Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier: zqwhFhVZdURLwtB+9MBRAjKyDLzAqjTWye2Uyyjaq7o=
Subject key identifier: AE:5A:A7:57:18:54:77:07:B3:BB:AB:BE:97:1F:3B:63:DC:5A:E1:52
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial: 01974FD82149EFD02EFD31970F7554287C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 14:00:53 +0000
Manifest this update: Sun 08 Jun 2025 14:00:53 +0000
Manifest next update: Mon 09 Jun 2025 14:00:53 +0000
Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: l4vf2qFJzAzEqeggoCTrFz2a7jJ0ScvNbRgeaSAcolo=)
2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:21:49:ef:d0:2e:fd:31:97:0f:75:54:28:7c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Validity
Not Before: Jun 8 14:00:53 2025 GMT
Not After : Jun 9 14:00:53 2025 GMT
Subject: CN=ae5aa75718547707b3bbabbe971f3b63dc5ae152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:ec:28:bc:d9:ca:18:c0:4f:27:b7:f0:f7:
0c:22:1c:6e:1f:52:f5:29:cb:9b:84:f8:61:d4:0b:
61:3f:05:c7:70:85:db:2f:e1:d7:f7:31:81:24:ef:
37:12:b4:9c:76:07:70:5f:41:d4:ac:ff:02:98:1e:
e7:9a:98:4e:23:e3:7c:a8:4c:0e:7e:22:55:08:35:
39:d7:b5:45:df:20:99:f0:82:38:f8:c0:c5:00:6c:
fc:89:22:8a:0e:d5:31:a8:b4:4c:e2:3f:dc:08:1e:
9d:2d:5d:be:5f:d4:b2:73:f4:e7:51:b9:9f:4f:d7:
76:30:4a:7c:7a:35:23:ad:0e:cb:e1:4c:97:6a:df:
0c:b9:77:c4:ba:c1:07:81:3a:17:87:f0:3e:19:bd:
2b:79:d3:84:6e:a1:85:45:57:1c:54:ca:2a:9a:a5:
b9:67:a9:ea:71:aa:dd:97:f7:fa:a7:5b:f3:77:db:
25:51:7a:2b:1d:e5:3b:c1:31:bb:c3:db:05:e7:ac:
26:a5:56:bb:0e:4e:2d:14:5a:b8:06:07:86:8c:b4:
fd:ef:48:8d:ca:a0:53:d1:bf:31:e2:6d:66:aa:ca:
d0:da:2a:c8:83:dd:ac:d3:b2:4a:eb:e9:aa:25:02:
18:90:1a:16:f9:18:3c:78:a8:d1:cd:79:50:8f:b9:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:A7:57:18:54:77:07:B3:BB:AB:BE:97:1F:3B:63:DC:5A:E1:52
X509v3 Authority Key Identifier:
keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:13:a3:2b:c1:ea:76:87:d8:c6:8f:bf:28:ab:8b:15:6d:8d:
41:9a:30:ec:4c:d6:05:99:8d:4f:45:52:c7:64:6f:84:a7:6c:
e0:d4:91:e7:7f:5c:1c:a1:9b:07:99:20:e6:c8:f4:8e:8b:9c:
ea:d0:13:4f:5a:09:87:5c:4f:8c:cf:96:f1:ea:d7:c1:89:44:
c7:20:9d:cc:13:62:16:85:34:ca:27:37:22:6b:48:58:75:a9:
f9:3d:9e:7e:b6:b3:b4:7c:09:ee:2d:c0:c8:2f:eb:62:1b:b1:
ad:41:f0:fd:99:e0:4a:4e:3b:89:cf:a0:58:57:c8:1c:12:ba:
94:ad:a0:0d:43:cb:08:7d:94:56:b1:43:19:c4:2b:67:d3:f9:
4a:02:37:5e:b2:50:1d:bb:bd:38:8f:e9:89:08:46:1b:38:86:
d2:36:dc:b4:b3:a4:c4:57:0b:9d:6b:df:c2:62:86:93:63:c1:
48:9a:f5:a3:eb:94:1d:5c:9a:ad:34:45:70:b9:d1:3d:ef:cf:
a2:c8:84:d6:4b:b6:e2:d9:3d:72:53:3c:e4:f2:93:07:b6:1f:
66:70:9f:37:f4:7b:8d:a4:dd:b6:aa:bf:62:30:ed:f4:26:9e:
eb:10:5b:63:92:ee:ed:72:0a:b2:de:54:59:20:03:52:ad:4b:
06:e6:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:26:41 2025 by rpki-client