Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json)
Hash identifier: +yHkxICE9JMk7Nf5aIAuKLGtx3XaZ1Y3/YZNIsgBis4=
Subject key identifier: AD:18:EB:92:DA:EE:4C:B2:6F:83:0A:D3:5F:E0:3B:AE:33:70:77:88
Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Certificate serial: 01974EFC5AE1AF5ADE885FA999E23EC07158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 10:00:50 +0000
Manifest this update: Sun 08 Jun 2025 10:00:50 +0000
Manifest next update: Mon 09 Jun 2025 10:00:50 +0000
Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: SuTOJSCLIziZy5XxtrSNED+jfmHnqYat8P73fMhgKas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:5a:e1:af:5a:de:88:5f:a9:99:e2:3e:c0:71:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Validity
Not Before: Jun 8 10:00:50 2025 GMT
Not After : Jun 9 10:00:50 2025 GMT
Subject: CN=ad18eb92daee4cb26f830ad35fe03bae33707788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:84:af:d9:89:7a:2c:5f:fc:f4:67:82:ef:
ae:7e:1b:72:f7:e6:3e:45:d7:02:e9:b2:c4:da:bb:
97:57:fb:b2:3c:ac:cc:24:26:84:d8:f0:d7:12:1d:
b3:b9:e0:3d:de:51:19:1b:8a:43:cc:38:a1:dc:d3:
9a:b3:54:04:66:7a:e6:ad:9f:2a:24:1b:9f:6e:bf:
e0:c5:5a:09:c1:22:0a:85:07:4e:c3:9e:3c:44:ba:
8c:c9:f8:70:cd:5f:0c:a2:91:76:6b:4d:e2:36:55:
7b:02:ca:07:51:e2:92:a2:4c:a5:b3:90:ac:7e:64:
e2:3f:b5:e9:46:80:f5:47:4f:77:af:3d:07:4a:80:
31:bf:e9:f2:12:63:3b:84:36:2a:fe:fc:4a:77:27:
cb:00:91:c5:27:a0:19:0b:26:5c:e9:97:a2:fa:48:
c0:bc:fa:c8:92:ff:41:1c:14:69:93:b8:3a:8c:8a:
9a:41:e7:f8:b4:d9:8b:97:6f:68:5f:15:4e:83:f6:
3b:28:03:a3:2f:eb:ca:e8:76:f4:9f:3d:a5:df:61:
c3:b7:f6:23:c4:02:e2:c9:55:fd:09:c5:40:af:f9:
66:76:e8:d2:46:8a:f1:c8:68:08:c3:f0:59:af:4f:
14:a0:47:15:a1:2d:e1:d9:3e:9e:9b:95:83:bf:ca:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:18:EB:92:DA:EE:4C:B2:6F:83:0A:D3:5F:E0:3B:AE:33:70:77:88
X509v3 Authority Key Identifier:
keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8b:63:3d:b4:6e:bd:6b:7b:5a:7c:e8:17:b7:99:75:2c:1a:
84:25:2e:ba:20:6a:26:c0:64:df:a3:e8:67:63:8a:70:c5:71:
6e:11:54:38:c6:26:02:ff:ea:c6:1f:14:a0:a5:4b:b5:fe:87:
07:27:1e:09:6a:ea:e9:32:96:7b:a7:76:4d:91:b3:93:2d:21:
b0:c0:98:02:ca:26:41:a3:24:e0:93:3d:4f:aa:13:55:87:1d:
ec:47:66:80:7e:b8:cf:8b:6f:2b:0f:84:5f:29:28:17:e1:f2:
ba:79:ce:7e:f3:bb:7c:33:91:7f:90:3b:76:3c:f9:be:03:f4:
09:47:b4:db:7c:47:3e:99:20:f8:64:fe:4d:e8:ed:c7:46:92:
2d:a4:b3:6f:6d:ae:1e:0a:6c:17:e1:66:11:ab:1e:2a:7c:6c:
9e:01:92:a2:c5:94:bb:cf:40:ba:e9:78:eb:9b:3d:d6:d2:35:
33:e1:55:2c:e8:0e:98:30:b8:22:76:43:87:0b:bc:b7:fb:aa:
dd:41:86:db:cc:26:f7:24:31:8a:cc:88:3c:c5:24:0f:22:b8:
40:e2:22:65:ca:ae:ad:3b:de:b8:49:ef:dc:8f:f4:c0:d2:b5:
cf:45:26:d4:4b:a6:43:a0:86:13:1f:5e:08:08:ce:b6:ea:2e:
55:9a:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:41 2025 by rpki-client