Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: RJMHMWFlfZeNkfLIbRosa9GB43k3dLhoRgYtiAHz4Jk=
Subject key identifier: A2:0F:BA:B2:0B:EC:E4:BD:42:07:13:4A:26:96:3A:B9:63:0E:92:2A
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 01974C68EEB567A788EBDFC8AA8508607E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 22:00:34 +0000
Manifest this update: Sat 07 Jun 2025 22:00:34 +0000
Manifest next update: Sun 08 Jun 2025 22:00:34 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: 94ncfFqkwCRCYmwATCTlJ9iNyYPk2oUWl6LZ+M4CX3M=)
2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:ee:b5:67:a7:88:eb:df:c8:aa:85:08:60:7e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Jun 7 22:00:34 2025 GMT
Not After : Jun 8 22:00:34 2025 GMT
Subject: CN=a20fbab20bece4bd4207134a26963ab9630e922a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:c5:a5:b8:b5:ae:99:42:81:b5:0e:c9:94:
83:7e:a4:63:b0:46:58:24:95:a2:d6:b2:c7:0a:b0:
67:9e:99:10:52:fb:14:d8:8d:43:1d:8f:c4:98:ca:
31:9e:46:f4:07:1c:6c:3d:86:bc:f5:89:24:db:99:
ea:5d:68:a8:3f:0b:d8:f1:ae:f7:68:47:83:0b:e2:
1f:7a:0a:86:51:5f:ba:9a:3a:4b:83:df:f1:63:ad:
a5:f9:0f:d5:c3:c2:73:85:43:db:e4:d6:17:3f:f2:
75:7a:85:c8:86:f2:19:d2:c3:2c:de:46:bc:c2:06:
49:3f:a3:2e:7a:a6:1a:86:73:55:a4:7a:85:a6:4a:
01:e3:16:55:ac:8f:36:bb:b7:22:ac:e8:df:64:6b:
ff:58:aa:3c:f5:c1:bd:99:4a:f9:01:78:f6:9d:48:
98:ac:94:7b:5e:e1:ac:13:f2:23:46:4a:94:67:74:
e6:c7:72:d3:29:85:bf:81:2c:c2:8b:96:b8:c2:85:
e3:fe:8f:42:72:d0:97:f7:83:5c:d5:fe:30:91:ee:
03:b0:42:e3:19:26:f0:cb:c6:b3:0b:e0:a0:77:7f:
3c:21:73:bf:d3:ba:16:25:92:cb:7d:0f:d0:96:2b:
d4:54:64:83:a8:86:91:40:2d:76:20:7f:85:11:19:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0F:BA:B2:0B:EC:E4:BD:42:07:13:4A:26:96:3A:B9:63:0E:92:2A
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:93:eb:bd:3a:2e:12:ec:29:47:3a:8a:67:52:9f:52:4a:5a:
8d:a4:fc:5d:a1:5f:f9:b8:91:59:48:b2:7e:a3:a4:12:de:76:
22:22:cd:d0:1c:fa:02:bf:0f:dc:34:b6:9b:a3:1b:5c:9d:5c:
f5:04:97:67:eb:2b:b5:f9:46:0a:21:2f:da:aa:e9:e5:7b:60:
96:d5:db:70:93:24:70:07:9d:e5:46:c3:ca:57:e9:4a:bd:99:
51:43:d3:1c:6a:f0:ea:c2:80:45:8c:79:6b:00:e4:d8:be:6d:
b2:e2:b6:d6:2c:a3:a0:15:c1:10:8a:0a:c9:30:6b:35:5e:58:
e8:bc:af:e6:53:96:91:c4:05:17:f5:a5:f5:50:33:83:4e:c2:
24:bf:93:d7:42:b2:86:11:93:0a:b5:85:2c:1b:82:ad:ad:21:
8f:46:15:e8:5d:2c:a1:f8:e1:0a:9c:f4:32:ee:7e:fc:07:5e:
e8:c1:46:1c:e0:4d:0c:d2:3e:34:45:5b:a4:5e:a4:01:ee:9d:
8a:93:41:b1:cf:41:9c:a2:60:c2:9d:d1:8a:3c:23:b0:4c:6d:
19:5c:1f:f4:b7:26:05:1e:0a:4f:04:bc:0a:79:16:25:92:a9:
47:b6:4f:97:f5:52:7f:ed:0e:4a:84:82:8c:7a:d5:db:d3:c1:
9d:b4:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:43 2025 by rpki-client