Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: nZlJ/LYtuW9v0ZJpe/M4D7fTO1HmIw94HiWKlRwATyA=
Subject key identifier: EB:D8:A0:A7:C6:BB:A8:81:7A:27:7F:07:8B:C4:B0:65:DB:DC:B9:2C
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 0197639608C0D9911BDDFA060501F5B8214D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0D19
Signing time: Thu 12 Jun 2025 10:01:06 +0000
Manifest this update: Thu 12 Jun 2025 10:01:06 +0000
Manifest next update: Fri 13 Jun 2025 10:01:06 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: ucNvbhvl7q1zXkWaO+dMmOKStSsam8KsBWCuVjhEq7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:08:c0:d9:91:1b:dd:fa:06:05:01:f5:b8:21:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Jun 12 10:01:06 2025 GMT
Not After : Jun 13 10:01:06 2025 GMT
Subject: CN=ebd8a0a7c6bba8817a277f078bc4b065dbdcb92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:84:ad:7e:0b:b8:8a:4c:28:8a:68:55:79:
c2:27:fc:7f:51:20:b3:00:83:9c:d7:58:3a:12:a2:
ae:9f:ea:5e:52:90:3e:7c:ab:58:67:c9:2e:41:d4:
fa:6d:20:35:76:2a:d5:a7:cf:74:cc:e5:ea:62:30:
74:ba:4a:29:e8:4d:6c:a3:20:ff:f9:df:0a:5f:9c:
8b:eb:2f:ee:e0:8a:5a:4f:a8:49:47:d5:a3:f9:15:
b5:cf:ac:c8:59:b0:2e:3c:71:ea:db:24:f2:55:10:
98:9b:9a:b4:f2:f4:61:a8:d9:6e:1c:63:04:25:06:
b6:fd:93:ad:e3:39:b2:9f:5e:b5:98:7f:3f:e9:fe:
fb:20:21:e9:f1:69:ac:13:d4:03:78:ac:31:1e:cc:
49:25:de:02:1f:07:60:f3:58:52:29:84:81:64:f9:
ac:f8:fe:3e:72:2d:47:82:43:0d:46:f7:c7:b6:8f:
f2:7c:9a:f8:cf:ec:2b:97:b6:1d:b3:ee:a9:1e:4c:
67:55:f8:ad:04:be:90:76:2e:54:44:78:d6:2a:7f:
36:69:33:52:32:ea:13:4e:bc:ce:1a:96:27:49:61:
70:13:2f:8e:27:92:4d:09:46:f5:26:2e:b7:f3:73:
ef:7d:83:c3:d4:fa:97:50:d9:18:4e:1a:50:98:6b:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D8:A0:A7:C6:BB:A8:81:7A:27:7F:07:8B:C4:B0:65:DB:DC:B9:2C
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8b:7a:13:e0:eb:5a:e7:de:0f:ea:70:0d:b2:ec:08:70:3e:
d4:22:f2:c3:d6:16:86:f9:b2:6f:9a:ba:7b:8f:32:74:6f:50:
cf:34:b8:6b:64:1b:94:85:92:ff:ea:43:8f:b5:f3:64:c6:25:
d3:1d:a8:fb:5f:2f:7f:ba:07:3b:17:44:c7:dd:ca:85:75:a3:
b1:85:85:60:ad:47:90:81:2f:85:68:7a:af:dc:6d:d1:22:aa:
8b:16:09:3b:8f:8b:09:2a:0b:a9:6e:3c:9d:d7:c8:bb:94:87:
93:f1:0c:82:50:01:9b:45:dd:b5:7c:76:d5:b2:88:8b:c2:53:
b6:d1:cd:c0:60:fa:fe:72:25:6f:27:bd:2f:9b:25:1c:63:1f:
6b:48:63:bb:bc:ba:9d:bd:6e:b9:06:9e:1f:33:33:77:24:24:
86:d6:e2:b7:80:53:3b:71:82:4e:b3:28:44:e4:e5:dd:6a:88:
f7:83:07:c9:bc:da:50:e2:79:03:98:2d:81:c8:57:70:74:87:
0f:a2:5e:2d:f1:c6:49:d7:91:16:41:98:52:21:40:d5:7d:12:
8d:d6:1b:59:b5:3c:e9:ae:64:c1:da:ec:66:64:3e:fd:1b:31:
78:18:73:0a:a7:dc:2c:34:e8:28:13:98:23:3b:eb:42:51:cb:
8a:05:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:18:05 2025 by rpki-client