
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
File: cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json)
Hash identifier: MPqnzG+nXyJf5ZG2SuEF0KHOj5w9G5tzBpQA8xRb6k4=
Subject key identifier: 34:1D:4E:34:D6:54:9D:9F:50:B4:D6:4F:5B:BF:D6:3A:79:93:26:4D
Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Certificate serial: 0197643A633472601E7F636603727FBD4885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
Manifest number: 1590
Signing time: Thu 12 Jun 2025 13:00:37 +0000
Manifest this update: Thu 12 Jun 2025 13:00:37 +0000
Manifest next update: Fri 13 Jun 2025 13:00:37 +0000
Files and hashes: 1: 8Tphwf2TdCn6_ko-jZ8YIaCMG4Y.roa (hash: EBGUP9Onjc28Spxu+Bc1P0vLX2s/3Esh3HDfGA5b/yg=)
2: TegEFm13uYuDaVYWPUq_NWyfFhw.roa (hash: Z0NpRN8gnuSXynuy4afFeS+fqs/16nspEy2hNFbDueU=)
3: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: hYUue7qQe6gRN2N62ZslTOvN8Gt4LRlUelEwlxRpDZg=)
4: fNW98zG8YgdTIxQopzVptDv3vEA.roa (hash: oH5A9HkaHxcIBBsSALBiEtsRJXsDnYZkpZH6oV0XeF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:63:34:72:60:1e:7f:63:66:03:72:7f:bd:48:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Validity
Not Before: Jun 12 13:00:37 2025 GMT
Not After : Jun 13 13:00:37 2025 GMT
Subject: CN=341d4e34d6549d9f50b4d64f5bbfd63a7993264d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:57:37:50:d0:2f:c6:91:1d:c3:76:3b:ae:
14:d5:a5:0d:be:19:82:33:ab:4c:8e:ee:b0:45:6b:
34:97:20:bb:99:38:ac:67:38:18:54:6d:27:ff:e0:
87:23:bd:4e:10:6f:af:f3:7b:9b:5e:f7:e1:ac:a6:
5b:4e:d5:33:25:a9:d3:a2:c6:30:f2:46:57:6d:b3:
02:b1:e1:b4:68:49:45:8f:a7:42:d9:a3:cf:f9:4c:
2a:a5:25:9c:2f:ac:6e:5a:06:a4:5e:ab:53:cc:f7:
68:94:51:4b:ed:df:ae:56:fa:f4:de:67:67:09:a6:
50:2f:e1:f0:4c:38:d0:ee:87:6e:34:4d:a8:17:07:
a6:1f:6d:e6:96:a5:b5:7a:d9:66:f4:1a:81:2e:8c:
0a:1f:43:21:14:6b:c0:4b:c6:bf:35:3b:54:5b:7b:
90:c5:ac:2f:a9:4a:7d:ab:3b:3a:20:d5:22:d5:76:
53:04:4b:d3:f3:4b:3b:85:cb:6d:90:df:71:cf:58:
17:d2:46:10:5d:91:0f:c3:18:1b:fa:89:f5:ff:86:
0d:a3:7c:99:66:71:34:59:ca:ca:40:5d:6d:ef:15:
99:7f:12:fc:f8:75:65:e4:3a:d3:5f:18:ab:bd:1d:
cd:77:20:e2:a0:b9:93:37:84:e3:6e:93:30:6e:a1:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1D:4E:34:D6:54:9D:9F:50:B4:D6:4F:5B:BF:D6:3A:79:93:26:4D
X509v3 Authority Key Identifier:
keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c3:54:69:71:ca:e1:39:65:bb:cd:ee:55:47:08:23:90:f8:
12:11:ed:f1:fc:dc:26:f3:1d:30:f2:47:a7:e0:96:ef:b4:27:
16:41:ce:9e:30:04:ec:1e:93:4c:19:5e:9f:19:5f:29:77:30:
d3:69:e4:fa:e5:eb:35:d3:5d:18:40:1d:6f:39:0f:2a:b5:66:
15:80:76:87:55:37:99:06:fd:02:1e:1b:b2:1d:4d:60:9f:00:
ba:97:f2:01:e7:31:cb:2a:ec:7e:4a:e4:19:e2:f1:2c:01:f9:
28:8e:ef:54:e7:9f:28:2e:ec:39:ed:4e:fc:8b:28:6d:6d:81:
e8:3b:ea:18:61:00:7d:d2:fc:9b:9b:ea:0b:a3:10:4b:92:06:
e7:3c:e5:a6:a1:0a:47:9a:fa:32:18:b1:33:de:c3:6f:69:ae:
e2:0a:da:45:09:06:bb:6e:7d:0b:24:81:4d:a0:69:0a:f8:ec:
ef:29:2f:f0:ac:2c:11:aa:71:af:0a:ab:13:48:0b:9f:42:8c:
59:6f:9a:d5:63:3e:2a:18:f0:27:6b:e5:95:f9:ea:57:b7:e8:
bf:70:ad:83:c2:67:d0:5e:a3:6c:28:3f:3e:ba:ba:48:4a:0d:
93:38:32:8e:15:bb:ca:ef:22:76:a4:2f:3d:a0:b2:76:c0:67:
a3:c6:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:44:42 2025 by rpki-client