Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
File: cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft (raw, json)
Hash identifier: 8OMu9Sb9cD91JGoo28z9B3xIYe+nm/tJaMi2JI3p7GQ=
Subject key identifier: 5B:5C:1C:AD:7D:66:1A:04:99:DC:D2:28:15:A5:5D:9D:D6:42:18:98
Authority key identifier: 73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
Certificate issuer: /CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Certificate serial: 0197DAACF8DF3D8DF7B6E545A24DE99BFE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
Manifest number: 124D
Signing time: Sat 05 Jul 2025 13:00:58 +0000
Manifest this update: Sat 05 Jul 2025 13:00:58 +0000
Manifest next update: Sun 06 Jul 2025 13:00:58 +0000
Files and hashes: 1: cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl (hash: Xmpt4E7GevRcVtTk4mmqK7FkF4RKOCM0vFrsc2hoPiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:ac:f8:df:3d:8d:f7:b6:e5:45:a2:4d:e9:9b:fe:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730bd22d76b7414e8e2c56027bb2a1c4c8710d7f
Validity
Not Before: Jul 5 13:00:58 2025 GMT
Not After : Jul 6 13:00:58 2025 GMT
Subject: CN=5b5c1cad7d661a0499dcd22815a55d9dd6421898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:3d:77:ad:60:58:ad:e1:2e:8b:2a:b6:d8:
e7:fa:cd:e5:79:78:be:82:0e:13:08:a7:a9:fb:9d:
f1:6e:b3:70:01:f7:b8:f9:da:e6:95:6e:1e:5f:e4:
3b:26:2e:be:9d:88:a2:60:d7:1d:e4:cc:12:ef:fc:
6d:24:60:1a:40:91:d3:cf:c8:1c:6b:2e:5f:f8:6d:
7d:e4:26:c9:00:ac:54:ea:31:c3:50:f2:7e:4c:50:
21:0f:3d:75:74:5a:de:af:cc:71:ee:f6:fc:b7:1d:
2a:f1:e7:bb:91:6d:95:60:9e:f8:b9:06:ad:11:3e:
3c:8d:c9:4e:55:4b:5c:17:e6:a6:5a:47:aa:69:01:
aa:e7:1b:dc:af:cd:ef:b4:10:17:b3:a4:15:b0:d8:
b4:da:58:a1:31:c1:0b:3a:1d:d9:12:ea:bd:e7:cd:
33:fc:db:ad:a8:ab:2b:6c:05:7c:45:a5:be:1a:56:
6f:f7:98:a5:e3:0f:74:e3:5f:c7:ee:a8:d3:e4:03:
45:f4:0d:d7:ff:ba:a7:77:41:18:5a:91:54:11:f1:
03:19:df:03:88:c3:3d:74:63:ce:a8:66:2f:ab:69:
b1:bf:20:28:68:ea:88:c7:64:7e:d5:8b:7a:2f:fa:
a2:7b:42:15:73:a2:a6:ae:55:45:74:5f:7e:8c:04:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5C:1C:AD:7D:66:1A:04:99:DC:D2:28:15:A5:5D:9D:D6:42:18:98
X509v3 Authority Key Identifier:
keyid:73:0B:D2:2D:76:B7:41:4E:8E:2C:56:02:7B:B2:A1:C4:C8:71:0D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwvSLXa3QU6OLFYCe7KhxMhxDX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7fb7a8-fa8e-4fe1-9c7f-9887632078de/1/cwvSLXa3QU6OLFYCe7KhxMhxDX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:57:ea:8a:86:33:5f:2b:2e:c3:a9:3d:fa:fe:c2:96:2f:3a:
f2:25:c2:fa:e8:a2:36:95:d1:1e:8b:f6:47:67:c8:c9:23:a9:
13:d2:c8:c5:61:40:1b:ef:bf:ff:c5:bd:ab:c0:6e:76:2f:42:
55:40:aa:9a:40:82:ad:1e:a2:ab:b5:93:65:38:5e:6c:60:f5:
b6:24:00:91:75:de:d7:81:ba:97:28:29:50:80:60:3f:c6:97:
02:23:0e:f8:9c:3b:2d:54:9f:c5:df:0a:a2:5f:1c:97:91:a5:
2f:e0:f1:ca:84:d8:b5:c4:7e:c6:24:e0:ed:5d:c0:a4:9d:2d:
69:6d:d6:b8:b0:f7:c0:de:7b:9b:25:17:94:00:53:08:be:9c:
66:1b:86:06:58:ec:6d:3a:41:6a:a1:ed:57:c6:4a:dd:43:a1:
a2:4e:17:cc:b2:9f:9a:03:2f:65:35:c9:83:f7:7d:12:08:29:
fe:ec:2b:49:fc:eb:4a:1b:33:e9:90:cc:f4:77:57:e9:a0:17:
85:3b:f4:5b:6f:65:84:be:ad:29:fd:9f:68:1d:d3:af:87:8d:
dd:c5:1b:6f:bf:ad:9a:10:f0:57:47:8e:d3:79:70:59:ec:a1:
b3:13:9f:2c:ca:c1:b9:3c:33:be:c9:67:ca:c5:a4:e4:6b:c5:
12:c2:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 16:06:50 2025 by rpki-client