Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: cbOt6OcVBRNuRe35inqw5S8pxDytFp6zpE/MbIkkSEQ=
Subject key identifier: EE:89:0B:89:96:7C:DC:DF:61:33:42:AF:EB:15:88:5C:31:B6:27:9B
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 01974C32033DE5BD3E6FFEC4CA3A7C643B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 21:00:35 +0000
Manifest this update: Sat 07 Jun 2025 21:00:35 +0000
Manifest next update: Sun 08 Jun 2025 21:00:35 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: UGUoQ51o/1Zpqk1QoqW/X2ZYrDf468SyMHqWwVBpiE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:03:3d:e5:bd:3e:6f:fe:c4:ca:3a:7c:64:3b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Jun 7 21:00:35 2025 GMT
Not After : Jun 8 21:00:35 2025 GMT
Subject: CN=ee890b89967cdcdf613342afeb15885c31b6279b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:da:20:49:7e:6b:74:56:78:ac:ca:db:c9:
0b:e1:73:b8:0a:22:af:25:13:f1:19:23:5a:f2:29:
e9:7b:f8:37:ff:40:cc:bb:21:c6:b3:a0:52:57:df:
6c:a7:29:e4:7b:ca:53:0c:15:e2:d0:dd:73:b1:2b:
54:67:5d:b5:39:89:d5:ca:ac:11:97:18:fc:6c:ee:
ff:94:8a:13:17:8b:9d:24:b6:de:98:53:4e:d9:9e:
e2:18:bf:e9:59:cb:d7:f4:be:43:6a:af:cf:de:b7:
ff:03:45:bc:48:e4:e8:bc:56:1c:c0:4f:12:cd:f3:
b2:26:18:d6:29:c7:1e:40:30:67:0f:8c:7d:47:d2:
00:fe:32:d2:5a:8d:b2:3a:7f:0e:44:5c:14:29:0b:
04:b5:28:73:cf:37:d1:81:a2:3a:5c:93:fc:a4:54:
55:ab:b3:8e:d4:fb:0c:3f:8c:0b:d7:82:95:92:ba:
0e:5e:84:ef:c8:c5:a1:af:26:eb:d7:7d:98:86:9f:
2b:a0:95:d1:83:8f:eb:5f:67:66:1f:68:4a:2b:6d:
a8:4b:04:3a:58:c0:63:2d:86:61:4c:34:0d:ca:86:
bf:ff:93:40:90:8f:d8:02:c6:0e:ae:c7:8a:12:89:
82:3d:14:7e:b9:6b:d5:08:f7:88:6d:90:4c:58:ba:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:89:0B:89:96:7C:DC:DF:61:33:42:AF:EB:15:88:5C:31:B6:27:9B
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a8:c7:75:ee:d7:9a:85:31:46:f5:db:8b:d5:86:e0:20:60:
2d:2e:df:8c:a6:a5:68:53:84:84:a5:79:dc:48:5f:43:ee:86:
f7:a6:37:3d:e5:1c:c2:3f:71:53:61:dc:8c:97:14:1f:dd:b9:
99:ee:f6:31:f8:c0:ba:f6:ea:03:12:1c:15:3f:73:25:ff:88:
2b:0c:b6:ac:60:6a:85:61:5f:ea:f6:d9:37:5b:f6:26:a4:24:
2a:bc:0c:34:f3:5f:b2:de:dd:4d:c2:74:a9:24:77:12:d8:ad:
35:7d:7c:36:5b:5d:7f:95:4e:53:a3:ff:8b:53:98:25:ad:be:
12:1c:44:30:b3:15:9e:7d:b2:3b:3d:89:3f:92:71:f9:84:f7:
47:42:29:05:e9:23:15:6c:aa:94:73:c3:d4:f8:c0:c3:0f:37:
21:6a:87:7c:4f:67:32:8a:2e:7c:e1:75:1f:be:a1:3b:4c:7c:
53:af:12:ca:31:4b:d3:7d:85:c9:b5:96:1a:27:76:6c:cf:eb:
c5:25:e7:f1:09:ed:77:13:57:47:b2:0c:f6:0e:1e:13:3b:57:
23:3b:e4:9c:a3:de:6b:02:c9:4d:6f:f6:8d:c4:bd:ba:f0:52:
68:67:7a:3c:88:05:0b:53:f6:26:b0:be:6f:8c:dd:46:0f:de:
15:b6:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:45:07 2025 by rpki-client