Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: eL3vhUgBcXafXRQ7OHCw+u4oqTR2WuCK7ajAnWPxOCM=
Subject key identifier: BB:F1:67:8B:1A:29:34:44:C2:8E:B3:0B:A2:01:4F:C3:5E:55:77:4C
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 0197458AF20B4D1C88057CDCC2B2DAD4CB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 14:00:23 +0000
Manifest this update: Fri 06 Jun 2025 14:00:23 +0000
Manifest next update: Sat 07 Jun 2025 14:00:23 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: QrQL0DloZZ4r5zGzV7rXA3sZiY6W+ssfZ5RkutgZomI=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8a:f2:0b:4d:1c:88:05:7c:dc:c2:b2:da:d4:cb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Jun 6 14:00:23 2025 GMT
Not After : Jun 7 14:00:23 2025 GMT
Subject: CN=bbf1678b1a293444c28eb30ba2014fc35e55774c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:da:03:c5:7f:31:90:3e:b2:eb:a1:05:e7:
88:0b:e7:d0:8b:61:e3:93:7a:9f:e4:7b:26:ab:ae:
8d:d9:ef:83:16:39:0a:28:f7:f1:01:55:91:1c:be:
cc:b6:54:3a:58:bf:63:75:48:58:9b:ed:6a:37:ff:
a5:73:5d:70:69:0f:4f:d3:43:f6:95:ef:ed:70:69:
29:60:0f:cc:b9:ff:7d:6c:2a:17:18:bb:c4:1c:75:
68:f7:6b:6a:03:96:b0:e7:3a:80:82:ac:2e:16:8a:
dc:c2:02:a6:64:50:f6:3f:b2:99:22:24:9d:2a:db:
37:af:57:9c:36:7f:2c:4c:17:a2:42:fe:93:74:39:
70:29:c8:10:d8:83:c7:88:bc:4e:36:b7:fa:bb:0f:
81:d6:92:c6:f3:47:3d:d8:2f:1d:35:b0:c4:96:14:
1d:e4:d8:ea:ca:c1:95:aa:1d:a9:a9:53:95:1d:8d:
ff:03:ff:9b:1d:14:85:d5:9c:c4:d2:10:45:d8:e0:
93:f1:53:73:90:6d:bd:14:6f:58:d1:7f:4e:0a:69:
c5:56:13:da:ad:56:13:85:b3:33:0f:6c:ec:ca:90:
8d:99:0a:49:ce:da:c3:9e:39:dd:7e:23:07:f1:0c:
9f:74:0c:d7:9b:7b:7f:fb:dc:a2:e2:1e:cb:a2:83:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F1:67:8B:1A:29:34:44:C2:8E:B3:0B:A2:01:4F:C3:5E:55:77:4C
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:90:ce:08:bf:cb:67:aa:53:03:29:ea:30:e0:b1:df:0f:e4:
0e:aa:44:49:53:0c:df:a4:61:5c:36:b0:5f:51:fb:f3:3b:15:
8b:4a:14:0a:1d:23:f0:ac:32:19:0c:84:86:d7:a0:d0:ba:aa:
85:ba:59:0e:ac:74:a6:54:9c:70:0b:88:32:76:e9:c3:84:42:
82:04:41:74:75:93:2e:79:d6:6f:a3:5c:2c:25:4b:e2:48:96:
ce:19:b4:b7:17:aa:c1:d3:77:05:b2:6f:e4:ba:73:e4:2a:07:
b1:f1:03:8a:62:37:32:7b:a9:28:b0:74:fd:42:bf:5a:fc:aa:
ea:a9:00:79:3d:cd:b6:be:ba:c9:44:06:e8:ec:af:20:78:15:
fe:2f:ba:b0:d8:d4:8e:b9:09:b9:9f:2e:9b:ae:57:6c:ad:0f:
42:e0:d6:c3:03:99:7d:0b:95:7f:df:01:db:98:a9:ba:8b:33:
9d:be:ae:95:fc:71:93:cc:07:aa:58:98:d3:66:4e:cb:81:48:
f7:64:e5:7c:b7:48:5d:cb:36:85:ea:63:b2:53:09:2d:00:05:
dc:c3:30:95:a5:f2:48:f8:12:56:13:2d:e8:73:32:de:51:cc:
31:af:c4:19:a7:48:e7:78:cc:5c:e0:07:4c:5e:69:e2:bc:ca:
69:a1:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:32 2025 by rpki-client