Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: +dgPSy4hggONssQrvLZXU9isUyexaHw1Vg8FCHTz9so=
Subject key identifier: 91:B9:40:87:82:14:51:15:1B:5A:86:C6:68:12:13:EE:BA:75:04:AA
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 01974AB14B820C3B4201F21D7060B4420325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 0E43
Signing time: Sat 07 Jun 2025 14:00:22 +0000
Manifest this update: Sat 07 Jun 2025 14:00:22 +0000
Manifest next update: Sun 08 Jun 2025 14:00:22 +0000
Files and hashes: 1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: yHHh89UdKMNzfzcwSM8i4+2nG+pXbNYuHJJZe7VDHas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:4b:82:0c:3b:42:01:f2:1d:70:60:b4:42:03:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Jun 7 14:00:22 2025 GMT
Not After : Jun 8 14:00:22 2025 GMT
Subject: CN=91b94087821451151b5a86c6681213eeba7504aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:8c:b6:94:8a:d9:7a:4c:ec:29:d7:48:e8:
72:eb:7d:9b:ef:56:9d:a8:74:8d:46:42:fe:fe:f6:
e1:f7:74:48:0e:8d:97:02:a4:93:df:a6:3d:38:a6:
33:d1:80:93:7d:5e:2a:75:49:ea:4f:25:81:71:e6:
ef:2d:45:4d:3f:7a:de:8f:db:59:a9:83:85:0c:5d:
f3:fd:4e:fa:55:da:81:e6:c4:de:58:d8:50:7b:11:
29:76:d8:84:13:9a:77:d1:89:40:34:f6:fe:06:09:
7f:8e:65:ee:d8:2d:92:54:ae:2a:49:80:75:bf:fc:
39:11:21:03:4d:bd:57:c9:bc:24:00:ca:91:88:af:
2f:58:d0:4e:82:b5:87:0a:e2:61:8b:2e:8a:30:b9:
0a:4f:96:ca:b8:c4:d3:be:a4:d3:d4:37:1e:dc:cc:
f7:97:d7:ec:3e:2e:6a:70:2c:47:17:67:6f:79:46:
2f:b3:0e:ab:e9:76:19:bc:48:6c:3b:c0:80:02:6f:
61:84:a3:fb:7c:42:4a:df:7b:81:13:f4:49:ac:90:
70:63:f3:a3:d6:b0:a4:3b:f4:88:eb:58:63:12:15:
c9:d3:1b:68:b5:e5:a5:9b:e5:84:f1:fb:f7:53:68:
8f:f8:96:de:8f:aa:fb:fd:84:e9:f8:79:77:fb:33:
80:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:40:87:82:14:51:15:1B:5A:86:C6:68:12:13:EE:BA:75:04:AA
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d2:c8:fd:f5:d1:cf:e0:57:af:5b:a9:d0:05:bb:fa:81:ae:
37:d3:6b:ca:71:30:45:27:22:8d:aa:71:92:de:6a:23:1b:31:
5e:a6:c9:f1:c2:bf:f4:8c:cb:ae:75:85:ac:15:aa:8d:3e:4f:
ce:5f:8f:61:df:8d:ef:83:d4:d3:2f:19:15:40:4e:80:2f:ee:
82:1e:53:d0:3c:f5:46:99:4a:98:63:49:6c:bc:79:07:a2:30:
36:9a:d8:d2:7d:77:85:96:c0:d5:f8:83:99:4d:f9:ed:8c:b7:
fd:97:ca:b7:4f:b3:13:be:47:62:b8:dd:ca:28:76:4c:80:23:
94:73:a0:12:6e:ab:e2:de:40:29:70:73:a4:42:d8:e1:b8:65:
1a:c1:e5:51:fa:6a:19:cb:b7:fc:ec:f0:f3:56:b2:ce:fe:be:
6b:5c:00:92:22:50:ec:fd:f4:5a:a5:0a:ed:78:1d:f5:4f:34:
cf:45:9f:71:35:51:79:67:cd:27:34:68:88:2d:27:88:25:bd:
81:91:15:dc:4c:ac:25:eb:fb:2f:c2:41:d6:ec:dd:f6:0c:85:
04:e1:5c:b8:2b:e4:bb:92:a5:01:da:24:9d:5b:bc:31:66:b5:
d3:d5:3b:e9:ec:22:29:bb:b5:71:57:e4:3b:d7:59:5a:b0:3c:
e4:da:8a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:13:39 2025 by rpki-client