Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: liaHeX7BKo+xVz/ttKyF8yiqapEIHReXpBsURaCGZTw=
Subject key identifier: 5C:D6:16:97:E9:7F:F9:5D:99:21:77:AF:41:8D:C2:C9:6E:B2:E6:45
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 01974B1FAE188E05710B5C62AB0C7E8381F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 0D30
Signing time: Sat 07 Jun 2025 16:00:56 +0000
Manifest this update: Sat 07 Jun 2025 16:00:56 +0000
Manifest next update: Sun 08 Jun 2025 16:00:56 +0000
Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: GQ3nznB/llkGWrT04E6/lnnotmpGnxgGcsFMmM/MN9o=)
2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=)
3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=)
4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:ae:18:8e:05:71:0b:5c:62:ab:0c:7e:83:81:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Jun 7 16:00:56 2025 GMT
Not After : Jun 8 16:00:56 2025 GMT
Subject: CN=5cd61697e97ff95d992177af418dc2c96eb2e645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:81:dd:3e:35:c0:13:85:82:ea:0e:0c:be:
1a:62:b1:52:02:b4:0a:fe:e6:e3:6e:12:20:b5:3a:
53:b1:cc:ca:d9:ae:ec:b6:e9:e9:01:50:aa:88:bd:
32:6e:49:d2:4c:c1:6a:15:e1:90:7a:82:71:c9:c0:
19:01:96:9a:1b:dc:e6:c1:a8:b6:a7:55:05:72:5a:
3f:5f:00:02:82:da:10:17:77:5f:4f:5a:27:1d:15:
80:5e:cf:ae:3c:ac:21:28:ad:31:00:9c:69:45:90:
e5:c9:2f:e9:e8:ab:d9:08:e2:df:9c:1d:12:0d:e0:
59:42:4d:4a:67:5a:92:b8:55:2e:bb:3e:62:4e:fc:
7d:cb:22:6c:73:1b:56:e0:a9:c9:16:1e:83:7f:95:
05:bf:2f:13:5f:2f:89:06:b3:9c:2d:c6:92:a6:f9:
11:69:27:6f:42:89:48:e5:36:b6:09:17:a7:92:8f:
68:50:5f:1e:d4:8b:6b:25:45:0c:78:e4:a3:3e:07:
a6:88:95:9c:1b:a7:4d:a9:7b:81:1d:e2:a4:6e:ff:
f2:dd:04:f9:62:83:4c:5c:c5:99:d7:2f:40:0e:9a:
b1:a6:07:ff:63:5f:35:f8:23:49:7f:29:62:25:95:
85:8a:ca:06:a9:a6:62:ea:17:dd:c0:07:b0:8b:30:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D6:16:97:E9:7F:F9:5D:99:21:77:AF:41:8D:C2:C9:6E:B2:E6:45
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:34:15:af:8c:44:ac:93:a1:88:2d:e6:23:e7:c1:e7:f6:ba:
bb:69:6d:3d:36:91:2b:6f:72:9a:5b:4c:ea:b4:a3:82:e2:81:
ca:95:59:ef:bf:1d:2a:ae:43:fb:ab:38:3a:10:c1:0e:8b:ef:
7c:9f:fd:5d:79:91:0e:4f:6a:ab:87:5f:23:84:95:b6:4a:1a:
3b:00:89:95:9d:0f:e7:38:1c:17:37:14:b6:8f:b5:91:de:83:
60:f7:27:8b:62:78:11:d9:da:8b:d7:de:5c:4c:5b:c6:d6:a0:
be:3d:13:48:17:ee:d5:e7:62:e4:4c:f2:ee:84:58:ae:ac:df:
94:d9:de:9b:6d:8c:51:d5:fa:f6:3b:6b:8e:c5:d7:2e:c3:47:
74:8f:71:99:d3:7c:69:80:21:67:7a:4e:f9:88:f0:b3:3e:c8:
c8:78:db:32:ed:0b:20:9d:6a:e6:b1:3f:0c:d5:49:39:5b:ea:
f2:7e:c8:87:9c:fc:91:b6:26:83:18:3a:19:ae:41:3b:42:f1:
83:b4:e8:4c:63:d7:13:4b:47:74:12:0e:5f:8b:40:40:13:f9:
dd:26:1b:6f:e1:d0:52:9c:94:41:9e:cd:ee:b7:c9:f8:ab:f0:
89:2e:bd:42:dc:ba:ec:30:b2:03:5b:3a:8e:cd:12:72:64:63:
47:c8:f7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:16 2025 by rpki-client