Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: VHNpMWfCPOdnrmBnXI/mzIpSsSNUUo0Jp3Atm/d1Hts=
Subject key identifier: 52:B6:84:F5:C9:8F:AC:6F:F7:5A:D7:96:A8:A1:E1:06:9A:DF:38:6A
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 01974D0DE4A261E8674369A382948958AF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0CBB
Signing time: Sun 08 Jun 2025 01:00:45 +0000
Manifest this update: Sun 08 Jun 2025 01:00:45 +0000
Manifest next update: Mon 09 Jun 2025 01:00:45 +0000
Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: GTvXlqqjUPe7KRDMMA0URCWghz91RW0deYsbIQLlp+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:e4:a2:61:e8:67:43:69:a3:82:94:89:58:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Jun 8 01:00:45 2025 GMT
Not After : Jun 9 01:00:45 2025 GMT
Subject: CN=52b684f5c98fac6ff75ad796a8a1e1069adf386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:aa:10:4a:b4:cc:19:ec:87:4e:f4:b9:12:
c7:4c:b3:34:e8:9a:f0:b6:b9:f6:8f:9e:c6:c0:dd:
3b:fd:ea:5a:5b:3f:2c:43:b0:29:49:2d:79:3a:94:
82:22:c2:34:4d:7b:65:dd:6e:ea:62:d7:40:60:eb:
95:43:1c:a0:26:13:ac:57:63:b7:34:90:57:27:c1:
76:1a:f0:0a:a1:a4:cd:5e:61:e7:6c:8a:d8:31:d0:
df:8d:c1:79:86:09:0d:1e:88:32:34:8b:43:2c:d8:
17:c9:85:88:fb:3d:1c:21:6c:6a:84:45:9c:e8:ca:
a1:77:97:f9:06:34:de:06:02:e8:51:e5:32:18:9a:
68:6d:73:46:fd:52:25:11:74:95:4f:3c:18:cb:8b:
f4:0a:02:d4:30:be:0d:06:b4:88:28:c3:39:95:05:
b1:1b:a0:75:49:c8:fc:d0:01:73:fe:db:8c:0d:a3:
cc:ff:3c:9e:60:0a:a5:41:83:64:48:f7:3a:67:f3:
d0:ea:43:be:d8:4f:e5:a6:4f:a7:92:7b:76:7d:2a:
be:a6:48:56:8d:71:74:b3:be:38:1f:53:b6:a2:f5:
62:70:71:dc:3d:02:18:36:95:25:75:0d:32:e6:6f:
d5:9a:4f:b9:61:17:6c:8a:5a:4a:de:31:e2:c9:10:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:84:F5:C9:8F:AC:6F:F7:5A:D7:96:A8:A1:E1:06:9A:DF:38:6A
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7e:30:a5:9d:38:b1:31:c0:f2:d7:37:8c:9c:3d:e5:8e:91:
11:09:b7:d2:48:e6:0f:38:ba:19:3d:1f:97:13:12:61:78:51:
b2:fe:b2:bf:17:b1:4e:47:10:10:22:54:d6:6e:5d:dc:c4:73:
bc:7c:7c:e5:d5:06:fe:0d:f3:eb:23:aa:54:37:71:ea:06:0e:
1c:97:04:41:2c:fc:d4:7f:9e:b5:48:77:e6:e2:a1:f3:58:d9:
f8:db:0e:0f:df:30:c5:4a:b7:21:7f:2e:7f:92:af:67:37:0c:
4d:ac:6f:d1:74:40:ce:fb:0d:ca:3c:c6:77:0a:06:3f:f3:19:
a9:ee:72:a7:52:e3:39:58:1a:9d:b5:e0:ab:56:ff:96:c3:37:
00:ce:c8:82:9d:04:9f:f5:7d:4e:18:a2:fd:a5:10:45:c4:b8:
0b:5e:27:6c:09:9b:e4:89:e9:40:d5:72:1e:dc:f2:01:62:f4:
d1:e7:20:0a:bd:fe:5b:ae:73:e9:e0:e1:2f:50:7a:a2:32:a1:
ce:e5:85:5d:22:28:91:ed:a8:1b:b2:04:ab:fc:3d:7f:a8:8b:
40:34:d5:4c:7e:f2:ed:16:85:d0:dc:8a:65:8d:79:ac:55:a2:
42:17:f5:d4:03:57:82:5b:4f:9e:45:dc:6d:d2:25:a6:a2:b0:
df:7f:2a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:23 2025 by rpki-client