Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: c/mw1hClqSjPCj2ezkg+XuyOaLC6h8xWrt+ugABQflM=
Subject key identifier: 04:2B:C4:F1:EE:20:32:96:60:47:7E:B9:AF:F3:94:E4:E2:51:D6:4D
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 01974E8E12E53B23820E845FF777C2B98119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 112B
Signing time: Sun 08 Jun 2025 08:00:23 +0000
Manifest this update: Sun 08 Jun 2025 08:00:23 +0000
Manifest next update: Mon 09 Jun 2025 08:00:23 +0000
Files and hashes: 1: MkZrEXKyhFwVvNuGV9aT6iA9e-E.roa (hash: P+ppmdHA85AavE4SuC0r26COz1iZwYG4tMktUYoh6TQ=)
2: bvvZErx8yb4YddobsQuNGqwzPUw.roa (hash: qLe1f2hJ1WmPgxP8UHTFIQszxs7kYJ5N6PdJJshRMio=)
3: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: J4WA0JAnOb/e80koR3nSqshp+W+EiPkCLUpIctN9PcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:12:e5:3b:23:82:0e:84:5f:f7:77:c2:b9:81:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Jun 8 08:00:23 2025 GMT
Not After : Jun 9 08:00:23 2025 GMT
Subject: CN=042bc4f1ee20329660477eb9aff394e4e251d64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:81:3d:8e:ae:8f:bf:5c:99:d3:9e:82:e1:
54:25:4c:a0:ea:f5:f8:fb:e3:e9:d7:cf:db:de:19:
76:15:e4:8e:6e:82:e5:f9:c3:14:fa:99:a3:67:1b:
c2:65:a5:c1:73:54:da:10:0d:e9:19:ad:1c:e8:b5:
82:ed:94:17:e1:39:99:52:c2:3d:da:8d:49:d1:d7:
d0:ea:98:cd:e5:44:13:86:7c:89:2e:e6:8e:64:23:
b6:8d:87:79:d8:4a:af:d0:97:15:92:b1:f1:6e:2d:
d1:fd:e2:76:01:c6:85:41:49:a5:43:69:29:81:c2:
d3:69:5d:9e:ae:35:5c:ba:cb:28:cb:67:b9:97:19:
72:60:96:e0:fe:c1:75:8b:ae:6e:a8:19:cd:16:9e:
9f:9a:e5:7b:22:c2:d6:70:66:f1:7b:8d:12:b7:a2:
33:1e:f7:27:e4:b8:be:40:09:2a:60:78:54:a2:77:
db:e1:f4:51:83:4c:89:62:df:4a:8c:fd:b7:68:a5:
af:c4:f9:55:8c:14:80:3b:06:13:da:a8:52:38:e2:
12:c7:b1:02:19:02:19:e4:6f:fa:8b:d0:ff:34:cd:
35:df:03:c5:3e:85:2e:ca:ad:e8:ae:f0:cd:89:9d:
92:4b:ff:2b:54:a9:49:a7:aa:ed:38:c5:4b:bd:a2:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2B:C4:F1:EE:20:32:96:60:47:7E:B9:AF:F3:94:E4:E2:51:D6:4D
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7d:71:7c:1b:79:4e:15:5b:e5:f7:6b:aa:e0:0e:a6:26:44:
7e:8e:d6:3a:26:5b:f7:c1:7e:37:96:7d:bb:a4:be:87:ab:06:
e7:97:69:b3:7a:f7:4e:f2:5c:51:d5:86:53:81:0d:32:00:59:
0c:6c:9e:ab:a1:07:79:06:43:86:04:20:82:49:cc:ad:86:ba:
99:a3:1a:fc:08:83:d3:22:bf:21:31:f8:37:1e:26:74:ec:c9:
02:12:b5:da:d8:e0:7a:8d:0b:e8:b5:b2:33:9c:dd:f5:11:0b:
ef:8b:53:71:d8:2f:12:07:51:40:95:e2:a4:a7:f3:56:22:97:
3d:09:1c:53:5c:05:cb:44:66:95:3e:c3:3a:e3:f5:66:f6:8b:
22:90:a7:c5:b8:f0:7b:e9:fd:f7:48:c0:d5:f2:26:18:02:f2:
7d:0c:be:8b:f4:df:36:b3:13:22:71:9d:47:2f:bb:53:07:ee:
fc:ef:45:fe:f4:84:e6:bf:03:fc:c1:26:70:10:68:22:87:75:
67:be:df:e4:55:f9:59:02:ef:28:e8:9f:fc:33:ac:e7:42:77:
6a:e7:00:01:72:22:d6:77:98:fc:53:25:8f:86:59:f6:79:d6:
66:d3:83:88:6c:8b:d3:c4:7f:6f:dc:1f:fb:ac:ea:e0:54:c3:
d1:b4:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:50:00 2025 by rpki-client