Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: Qz0ARVmfvBqctfRbdsn5lqj+QTyy1BnEzdtcx92JkVI=
Subject key identifier: AF:6B:04:73:61:D7:1F:1E:D4:CF:B8:35:49:E8:88:EC:10:B3:7E:09
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 01974779E22693757B04CF0DBB3373E837A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 23:00:59 +0000
Manifest this update: Fri 06 Jun 2025 23:00:59 +0000
Manifest next update: Sat 07 Jun 2025 23:00:59 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: 0lM4WwcyYtZhHVR+fjWFRg4WkkQgaluOm/PX/sC3CGU=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e2:26:93:75:7b:04:cf:0d:bb:33:73:e8:37:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jun 6 23:00:59 2025 GMT
Not After : Jun 7 23:00:59 2025 GMT
Subject: CN=af6b047361d71f1ed4cfb83549e888ec10b37e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:8e:5f:85:2d:28:c9:87:79:58:a2:9d:f0:
db:4a:e5:2c:3f:94:1a:77:29:c1:c5:cb:74:56:78:
b0:db:30:b8:32:07:f8:51:98:ea:c1:1a:73:6d:f7:
e9:b3:e2:56:20:65:a0:06:9c:03:07:86:80:06:80:
d1:e4:eb:be:1d:b7:f0:4c:5c:91:e8:9e:37:ae:60:
e2:d3:3f:74:9f:c7:32:bf:3e:e8:60:72:25:58:bc:
96:1f:f9:ac:13:1c:e0:83:47:c6:17:17:6d:20:17:
67:f2:50:0d:f6:d4:7a:b5:10:b5:a7:43:8d:75:36:
83:c7:c4:a0:11:5c:9f:21:60:cc:55:a2:e5:a7:57:
94:92:b5:7b:fd:5a:74:27:f7:dc:52:68:5b:eb:c3:
e9:81:65:e2:5d:43:cc:df:c0:80:81:da:01:80:9b:
e3:32:1f:e6:be:14:d0:de:7b:ef:55:bd:60:0d:d6:
68:1d:7d:1f:79:02:1e:be:4a:00:e5:7b:30:6d:cd:
13:23:71:76:da:29:3d:90:eb:0a:65:dd:44:b4:87:
63:90:1a:3a:b9:ef:f0:67:d4:62:98:5c:54:00:d0:
af:94:ec:1c:2f:af:32:f1:2a:77:59:40:f2:92:7b:
73:96:b9:73:e9:37:17:f5:ea:92:6f:73:61:ac:91:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:04:73:61:D7:1F:1E:D4:CF:B8:35:49:E8:88:EC:10:B3:7E:09
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c4:0a:fa:18:1c:b1:06:35:24:f9:89:56:50:79:ca:bd:56:
75:2f:a4:d9:9a:18:92:12:8d:cc:96:fe:20:80:e2:13:08:0b:
41:9f:4f:22:1b:a6:3b:ac:6b:d9:b6:e6:10:73:d2:f2:21:d3:
ca:c2:94:42:12:f6:12:e1:e6:dc:ff:01:62:60:a8:4a:0c:67:
67:ef:4c:3b:41:46:5e:6c:68:76:1b:8a:c8:7c:12:cb:9c:d7:
85:2e:04:50:33:f4:1e:6b:15:7d:fc:2c:a8:fb:16:7d:15:e7:
95:e2:02:6f:25:42:08:29:aa:5d:11:ac:05:1a:32:0c:08:f3:
37:cb:b0:1f:93:48:86:d2:73:53:b0:e0:64:3f:e8:62:4c:8e:
d3:2f:df:ca:c6:a8:a2:51:fe:65:d1:3a:0d:a9:07:fe:9d:c0:
85:f8:dd:8c:53:cd:c9:a1:ae:80:98:9d:cd:6f:3e:a6:28:f9:
8e:bf:8b:a4:47:dc:ff:18:f5:67:e0:0f:88:b8:5b:c5:18:8d:
92:95:ca:62:d8:93:ca:99:f1:f2:c1:82:ad:0d:a3:3b:de:d5:
15:b5:f0:70:d9:dc:08:f0:55:3c:f5:28:ab:53:07:f3:f2:8a:
d8:29:88:76:c2:34:a5:fc:40:e4:ea:8c:cc:c5:ec:fa:20:56:
8b:67:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:49 2025 by rpki-client