Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: Lt53ZEECdYgQbBdIOx1icVFopLc35h4CrxnvhGoTNWk=
Subject key identifier: 2B:1B:98:61:FF:A8:35:6E:B9:AA:30:F6:39:69:12:A6:79:0B:71:6F
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 019748FA2EF51FF558117D57384C46B27D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 10A4
Signing time: Sat 07 Jun 2025 06:00:44 +0000
Manifest this update: Sat 07 Jun 2025 06:00:44 +0000
Manifest next update: Sun 08 Jun 2025 06:00:44 +0000
Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: a/Q3WkHxQFiNBPlIZmr6E432fGIO7/Nrflr02rxNXgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:2e:f5:1f:f5:58:11:7d:57:38:4c:46:b2:7d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Jun 7 06:00:44 2025 GMT
Not After : Jun 8 06:00:44 2025 GMT
Subject: CN=2b1b9861ffa8356eb9aa30f6396912a6790b716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:83:f9:c3:21:55:0e:f6:f4:25:1c:92:a6:
6b:b3:10:90:59:4f:c9:d4:12:33:0f:87:32:a9:fb:
01:80:40:7c:70:d5:c2:5c:d0:3a:61:b0:20:d6:e8:
66:7c:7e:fa:64:f7:0b:80:d5:be:6b:3d:e9:e4:ac:
c5:e8:2d:8b:58:cc:a0:7c:96:df:62:d0:4a:1b:7c:
72:7c:fb:d4:94:98:f7:5e:b7:35:aa:89:64:a4:26:
27:f3:a2:73:5b:7f:9b:68:57:71:3c:5a:65:1c:f5:
df:c9:37:9b:ef:3a:ed:99:cd:2e:f2:23:54:03:37:
cf:0f:0e:6f:56:83:e7:7d:e1:4e:fc:7c:1c:7c:84:
e7:65:63:df:75:5a:70:40:b4:2d:79:7e:e6:b2:d4:
42:2e:80:27:92:18:ee:65:47:f3:fa:08:fa:d7:a0:
5b:f3:92:67:7d:fa:9d:8f:27:e6:57:89:20:c0:7c:
0d:78:ee:08:ee:09:b7:63:f0:31:6f:c7:a1:ed:7c:
6c:4a:fa:7e:3c:22:5e:06:14:f9:ab:67:08:26:93:
da:10:e5:41:49:ee:46:85:5e:a0:f7:6c:52:e4:b0:
45:bd:39:e0:3b:84:3b:a1:d3:d5:85:92:da:e7:40:
d9:45:c9:88:b8:2b:63:08:79:88:b5:25:5a:3e:c9:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1B:98:61:FF:A8:35:6E:B9:AA:30:F6:39:69:12:A6:79:0B:71:6F
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d6:40:3c:65:80:22:0d:2e:4c:c3:79:ce:6b:9d:c3:95:55:
3b:7a:b3:c2:22:20:b1:82:9e:8e:24:a3:4a:e3:50:2b:e1:4d:
c7:ee:60:07:d5:f0:88:a9:f0:ea:98:d9:24:ff:ac:29:fe:7d:
ab:87:78:b9:aa:50:40:d6:72:5d:50:12:ba:26:98:d5:1f:31:
82:b0:8f:85:2c:da:a4:58:83:7a:4e:55:4e:5e:cc:01:e1:16:
bc:0b:05:14:3e:06:16:0b:fe:0c:27:a5:78:a1:ec:ee:11:92:
6e:19:7a:d7:96:1b:94:d8:b8:8a:c5:17:9d:93:4f:15:2f:0a:
da:38:c3:93:c9:e8:f9:21:5b:51:f7:f1:35:c8:23:44:d4:c7:
17:8b:83:d3:bf:68:c1:72:27:05:a7:2f:81:40:78:51:c3:72:
95:fb:6c:fa:eb:95:91:19:f8:04:42:ba:cc:41:20:80:a0:37:
2d:64:61:6c:d8:29:3e:e1:0d:06:97:57:85:78:6e:7c:b2:d1:
bf:1b:04:0f:70:0b:a8:e7:bc:1c:d1:5b:97:0a:32:2f:b8:03:
65:76:49:b5:5f:78:fb:37:12:30:80:2d:ea:07:8f:4c:3a:d0:
1f:85:3c:68:d5:24:b0:a6:66:78:ba:5f:be:d6:ee:a0:36:db:
be:1c:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:36 2025 by rpki-client