Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: u++Bt6FJoNwRMbCWO/R+6ohhDyyWOWpxujHBiV+5U+c=
Subject key identifier: 0F:CE:6B:B5:95:17:8C:CA:F1:A6:94:BE:9A:D0:E3:9F:90:81:13:A0
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 01974C32669F1EE922E600DE5ECF4D0F51C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0BE5
Signing time: Sat 07 Jun 2025 21:01:00 +0000
Manifest this update: Sat 07 Jun 2025 21:01:00 +0000
Manifest next update: Sun 08 Jun 2025 21:01:00 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: ZPgbVJLaf5hvoIxuMkQY4RqgqRj5A4t1r3vSQSC3Uds=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:66:9f:1e:e9:22:e6:00:de:5e:cf:4d:0f:51:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jun 7 21:01:00 2025 GMT
Not After : Jun 8 21:01:00 2025 GMT
Subject: CN=0fce6bb595178ccaf1a694be9ad0e39f908113a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:a2:e8:e1:a1:5d:4b:75:c0:f2:4d:8d:f9:
cd:07:b9:75:26:40:51:48:b4:6b:2c:e1:00:be:5a:
fa:d1:e3:af:25:e0:55:64:c0:b7:31:78:01:a9:ac:
c0:fb:d8:e4:07:cf:18:c0:be:cd:64:43:12:3d:f9:
52:6d:92:16:ad:e4:f4:a2:0c:f8:0f:d1:fb:d7:10:
09:51:b0:be:78:80:01:ed:f6:fe:c9:af:69:8b:33:
95:94:8f:4b:8d:a1:2a:c9:4e:fc:78:8a:8b:50:3e:
2b:ab:fe:93:88:f5:1e:64:9e:42:c6:f1:8a:9a:2f:
76:71:21:f6:79:53:0b:94:be:97:1b:6f:36:b6:ba:
6b:9e:5d:22:6c:61:3c:f8:fd:aa:53:8a:e0:a9:de:
5d:27:cc:55:e7:47:b5:e7:8d:25:9b:37:30:b6:bf:
32:ed:8d:60:73:e5:28:01:3f:2d:2c:ec:76:a1:a3:
d5:0f:82:6e:ea:91:e7:79:29:9b:76:5b:23:e8:a6:
c6:90:29:c7:dd:7b:6a:ec:6e:3a:5b:dd:0f:49:6e:
25:88:fe:14:d5:0a:f3:d3:3a:ae:14:dc:93:f7:fc:
6e:60:5c:4b:cf:bf:46:84:26:84:25:8b:5f:4d:ec:
0e:a9:66:a7:66:e2:18:3b:3d:19:42:e2:6f:6f:3f:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CE:6B:B5:95:17:8C:CA:F1:A6:94:BE:9A:D0:E3:9F:90:81:13:A0
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:da:8a:21:7d:5d:17:09:92:43:29:f0:08:47:4b:cd:0d:c0:
c1:10:75:04:aa:3f:ef:98:fd:40:9c:39:ed:95:71:68:cf:c2:
7f:7a:f1:57:00:0a:17:e8:87:3c:8c:7e:47:fa:07:b8:4c:c9:
be:e7:d9:4e:98:d2:28:32:e8:f7:51:1b:e7:d9:af:d4:96:ea:
5b:d4:9a:56:3e:34:b7:66:6e:43:0f:27:0b:c4:f7:bc:97:ea:
20:ff:9d:51:dd:89:28:6d:34:12:10:49:30:6d:a7:e1:8a:96:
e2:5f:e0:40:fc:43:97:e5:44:78:43:58:fb:f6:10:44:57:49:
80:eb:54:1b:f9:22:a5:6c:ed:ee:c1:c7:63:d7:d6:fe:94:4a:
89:dd:50:02:08:fe:1a:f7:83:f9:9c:a4:32:64:fb:c6:52:e6:
84:32:66:42:5a:dd:53:e2:e0:ee:5c:31:fb:a8:f7:17:e9:a6:
b2:86:25:f3:87:0a:f8:13:f1:a8:76:18:19:00:89:35:dc:67:
66:30:ef:d0:88:a1:cf:7a:bc:97:f7:04:ef:17:bb:37:38:a1:
81:78:00:ab:85:12:76:94:88:ea:73:ac:96:d7:af:68:25:10:
b4:02:fb:a8:16:43:b7:84:85:73:78:af:1e:40:b4:31:05:a4:
07:ba:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:02 2025 by rpki-client