Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: nASQW8fskv6bYHUBfsI4wBxu0pe/1s1Hqp6AYL3QaBM=
Subject key identifier: EE:7D:AA:A5:14:EF:C7:2B:27:BB:62:DA:6D:F8:19:59:84:0D:3E:42
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 01974BFB496A159A5C81F39A2CF76DA5F64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 158E
Signing time: Sat 07 Jun 2025 20:00:48 +0000
Manifest this update: Sat 07 Jun 2025 20:00:48 +0000
Manifest next update: Sun 08 Jun 2025 20:00:48 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: tm4sPd1QuI/nQCVcJB99rlJN1ZWKRf/X33s31Jxhnnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:49:6a:15:9a:5c:81:f3:9a:2c:f7:6d:a5:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Jun 7 20:00:48 2025 GMT
Not After : Jun 8 20:00:48 2025 GMT
Subject: CN=ee7daaa514efc72b27bb62da6df81959840d3e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:30:8d:d6:b7:df:c3:6c:40:5c:d7:d6:35:
df:02:96:a0:df:d3:f9:2a:f3:24:25:66:3a:64:1f:
8f:30:bc:1a:87:55:b0:75:8a:ae:8a:43:66:11:e6:
d4:46:73:da:f6:13:f5:bf:0f:66:e3:11:e8:be:38:
95:69:d7:9e:24:e8:d2:ae:04:b0:b8:cd:2b:18:f6:
af:98:bc:ce:92:c5:94:ba:ce:53:f0:34:d3:2b:ed:
2a:0d:60:0b:79:01:17:66:f3:a8:29:c8:c4:9c:a5:
80:73:47:ac:01:dc:a6:12:e5:0d:0c:b3:7f:80:65:
ac:69:92:7f:5b:ac:c1:a7:c2:6e:76:b9:72:3a:f4:
19:db:bd:1c:18:11:89:be:01:60:98:94:10:b9:c1:
74:f8:bf:ae:20:be:f6:2d:ed:3a:f0:3a:ed:9e:cd:
f2:49:a3:e4:a1:aa:66:20:d0:bd:be:b0:06:b3:a1:
d0:cd:fc:4e:3b:1c:9e:06:9f:1b:89:d5:88:07:18:
d0:57:56:62:7a:8e:c1:a0:7b:8d:e1:aa:4c:93:81:
7e:80:b7:1c:93:f8:fa:c8:61:36:40:a8:8c:e3:37:
3d:87:e1:16:23:28:59:dd:a3:fc:d8:c7:c8:75:a2:
cf:2b:da:dd:25:7a:ff:e0:78:7c:fc:59:55:db:ce:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:AA:A5:14:EF:C7:2B:27:BB:62:DA:6D:F8:19:59:84:0D:3E:42
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:21:a9:3e:28:0e:6c:47:91:01:63:ac:8f:63:03:c0:ea:
26:fd:ad:7a:cd:7f:4b:8f:5f:0e:6f:5b:cf:30:6f:01:bf:14:
51:96:59:83:3c:bb:e1:f7:7d:bf:9c:e9:d4:c5:75:e7:a0:a5:
c7:83:ad:db:c2:e5:53:59:d4:b7:12:cc:34:e5:74:e3:29:21:
dd:bc:43:7e:bd:ce:d1:97:5d:9f:5b:7c:19:7e:98:8b:ef:f6:
5b:7f:f9:50:3f:6e:d9:3a:a2:a0:2a:b9:a9:ba:ba:db:32:f9:
69:a4:60:43:f9:02:d8:d4:1a:7b:d6:37:ec:f4:97:8b:9f:d0:
ff:3a:09:41:5f:a0:93:53:ff:24:bb:71:73:69:29:a6:22:1f:
b6:ac:14:63:b1:a4:d0:b2:1d:60:9a:c2:fb:c8:05:34:8d:b1:
c8:b7:83:7f:d4:91:a7:f6:36:54:9e:a6:41:e8:f9:10:fb:9c:
90:ea:fa:54:59:aa:89:c3:3c:d6:d2:e7:78:75:09:79:9b:6b:
d1:bd:2c:42:c8:de:4e:81:54:69:c0:96:d2:a2:db:39:79:9b:
28:dc:9b:2d:a5:72:24:8e:8d:63:85:ab:27:93:f5:9f:08:99:
7f:3b:b2:3b:24:46:95:da:80:39:f4:a2:73:f9:d3:ab:fd:b6:
25:64:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:35 2025 by rpki-client