Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: VB4V2wePSGAhXPV1g6k6MBjCUEbU7QP5DEwUuhmkIoU=
Subject key identifier: CE:D0:87:72:33:78:8E:94:E7:2F:BC:D6:24:C2:DA:8F:6B:65:1D:53
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 01974F6A23AD89496D4BB514CBF3847E1CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 12:00:45 +0000
Manifest this update: Sun 08 Jun 2025 12:00:45 +0000
Manifest next update: Mon 09 Jun 2025 12:00:45 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: mmfRDgND/86YsSr2MHs4fOXTYb2u1u8Ov/WX5nk9Ez0=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:23:ad:89:49:6d:4b:b5:14:cb:f3:84:7e:1c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jun 8 12:00:45 2025 GMT
Not After : Jun 9 12:00:45 2025 GMT
Subject: CN=ced0877233788e94e72fbcd624c2da8f6b651d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:5e:98:81:3a:9a:f1:14:11:67:c6:d0:01:
e2:38:2d:18:92:ab:1a:6f:7b:70:87:d5:cc:14:ab:
76:75:30:eb:4b:1e:4a:83:59:f4:86:e8:95:99:f6:
6b:f8:12:6e:9d:88:ed:f1:da:b9:7c:1d:9a:c4:0c:
28:c0:fb:76:6a:45:87:72:b8:8f:7c:ec:be:44:1d:
87:80:e9:14:40:a2:b1:f0:21:4c:bc:a2:f8:54:55:
99:f2:a0:3e:d4:a3:58:c5:dd:9a:7b:ef:5d:d3:55:
dc:c0:e5:fa:15:5a:4e:c8:d1:af:2c:b0:23:ef:e8:
f7:85:f9:09:01:92:2e:46:2c:72:c4:a6:66:d5:93:
11:99:eb:5b:56:11:7f:2a:0c:86:65:2d:06:99:cf:
53:48:70:10:7b:37:60:8d:38:0c:05:70:1d:a6:fc:
f3:68:0d:66:26:b2:7c:9c:13:74:2a:31:02:16:97:
0f:ca:96:d8:36:bc:5e:6b:52:aa:2e:b3:2d:7d:85:
e4:23:05:96:c5:99:22:3c:0c:9d:20:db:79:93:40:
f0:fd:47:dd:dc:38:50:06:32:2d:90:53:77:e1:10:
8f:5a:2e:f4:32:20:91:56:06:32:46:6c:9c:45:94:
f0:25:62:88:f1:ba:1a:45:83:e1:ee:2a:ce:69:04:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D0:87:72:33:78:8E:94:E7:2F:BC:D6:24:C2:DA:8F:6B:65:1D:53
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:6c:fd:b0:88:b8:8c:71:00:e7:b1:8e:12:c7:78:1e:34:
29:e0:89:ea:db:8d:65:ab:44:4a:16:32:93:e1:56:2f:1a:21:
16:27:66:4b:c7:02:a8:f7:87:d0:0f:73:48:e7:97:5e:1a:10:
38:50:e9:a0:36:bb:f4:2d:95:52:81:e5:8b:62:62:05:25:32:
53:f2:21:75:20:45:cf:68:e6:87:3d:b5:12:65:08:9a:1a:b8:
e5:05:2a:81:5c:85:2e:1e:7f:61:41:01:c1:16:e0:05:c5:97:
6a:70:0b:f2:c4:12:ea:01:c6:91:c1:d9:82:d7:cb:92:45:97:
45:35:bc:ce:4b:3d:b9:9d:a5:d9:96:f8:2f:8b:ed:72:bd:8f:
b2:1c:24:7d:fb:3a:3b:33:ed:c3:f4:b0:eb:7e:f4:d0:fd:85:
2c:e2:7d:75:f7:f5:65:39:e5:01:49:d2:0e:da:42:8c:8c:25:
6e:94:34:98:1f:27:2d:f0:e4:14:af:bc:1a:96:91:fa:ff:d8:
d0:ce:3d:e8:80:fb:72:7e:56:76:2b:8c:72:2e:b5:68:11:05:
97:99:f4:9f:ee:1f:4d:88:86:2c:e7:37:c7:54:70:2a:13:77:
49:a5:7d:ba:69:14:a4:6c:15:4a:c1:f7:e2:02:3d:c0:78:8c:
fc:19:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:29:58 2025 by rpki-client