Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: vCO/ztOalBqzJlbFhnypmtwJvDxCJApBf5xWqE0yxz4=
Subject key identifier: B5:EA:DF:83:1A:64:92:DB:51:52:84:9F:15:14:85:98:F2:7C:2C:7F
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 0197488CC02D48A7148D52ACB603BBB8BD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 1340
Signing time: Sat 07 Jun 2025 04:01:12 +0000
Manifest this update: Sat 07 Jun 2025 04:01:12 +0000
Manifest next update: Sun 08 Jun 2025 04:01:12 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: y4gLlfrIDTdYkY0aM5oWFg0l/+v/6U7nK2vg3Cz1+jk=)
2: o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa (hash: ju/o7BILnihNNjEqI90onU7QdzoVAl2fjP/NUv+3xWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c0:2d:48:a7:14:8d:52:ac:b6:03:bb:b8:bd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Jun 7 04:01:12 2025 GMT
Not After : Jun 8 04:01:12 2025 GMT
Subject: CN=b5eadf831a6492db5152849f15148598f27c2c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:2f:20:d8:56:41:62:d8:bc:ff:51:86:1b:
fa:73:f5:1b:00:5e:15:b4:ca:62:82:e6:c3:73:80:
84:18:17:21:25:57:90:8e:59:ff:a6:1c:41:a3:18:
c5:83:37:37:88:dc:62:a2:c3:80:b5:1e:23:ba:e4:
c2:a3:29:5a:0c:ae:98:95:74:df:0e:af:a0:3d:6c:
77:8d:16:9d:2a:f5:ce:33:e5:74:e3:01:bb:0b:e9:
74:ad:95:6e:02:b4:4c:95:2e:8b:62:85:9c:6d:a2:
f0:a6:a2:5c:a2:2e:0c:6d:26:60:01:34:55:61:48:
e1:d1:75:93:8e:f2:56:ff:34:2a:82:84:4f:4b:13:
15:61:b8:6c:e9:fd:a7:87:13:d8:21:6c:92:4e:72:
32:ae:7f:43:9e:e7:c6:1d:49:19:32:a8:fd:03:2a:
21:4d:9f:93:f9:d0:db:97:0b:6a:e6:95:41:ff:a8:
35:99:01:b0:b1:6b:8b:45:cf:a5:bb:ca:ef:3d:28:
07:34:8c:82:2b:60:44:1c:ad:5d:e6:bd:24:11:cc:
c5:4d:01:54:09:f5:d0:26:d4:e6:d7:e3:13:66:09:
ac:93:20:7a:ba:1f:48:74:27:e0:f0:93:cd:9c:fb:
e0:4e:ef:39:b8:18:0f:37:d9:0f:5c:c4:ce:67:93:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EA:DF:83:1A:64:92:DB:51:52:84:9F:15:14:85:98:F2:7C:2C:7F
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7d:03:d6:b7:21:94:71:4e:f1:98:fc:6f:31:36:2f:a1:3f:
38:45:76:68:c6:b5:5e:aa:52:01:45:8b:ec:23:03:eb:97:8d:
30:22:2e:f3:88:b8:bb:41:f9:31:92:04:66:01:3f:bb:74:93:
0a:40:41:e1:25:86:e1:8b:10:bf:68:0a:b0:28:14:e2:3a:98:
41:82:26:d2:6a:4f:a8:79:22:27:dd:46:b4:ed:45:4e:98:40:
89:f1:54:1e:d1:15:cf:76:9b:87:dd:10:5d:3d:5e:75:9c:58:
c2:66:f6:ef:11:35:6f:fd:3e:b7:11:19:07:80:cb:d6:b5:32:
ca:44:b6:c1:9b:5c:0a:62:09:80:d6:8d:9b:fb:4f:bb:94:8c:
d5:5f:cd:ab:9d:e8:cf:5d:56:3f:13:13:21:aa:e6:88:83:08:
1a:7b:24:61:50:7d:36:80:98:09:3f:71:1b:45:4b:19:74:66:
15:0d:6c:b3:d1:09:4e:da:9b:58:d3:bf:66:33:05:1e:dd:26:
e6:27:0d:73:8d:bb:19:a9:b5:21:d6:e0:fa:67:90:c5:e5:b0:
13:cd:a2:3f:25:78:a5:72:69:14:ab:9d:18:ff:ea:5b:05:16:
cf:85:61:fd:a5:48:54:db:f4:0c:27:ed:b9:c3:6f:ec:32:1c:
45:6a:d5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:28 2025 by rpki-client