Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier: jLJMJL2o5mj1qI7iGr+DmT1rEV02kMjMUt/t3j3zjTQ=
Subject key identifier: 2F:71:95:57:A7:BD:BC:50:D7:40:71:2D:2E:C0:85:00:FD:C8:FE:D8
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 0197C982BFE6B7D1F9AEF4C48BB706241D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number: 15BD
Signing time: Wed 02 Jul 2025 05:01:18 +0000
Manifest this update: Wed 02 Jul 2025 05:01:18 +0000
Manifest next update: Thu 03 Jul 2025 05:01:18 +0000
Files and hashes: 1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: 3Kw9yhKIqldqgx0O+J4Fo+tKF9phxRW4Gy863eJA6RE=)
2: jNQsNrl4OFuXyBApJXCWmUTjpZk.roa (hash: N8A4PApBA9zWi0+/3/LkUNmVkYXpRd84xcIjX23MSx8=)
3: sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa (hash: XDzfTTG5ZalMDxihCFcFH9odfMn9DlFUshPNduKnlps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:bf:e6:b7:d1:f9:ae:f4:c4:8b:b7:06:24:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Jul 2 05:01:18 2025 GMT
Not After : Jul 3 05:01:18 2025 GMT
Subject: CN=2f719557a7bdbc50d740712d2ec08500fdc8fed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:e5:94:28:39:95:1a:48:53:f1:6b:5e:d2:
db:23:37:b5:b0:4f:ce:a8:3b:a5:71:e2:eb:2b:af:
fa:e3:ba:ec:fb:f5:29:e4:a9:b6:70:24:16:fe:62:
c5:fe:a6:13:ea:8d:af:a8:33:57:82:38:5b:c7:08:
d0:2e:1b:e9:dc:e3:fb:57:5f:93:af:e0:f7:f5:67:
01:d9:7b:a9:fe:97:a4:5e:d2:5b:26:a4:9b:8a:ad:
6d:f6:b4:f6:4c:d5:8e:35:37:d6:63:b1:2d:06:b8:
e6:88:02:8c:4a:98:80:ea:fa:ec:8d:c5:d6:f6:92:
d9:98:d3:3a:28:0a:71:92:47:63:cb:f9:1e:41:4b:
30:87:20:50:27:7e:67:44:5e:4f:08:ed:10:bd:9a:
e6:42:2a:fd:e5:ef:73:28:21:ff:e2:ce:ed:2b:b2:
8b:db:e2:93:0c:bf:d9:a2:a9:65:cd:7c:34:8a:88:
fd:02:66:e0:3d:be:44:f9:24:9c:a0:62:f9:3f:33:
d8:43:db:1a:05:c5:0c:e2:35:9b:fd:f7:d9:6d:94:
69:40:9e:23:7a:b5:c6:03:fa:31:fd:cd:14:6c:41:
48:3a:c3:d3:e7:3c:cd:7a:d9:74:17:d0:8c:31:37:
17:78:83:8d:78:7b:ae:a0:43:b5:a3:81:5d:05:e9:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:95:57:A7:BD:BC:50:D7:40:71:2D:2E:C0:85:00:FD:C8:FE:D8
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c6:8a:8a:49:58:29:66:bc:84:87:ee:40:eb:ee:77:3e:c2:
62:ad:a5:be:b3:36:cb:43:f3:19:d0:0f:de:26:6d:19:be:93:
1a:8e:dd:c4:da:20:15:af:c5:f5:5c:ca:bc:4c:d7:39:8c:4e:
be:37:aa:a4:1b:1d:b5:2b:53:4c:75:40:a0:70:2f:62:e9:1a:
dc:56:83:8b:98:34:50:ac:a1:02:5a:07:24:c1:c4:c6:14:3c:
b5:8b:d6:dd:aa:05:3a:5e:1e:83:2c:03:f5:43:5a:27:bf:cd:
87:bf:e6:68:4b:e4:57:4d:b1:08:1c:e7:87:13:9a:a6:75:d4:
f0:a9:3b:72:0b:5f:25:8d:a7:4e:af:44:f2:c3:f3:27:75:72:
1f:e0:60:1b:dc:4f:b6:56:c9:23:38:be:19:54:2e:b8:dc:69:
5b:33:ad:13:1d:5f:6d:54:fb:60:e3:34:48:6a:8e:c7:6c:d6:
f4:22:3b:31:e9:88:00:a8:e4:a8:90:4e:d0:27:ef:de:15:39:
5a:3e:58:a5:98:ac:81:ed:84:61:4d:68:d6:86:30:bf:c4:2d:
93:ed:c1:c2:5c:58:bc:e3:73:11:e0:27:f8:f8:a8:24:eb:4e:
16:ed:0f:0f:fc:f5:57:00:de:99:0a:90:f1:81:b6:51:68:45:
dc:84:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:09:28 2025 by rpki-client