Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: L7bxK9rZ57kmo2jERzuoyHmanqlcNbiUI82KJWf/cpg=
Subject key identifier: 28:98:4E:4B:33:DD:68:60:52:3E:B6:2A:00:C6:63:AC:0C:62:53:5F
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 01974E5733D596D5553BADFC226963F58828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 09C1
Signing time: Sun 08 Jun 2025 07:00:27 +0000
Manifest this update: Sun 08 Jun 2025 07:00:27 +0000
Manifest next update: Mon 09 Jun 2025 07:00:27 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: 46b1O1aw7zSeBY5lvzzOAs89yX/lOSu9bt35ZDq6ZU0=)
2: kJep7a3FRkNs3KQgMS6kDueqf3w.roa (hash: dBpCegRmmKMPJmbKSXlcIE1LjID2HAF4dE0zWcCDOWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:33:d5:96:d5:55:3b:ad:fc:22:69:63:f5:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Jun 8 07:00:27 2025 GMT
Not After : Jun 9 07:00:27 2025 GMT
Subject: CN=28984e4b33dd6860523eb62a00c663ac0c62535f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:64:c3:c1:b9:a6:0c:f1:43:9f:a7:67:4f:
98:53:e0:1c:dc:45:c4:8e:4e:c2:f3:be:98:8a:45:
81:44:a9:e9:d8:9b:83:7d:a9:6b:ef:16:9f:8f:de:
d8:66:2a:04:af:b4:f6:a7:b3:e7:7b:e7:ef:58:8b:
14:6d:32:87:a1:17:24:32:23:c0:02:93:f7:d4:05:
9c:f3:40:22:7c:78:52:aa:09:14:8a:2a:ee:3f:20:
7a:a4:d4:b4:d4:41:08:43:e5:a5:94:cb:8b:4a:a2:
9b:1c:50:66:39:0f:72:34:2f:53:e5:ef:11:81:3b:
c9:c0:03:6a:56:a4:61:ce:e4:c7:b0:89:3a:2b:58:
f2:aa:66:d9:31:ac:f0:8f:c8:9e:78:8b:a8:d9:c6:
96:08:68:87:42:1f:b8:f2:85:c4:57:cf:a9:fa:89:
81:7d:8c:ec:1a:94:35:b4:aa:16:2d:e9:61:51:ba:
46:33:5d:05:28:6f:32:98:e3:51:1e:e6:ab:3e:80:
2f:c5:2b:f5:41:a5:78:92:3d:95:e3:e9:c3:f3:f0:
69:08:9f:d8:9f:f0:ba:aa:00:81:ab:f8:46:62:32:
30:e1:eb:f5:36:36:ed:06:a0:75:6a:0c:b5:c5:64:
7b:43:38:45:68:e8:17:de:43:dd:8c:d5:aa:dc:09:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:4E:4B:33:DD:68:60:52:3E:B6:2A:00:C6:63:AC:0C:62:53:5F
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:be:69:36:cb:60:cb:0a:a3:dd:8c:c6:e8:92:d2:cd:05:1e:
22:ea:73:a2:8e:93:13:f1:05:d0:d7:08:09:37:3c:e4:cc:df:
25:4c:5e:2b:80:f1:08:5d:56:43:10:4d:6a:8a:7c:63:32:3a:
5e:27:d7:33:34:18:da:2b:38:7e:7d:96:ed:e8:42:b6:84:f6:
7d:4b:24:22:6a:24:3e:f6:7b:ef:66:c4:18:15:c8:32:ae:6b:
49:cd:2a:ed:57:02:9c:64:9e:d5:8b:3b:47:34:cd:86:52:f3:
34:4b:ce:16:4b:65:4f:73:42:51:ee:d4:7c:2e:18:55:48:c4:
cf:95:d1:56:db:3d:24:f0:c8:58:37:0e:46:3f:d4:fc:db:f1:
6e:43:fe:48:d6:46:fa:81:e1:5f:38:88:f1:fa:d8:6e:d8:6b:
2c:33:13:30:91:37:1d:9c:64:2a:64:93:ce:0e:1e:6a:e2:34:
22:e7:d9:bd:a0:88:a9:a7:f0:46:d3:13:1a:79:92:1c:a6:56:
e0:7e:df:62:44:c0:a0:1d:a8:be:b6:6c:f5:aa:81:0e:9f:60:
c2:e8:c4:ef:e3:03:f3:20:c1:c0:81:c2:0b:bd:8d:bd:f2:bc:
94:e7:db:6b:3e:37:9a:2a:b2:54:27:1a:36:31:7e:95:ec:e9:
17:7a:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:40:44 2025 by rpki-client