Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: zbNB7RlWa7cRBmZH2ZTnu6bFPS2P/06PA/vIAwUeHvg=
Subject key identifier: 5F:24:C4:2C:9D:93:B1:31:DF:9B:B0:F0:8B:30:D4:02:A5:27:16:FC
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 01974DB2929AB9BD924D4F9C128CDD2DFE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 04:00:37 +0000
Manifest this update: Sun 08 Jun 2025 04:00:37 +0000
Manifest next update: Mon 09 Jun 2025 04:00:37 +0000
Files and hashes: 1: 2tI0pPHAMAIk_osuAaaPnbBYiYE.roa (hash: Y+gWUa2jjd6N+7XsleK0WmIL5jH60gWVDj3pYUgybgk=)
2: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: 0UjvACGAgpzd80xhQ/g4MezT9RkKIA4/hFG5sNKk/qM=)
3: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:92:9a:b9:bd:92:4d:4f:9c:12:8c:dd:2d:fe:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Jun 8 04:00:37 2025 GMT
Not After : Jun 9 04:00:37 2025 GMT
Subject: CN=5f24c42c9d93b131df9bb0f08b30d402a52716fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:54:74:35:d2:35:dc:9c:83:bf:98:93:fe:
06:72:c4:b9:85:e7:86:81:83:a5:c4:f4:17:74:6c:
03:37:c4:4b:51:c1:63:af:ae:0f:c1:d5:01:6a:ae:
13:67:1c:b2:06:a2:48:23:90:7d:a7:3c:d5:aa:75:
55:6b:63:c6:a2:92:b4:5f:b7:32:6b:02:c0:d2:a6:
76:e3:67:cd:02:dd:a4:f6:fd:70:5f:67:bc:20:2f:
1d:50:70:33:4e:78:63:8a:17:3d:43:73:81:e9:f2:
b4:50:37:91:e4:c6:17:a9:da:f9:6f:16:b9:23:f3:
bb:03:c3:60:bf:22:99:69:a7:3e:a9:e1:40:65:90:
aa:1d:c5:9f:15:2e:be:ab:bd:54:20:f3:48:3d:65:
c9:3c:11:d8:c7:f5:f6:2c:11:88:1f:1e:31:9e:00:
4d:2d:e0:46:a2:22:c4:7b:5a:b3:ac:2e:73:8b:67:
1a:83:50:da:f1:25:99:66:e2:d6:28:e1:de:d6:89:
9f:b9:a8:f2:c5:cd:0f:78:ee:80:18:83:15:41:79:
1c:75:ff:79:8e:93:d3:ba:11:dd:88:b2:1a:51:ed:
a2:a6:17:81:94:83:04:4a:59:e1:cc:cf:ee:2f:7b:
69:73:57:7f:80:e5:d8:32:83:af:67:0f:f8:74:77:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:C4:2C:9D:93:B1:31:DF:9B:B0:F0:8B:30:D4:02:A5:27:16:FC
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:30:1a:b2:ce:1c:9f:d3:b2:ea:34:f3:09:40:da:0e:30:d7:
0f:a1:fa:a4:0c:59:41:53:8f:1b:90:62:0a:27:3a:d4:82:0f:
99:b7:72:b1:f3:5e:96:f5:af:0b:c0:6b:74:20:52:e5:0e:ad:
f1:86:aa:00:cd:e0:93:7a:cd:54:f0:bf:db:79:d7:90:98:07:
b6:fd:ef:12:3a:e1:1b:09:9e:ca:bf:ee:74:b9:f8:16:0f:03:
ea:e6:b7:94:b9:73:67:29:9e:38:b8:cd:9c:8d:ba:5d:da:5a:
88:2a:27:89:ce:be:bb:d6:45:e4:11:9b:4b:b0:af:ef:ff:34:
e8:93:47:86:de:79:d8:f5:92:36:26:b4:92:8f:28:e7:b8:04:
02:b3:d5:94:1d:07:4d:f2:5a:4c:91:d0:a5:e9:c2:d3:63:83:
b1:1e:58:8c:77:77:37:2e:67:66:76:68:09:59:19:6b:aa:f8:
b5:52:67:79:6a:b2:78:89:7c:cd:e4:c0:17:df:21:cc:33:b3:
35:ca:5c:19:52:ab:57:4e:1d:b5:2d:d1:c7:31:4b:63:75:da:
51:a3:35:38:37:fc:ca:fb:c6:89:e0:af:12:d8:31:d5:b8:83:
84:26:67:fe:59:72:0e:ed:da:22:b3:0c:2e:67:8f:45:11:3b:
32:f5:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:40:48 2025 by rpki-client