Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: 2PkSvvGCWBt3CFqLhkuDaWLwYI7cPiX40TyRPXUjB68=
Subject key identifier: F4:FD:11:29:42:09:51:C3:31:D2:99:5E:C2:3A:14:99:A1:0C:BF:3C
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 01974967F3B4826C91B7709A338E34C6048F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 06C0
Signing time: Sat 07 Jun 2025 08:00:38 +0000
Manifest this update: Sat 07 Jun 2025 08:00:38 +0000
Manifest next update: Sun 08 Jun 2025 08:00:38 +0000
Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: XDKvSKUpxO4gmWvAuqYcboQe1h/270gt2TedolMwau0=)
2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f3:b4:82:6c:91:b7:70:9a:33:8e:34:c6:04:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Jun 7 08:00:38 2025 GMT
Not After : Jun 8 08:00:38 2025 GMT
Subject: CN=f4fd1129420951c331d2995ec23a1499a10cbf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ac:5d:3a:18:c9:bf:7b:b5:65:a6:0e:02:4a:
07:99:1d:58:2d:0d:41:c2:7e:3b:d7:c9:b1:4b:cb:
aa:b3:ed:37:a0:71:6b:6f:17:0c:6a:40:aa:8a:ab:
8a:3c:d3:0c:da:7a:0f:9a:13:82:b1:21:b7:27:2a:
08:15:74:14:16:36:cb:0f:8c:81:f0:01:a1:29:1c:
01:91:e6:4a:a1:f9:dc:ac:0c:3e:2f:70:0b:35:ef:
85:45:6b:a9:0e:ee:71:eb:0d:91:bb:68:85:8f:d5:
62:cd:7c:0d:70:5b:1a:4e:b4:ea:7a:88:83:9f:16:
77:c0:3f:fc:aa:f1:bc:b3:39:46:fe:04:44:80:df:
db:1f:12:a7:cc:de:1a:0a:08:64:16:e9:b8:29:23:
a6:9d:5b:48:64:4f:c0:28:9b:ba:40:ca:1d:54:c5:
84:6a:32:8a:a4:51:73:59:0a:fd:b1:fd:53:f1:6f:
4d:d0:4f:81:e4:66:6d:ff:61:b5:45:0e:33:4a:b5:
2d:1b:74:b9:8a:5b:1d:87:cf:0c:08:e4:2e:2b:52:
ec:81:7e:9e:52:b1:16:d4:a5:bd:14:eb:d2:26:f1:
db:af:18:de:47:91:32:a9:1d:da:d0:5d:a5:89:19:
14:7e:e7:16:bc:a7:9b:12:36:45:0e:b4:94:05:5b:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:11:29:42:09:51:C3:31:D2:99:5E:C2:3A:14:99:A1:0C:BF:3C
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2c:3c:84:f3:b9:1d:4f:77:f6:ff:a6:40:6b:28:53:fe:1e:
9a:6f:c3:5e:07:37:65:01:e4:1d:96:ee:0f:93:3c:8e:dc:86:
26:c9:84:fc:69:7e:df:c9:23:cf:87:a7:31:17:3c:31:66:a6:
a7:a7:aa:a0:8a:ef:0c:24:7c:68:82:90:0f:c9:ef:ba:1c:1d:
83:dc:13:80:f7:ea:16:1c:47:41:61:c5:78:9b:e6:93:ef:46:
c4:45:53:a8:1d:a1:37:0f:d5:37:77:97:0f:ce:24:8a:ff:87:
43:fa:1d:e8:73:1f:67:d4:94:2b:a8:11:44:e0:94:91:80:e3:
7f:5e:6c:9b:17:4e:85:fa:bd:34:5f:cb:89:43:c3:d3:c6:23:
73:2a:42:ab:ef:9f:ca:35:5c:aa:e3:11:ad:f1:60:7a:6e:15:
c1:bb:f0:af:9c:0e:bb:18:fe:73:63:d7:9e:d9:23:10:12:5c:
73:d9:fa:62:77:e3:77:c6:5d:b6:41:11:b6:42:09:90:8c:85:
9d:8f:f5:34:7f:66:b0:c3:13:fc:a1:9c:ce:9e:f0:05:03:df:
c4:c9:00:8e:f0:18:71:57:50:3a:9e:d2:94:f7:98:4a:5f:ba:
53:27:73:0a:54:5d:8e:a8:cb:4a:b4:e9:82:f6:a2:eb:be:64:
28:3a:0e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:52:24 2025 by rpki-client