Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: hjxw9VxfPJpJq78PPf8iOVwqUO/Q//ESi4Z17wCs9bI=
Subject key identifier: BF:27:D3:9B:B9:88:A1:DA:B1:5E:11:4A:1E:D5:81:21:9E:7E:3B:C9
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 01975D256323DA93340B21A4E63B6B972B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 1517
Signing time: Wed 11 Jun 2025 04:00:20 +0000
Manifest this update: Wed 11 Jun 2025 04:00:20 +0000
Manifest next update: Thu 12 Jun 2025 04:00:20 +0000
Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=)
2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: al8u5vOhT2y4wlshW8JOF+LUKzqM6MN0NhNktcoYMOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:63:23:da:93:34:0b:21:a4:e6:3b:6b:97:2b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Jun 11 04:00:20 2025 GMT
Not After : Jun 12 04:00:20 2025 GMT
Subject: CN=bf27d39bb988a1dab15e114a1ed581219e7e3bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:b8:8d:9c:fc:1f:d5:33:d5:c1:c7:5b:dd:
91:eb:8c:dd:b9:97:4a:00:ac:b4:0e:6f:a9:e4:0e:
ac:a6:d2:6e:64:2c:53:86:95:4f:e0:3c:a9:04:75:
94:15:f1:a7:cc:7b:a1:5a:e3:07:53:16:85:89:5c:
b9:b9:4b:3f:df:0c:cf:36:2f:26:40:f7:fb:88:2f:
77:29:c2:56:11:b6:27:15:e1:9d:4f:4c:06:7b:cc:
f8:f1:67:82:ba:1f:b4:f0:99:0c:6f:90:78:d2:4e:
ec:f4:0c:65:43:6c:82:06:b7:c8:df:0f:76:e9:9d:
00:bb:41:d5:ff:86:62:95:c6:7a:28:2f:bb:b0:5f:
d2:33:09:53:fb:fa:90:e8:81:47:fb:54:62:3a:c0:
6b:ef:6c:ce:8e:48:01:64:81:a7:37:f6:da:1c:e0:
07:44:fe:59:19:53:11:e9:32:01:3f:14:f2:e0:de:
11:98:7d:e3:44:4c:55:e0:99:ef:5b:2d:be:88:ac:
26:76:5d:02:7f:79:2d:e5:68:9e:1b:3f:e1:a1:f7:
ac:7b:e9:2c:a9:59:5d:f5:de:2b:79:ec:c6:1c:51:
74:fa:cd:6f:d6:e2:30:e6:c0:ac:b9:71:8e:e6:48:
14:5f:b6:42:7f:cb:e6:b1:c4:a6:77:d8:04:0c:7f:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:27:D3:9B:B9:88:A1:DA:B1:5E:11:4A:1E:D5:81:21:9E:7E:3B:C9
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:54:5f:f1:9e:a9:89:7c:de:00:47:83:d1:7c:e8:c7:6b:25:
30:f5:a9:37:ce:b0:a5:0e:c8:25:4a:0f:49:5b:1d:39:4f:4a:
8c:ef:b0:1c:9c:21:ef:47:3e:79:48:c4:14:38:43:9e:ae:ef:
5d:30:41:3e:78:45:c7:fc:04:aa:53:dc:1a:b6:34:4d:46:3c:
aa:66:72:4d:be:d4:cb:e8:51:b2:b1:8d:84:19:d9:ee:aa:01:
cf:19:06:06:71:9b:ee:77:c0:6f:b5:62:27:68:9a:13:ec:ee:
ac:7c:2d:d4:09:49:3d:65:b2:32:e8:56:c1:58:4b:73:52:54:
d0:69:51:71:c9:0a:eb:56:2b:d8:16:bf:44:53:be:4b:ee:e0:
a6:95:02:31:1c:0f:21:12:ab:1f:c3:07:16:69:49:4f:17:0c:
f7:3d:05:43:08:73:12:60:2e:19:be:a7:d8:a6:3e:b5:13:a9:
43:f5:9e:c1:00:ab:77:1c:84:cc:83:1e:6f:ce:da:2d:8b:ce:
b2:25:a6:bb:2d:1a:ee:60:df:f9:b7:2a:b9:7b:fb:16:aa:8e:
f0:09:d5:eb:52:3f:8b:64:0f:a9:49:3b:87:4e:d7:4b:c0:68:
6a:eb:a9:83:45:95:14:ed:b0:e3:07:2d:62:86:7a:62:a4:bc:
31:cb:a7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:12:48 2025 by rpki-client