Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: vw6EfcwLepTZxBrs3nAo7wB+DWpkODJWN5a25cgqmTM=
Subject key identifier: 39:CB:70:A9:35:14:0E:14:03:D0:FE:2D:C8:02:B0:93:49:B6:F6:EC
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 01974FD7DB12004C611B97043015BBE77C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 0FB6
Signing time: Sun 08 Jun 2025 14:00:35 +0000
Manifest this update: Sun 08 Jun 2025 14:00:35 +0000
Manifest next update: Mon 09 Jun 2025 14:00:35 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: oUJPaVeaxsDKyplH8WVGzIuKOMyK0sqyn31z3pn3+/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:db:12:00:4c:61:1b:97:04:30:15:bb:e7:7c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Jun 8 14:00:35 2025 GMT
Not After : Jun 9 14:00:35 2025 GMT
Subject: CN=39cb70a935140e1403d0fe2dc802b09349b6f6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:76:aa:2b:f7:d3:6f:83:0a:7d:bc:f3:a9:
a4:f4:15:9a:01:91:1d:7b:07:e1:9a:20:aa:e8:14:
21:e8:95:b6:89:5a:a6:ca:06:1b:e3:40:4d:6e:5b:
65:a5:75:d7:f9:1b:d8:12:af:d5:5b:0b:28:ad:1f:
80:00:d8:0a:e8:9f:02:5a:5a:91:c9:75:0e:66:6b:
87:54:49:19:c7:14:1d:97:c1:70:a8:ca:58:2f:c6:
8f:28:38:ed:f4:de:00:f9:eb:63:56:96:14:26:87:
5f:32:45:62:0b:9a:b8:88:60:ba:7b:75:d1:b7:04:
6c:2b:41:e5:54:43:bd:af:ee:a4:2b:d5:e2:ad:bd:
49:02:d1:d1:38:4f:fc:21:6f:c7:da:38:d5:68:66:
1a:8d:d4:bd:79:f6:04:3f:f4:1a:b8:1e:eb:99:b8:
bc:4c:70:c0:be:e0:fc:40:90:ea:cf:ed:12:bd:19:
ff:ae:c2:40:5c:3f:5e:2b:4b:ff:b7:f4:62:97:af:
a4:ad:94:5e:c5:46:b6:fd:ef:f7:bf:17:73:ff:42:
3b:88:55:a8:3e:7d:2c:23:00:3c:e0:e0:dd:85:3f:
e9:cb:9a:45:5c:65:e0:8d:b8:2f:cc:47:15:37:a0:
b1:b2:3c:e6:3d:70:71:75:b1:2c:14:b8:96:5b:9e:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CB:70:A9:35:14:0E:14:03:D0:FE:2D:C8:02:B0:93:49:B6:F6:EC
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a2:40:88:3c:64:3a:86:bf:8b:4e:11:84:f5:66:4a:d2:57:
7f:e6:91:aa:95:50:8a:ba:5c:67:95:74:9a:fd:9a:cd:f9:3f:
d8:5b:c4:e0:a7:fb:c7:d6:0b:81:ee:59:e5:42:56:7b:5a:ad:
6b:94:c9:29:1d:ba:1a:75:4d:42:a6:7a:a6:c1:7e:72:3f:6c:
f2:f7:db:21:3b:6b:20:c2:46:b8:7c:2f:e7:93:48:13:91:05:
4d:bf:92:e6:92:7c:4e:c1:f0:06:13:64:6e:2f:4f:73:ca:27:
c6:74:20:5c:18:8f:09:65:22:aa:56:52:be:6b:4e:1e:a2:35:
fb:c8:d5:9f:81:a5:25:47:f3:f5:df:a6:9b:d1:41:9a:54:eb:
6a:2b:d8:c8:34:db:a5:e5:75:0a:19:bd:d7:2f:2f:bc:a7:ce:
8f:5c:5a:ff:ee:e3:ff:54:52:9b:66:c9:20:cd:1e:d1:53:11:
a1:94:26:06:9f:90:4b:a6:36:8e:a7:75:f1:2c:c9:70:9a:ff:
31:b5:96:e4:fb:57:39:f3:1b:91:53:b7:3a:4f:34:4d:20:1e:
8c:81:1b:f9:85:d8:20:c7:78:32:8a:f6:9a:ed:75:63:6a:f3:
4f:65:a0:15:0a:80:5f:0b:de:a5:0d:b4:43:da:a9:a8:ff:90:
a5:1d:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:23:18 2025 by rpki-client