4:23:2e:5c:b7:cc:77:1f:
fc:cb:9d:e2:29:08:c7:38:fb:8f:cd:1f:a3:ae:0b:5d:42:08:
b7:29:a0:d3:db:96:1c:9f:59:79:b3:7a:46:fb:e0:68:d4:b2:
52:d6:4f:60:3e:cb:77:1e:73:1a:cb:dd:76:80:64:e0:3b:00:
0e:76:c5:f2:9d:9f:20:75:7f:57:51:2f:db:ee:b1:d3:84:b0:
d7:f4:2b:54:27:79:cd:cd:55:ca:17:6a:04:ca:eb:b9:5d:92:
70:10:de:50:d5:b9:6f:d2:57:ae:4a:9e:9e:7e:4d:75:11:fc:
38:d8:95:50:71:0c:fb:61:0c:91:2a:f3:6f:9b:5c:b3:f8:9b:
d7:3f:f6:2c:8a:79:77:2d:55:d3:2e:35:4c:7f:2c:63:f8:45:
93:8c:0c:10:a2:2d:49:d2:c8:b9:ee:47:27:2c:b2:93:7e:1e:
86:a2:80:d5:35:1a:c7:7c:29:5a:8f:0c:61:bf:07:d6:eb:78:
83:5a:54:61:b4:b6:29:bb:b4:69:c7:f7:cf:73:7c:41:27:30:
f0:af:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:21 2025 by rpki-client