Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: vTPpi99OfW2bGCX20VjTQ93bzNC3ev5M66oCtbXQjKo=
Subject key identifier: 8D:A5:75:87:46:BA:53:DC:06:A5:03:C5:45:C4:08:4B:01:31:FF:2C
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 019767734E790CBA78D968E63B7A116BAD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0D1B
Signing time: Fri 13 Jun 2025 04:01:39 +0000
Manifest this update: Fri 13 Jun 2025 04:01:39 +0000
Manifest next update: Sat 14 Jun 2025 04:01:39 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: JIfo6P3qyJqKVRP1xEFu6kD4ISLuE2gZPk6dHSvH2NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:73:4e:79:0c:ba:78:d9:68:e6:3b:7a:11:6b:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Jun 13 04:01:39 2025 GMT
Not After : Jun 14 04:01:39 2025 GMT
Subject: CN=8da5758746ba53dc06a503c545c4084b0131ff2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:86:37:2e:97:83:8c:7a:4d:20:eb:4c:80:
66:8f:c7:b4:a5:14:80:c6:4e:72:e8:df:d7:97:41:
96:a1:90:81:67:fe:b4:5e:cf:6c:d5:0c:65:5e:40:
57:1d:86:30:71:bf:31:c0:95:bf:8c:f8:66:6b:46:
cd:4f:01:cc:4a:82:44:b6:ae:41:dd:ef:ce:45:94:
3c:be:22:f2:69:7a:6c:c0:47:a9:97:26:a6:4e:24:
31:e0:40:3f:d5:f1:31:f3:0e:3b:ed:76:fe:e8:e1:
68:9b:2e:a3:63:0a:a4:5e:18:3b:ed:eb:c4:43:68:
dc:64:47:a1:ae:ab:30:a8:74:46:95:c7:f1:e3:85:
cd:17:7f:60:24:65:86:a1:08:ad:6e:eb:02:dd:00:
1e:ed:13:99:6d:46:77:69:80:cb:b3:cb:0b:a6:45:
b9:5e:82:36:84:70:6c:62:3b:ad:31:a3:56:6b:db:
42:5e:bc:e8:56:51:98:69:65:e5:b5:5f:45:18:f1:
da:b2:73:b3:05:d1:c0:6c:5e:ab:d5:56:a3:53:a3:
df:db:f1:fe:d3:22:5c:07:7b:9e:b1:9d:50:30:21:
7f:a0:c5:dd:d0:55:6c:f0:24:5b:2e:34:b9:e1:d0:
bb:dd:4a:e0:6b:1d:1a:c5:76:14:1d:a2:7c:de:d8:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A5:75:87:46:BA:53:DC:06:A5:03:C5:45:C4:08:4B:01:31:FF:2C
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6b:46:1f:2e:3c:7d:aa:0d:d2:62:f7:54:e5:1f:c7:24:d2:
c5:49:65:b0:d4:6d:ce:c9:1e:e1:28:de:d2:de:74:a0:06:f6:
f5:30:23:47:1c:8c:79:fc:59:62:e7:14:43:a0:0d:fe:ab:f0:
e6:2d:95:f4:11:05:67:f3:59:ec:00:29:d1:8c:c0:c9:3b:e3:
8e:72:54:45:d6:4b:1a:be:95:7c:53:69:f6:c6:6c:d6:83:5c:
19:66:f0:46:48:6e:44:e2:8e:c7:af:44:36:32:da:70:cd:b8:
36:28:19:2a:f4:07:c8:81:1b:37:ca:24:63:3e:8c:98:cc:9e:
ce:92:41:54:3e:af:86:7b:1c:5d:38:17:ee:3f:e5:d8:be:92:
cb:7c:54:3b:89:1a:1d:e9:37:97:2f:66:1b:73:75:2a:b2:f5:
2a:b9:9a:b7:04:b0:2f:7d:b9:fc:74:a3:a4:7b:ee:8c:d3:57:
a4:80:70:c1:ca:fa:7b:39:6c:90:1e:2a:cf:81:b0:b2:83:17:
d3:46:b2:69:d0:28:a3:0b:e2:55:42:2a:7d:41:e0:1a:b0:09:
50:61:39:0a:a0:3c:e3:a5:64:53:9c:57:bb:5a:58:89:30:aa:
63:ae:e5:ce:8b:6d:f6:1e:1f:0c:c2:60:70:e4:e3:9b:7d:1a:
c0:5d:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:51:28 2025 by rpki-client