Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: F7ojIfzZsJBv9gsEu3l9RDsrGyEGSA+FyE3qRA01xv4=
Subject key identifier: 20:87:1D:9F:34:5F:6B:29:93:42:DC:7A:49:B5:73:0F:6E:E9:F0:81
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 01974F33895E098AC837941C7F96755C99E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 1106
Signing time: Sun 08 Jun 2025 11:01:06 +0000
Manifest this update: Sun 08 Jun 2025 11:01:06 +0000
Manifest next update: Mon 09 Jun 2025 11:01:06 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: iwkfwAqfJrGke9LCGrO2HrJlj/aeGYkf21+JglQ9f2g=)
2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=)
3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:89:5e:09:8a:c8:37:94:1c:7f:96:75:5c:99:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Jun 8 11:01:06 2025 GMT
Not After : Jun 9 11:01:06 2025 GMT
Subject: CN=20871d9f345f6b299342dc7a49b5730f6ee9f081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:5e:da:47:1c:d9:5f:ea:45:67:54:d5:21:
8d:f1:04:86:43:ec:16:c0:d3:e5:8c:ac:2f:6b:58:
ec:57:58:ed:b4:33:14:be:63:bf:1b:26:92:bc:e7:
01:0b:a1:8d:45:6e:47:59:10:af:d7:58:7d:40:42:
75:ce:a3:57:47:e8:96:26:08:5c:3e:34:4a:7a:0a:
79:6d:09:1f:8b:26:96:1d:2f:26:35:d0:da:24:2f:
41:df:3f:3a:15:6c:e2:29:9d:a1:ac:0a:92:6d:65:
0e:56:56:e9:e1:69:0b:71:b2:f7:79:76:a6:02:56:
13:db:82:9f:79:07:31:1f:17:de:19:98:c1:9b:2f:
91:de:31:da:f5:8b:64:2e:cb:5f:fa:2a:61:15:f2:
1b:79:33:b5:8f:50:73:88:bc:9e:12:d2:4b:24:77:
d2:e9:f5:5a:b9:21:d5:c3:85:24:29:f2:17:c0:72:
b6:fd:f4:fb:4f:78:3d:8d:a1:1f:0c:30:d8:78:93:
a9:9c:5b:67:71:00:d4:3b:ee:a1:63:4b:7a:45:69:
54:ab:8a:0a:c8:61:4f:15:60:78:56:97:5d:98:1d:
db:cd:c1:6f:ed:c7:d8:2e:5a:b7:18:20:3a:a1:27:
d6:1f:28:99:f3:db:10:25:4d:14:78:e7:f0:f2:fc:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:87:1D:9F:34:5F:6B:29:93:42:DC:7A:49:B5:73:0F:6E:E9:F0:81
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:91:a4:9f:c6:6f:54:aa:19:97:74:63:ed:09:52:6f:f2:2f:
b1:f7:0e:1e:b0:d1:b9:09:f0:4c:98:12:9b:92:b2:20:7e:f5:
68:a1:ea:f4:96:1e:31:cd:6d:45:f0:4b:b1:14:a2:08:e9:b6:
ff:b6:d4:aa:91:f0:31:77:cc:07:0a:cd:7f:29:91:77:08:76:
dc:54:30:02:40:0e:64:93:4c:11:48:a6:5b:01:56:6c:cd:3d:
6b:7f:b5:c6:d8:45:0c:6e:51:ec:47:dc:65:aa:57:58:76:83:
08:91:4b:d0:74:7e:4a:66:d5:de:2c:6e:e5:43:cb:72:ac:45:
f3:09:2d:77:1a:b3:2d:9e:bb:eb:b2:14:e2:db:7d:06:91:3e:
1d:30:fc:5b:f4:ec:10:84:4e:e4:c0:bf:03:8a:09:2e:54:34:
0e:5c:5c:a7:f9:f5:3a:62:47:19:aa:56:fc:ef:af:6f:76:00:
0e:cb:40:c2:bb:4c:0e:af:08:e0:1f:9c:e3:82:d2:75:f3:8a:
8a:ca:94:85:12:3d:0f:81:db:81:02:56:7b:6c:24:05:50:8a:
88:ab:83:6a:1c:04:29:81:9e:db:91:ad:cd:f7:33:f7:a2:36:
b0:16:27:d9:02:83:a5:78:71:a2:a5:e7:64:29:64:ed:bc:66:
46:42:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:53 2025 by rpki-client