Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: LP+XgWBDjToxf4eCTyzXOv5aFtoFmmV6/pKN2hZeswQ=
Subject key identifier: C6:BA:0E:5D:86:37:1C:F8:34:AE:6B:08:18:74:A3:79:2E:17:31:FB
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 0197469E1885984BB727A26CC83845581F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 19:00:55 +0000
Manifest this update: Fri 06 Jun 2025 19:00:55 +0000
Manifest next update: Sat 07 Jun 2025 19:00:55 +0000
Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=)
2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: S5qm62AYkIhfRy4ApwHCip2sBPOh51ybky2ysDPF0j8=)
3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:18:85:98:4b:b7:27:a2:6c:c8:38:45:58:1f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Jun 6 19:00:55 2025 GMT
Not After : Jun 7 19:00:55 2025 GMT
Subject: CN=c6ba0e5d86371cf834ae6b081874a3792e1731fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:7d:6c:65:65:dd:ab:1d:f1:8e:f6:81:68:
95:dc:e9:19:fa:67:a2:26:65:f9:84:77:7f:b1:e9:
20:85:43:e9:20:b5:1b:22:3b:dd:1d:4f:5b:9e:25:
db:1f:a7:e4:98:9b:92:90:61:a1:b3:8d:c8:98:d7:
a6:3f:16:b0:c1:f6:56:93:c2:3c:72:96:03:21:c6:
a5:ea:7f:49:84:fd:14:1d:16:ce:ea:2f:40:97:d9:
a4:fd:5e:ee:84:80:17:3f:47:02:3e:82:9d:4a:b7:
ba:94:42:fb:91:5f:c1:29:81:f4:0e:6d:61:70:70:
45:94:e9:85:a1:86:3f:d8:71:10:83:a9:ed:69:67:
61:67:75:98:cc:01:7a:88:63:65:2b:4e:96:1e:96:
ca:b2:ab:43:a1:bf:64:5a:24:e4:a6:0b:0d:80:dd:
c5:93:9c:5b:0f:f9:2c:56:21:dd:b2:6d:c6:da:5c:
25:bb:ba:20:03:13:f1:b6:1b:8f:e3:24:aa:11:e7:
37:88:ee:f7:e7:b9:3e:4a:09:04:89:db:94:cf:49:
ec:bb:6c:f5:5d:03:2b:ba:4d:00:c1:9e:98:15:ee:
2a:6a:11:44:a4:b1:3d:fa:de:03:b2:3f:3f:2c:1a:
ee:80:f5:3d:fe:2a:80:2e:30:0f:65:a9:a1:d0:db:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BA:0E:5D:86:37:1C:F8:34:AE:6B:08:18:74:A3:79:2E:17:31:FB
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:0a:23:64:9a:43:ab:7c:80:7f:a5:c8:11:32:57:ef:55:
3d:db:05:c1:8f:53:94:6a:a0:40:fa:67:6c:bc:e0:f2:e1:7e:
f9:0b:ab:86:24:58:df:5e:3e:3f:86:b0:29:fb:5c:f5:ee:0d:
52:92:9d:d0:6b:1c:6e:13:6d:69:65:70:78:9a:5b:5e:e0:7b:
ba:51:98:ba:1c:3b:c9:a6:b3:c1:4b:c4:7f:c8:d8:d3:f0:a4:
0d:bd:cf:88:65:67:93:f6:19:89:31:54:11:46:fa:3d:8b:15:
db:ae:7f:a7:e3:6d:73:3b:0b:ec:43:e3:00:b3:99:18:51:ab:
d9:9f:e4:f0:c9:65:3c:49:eb:e3:41:a4:76:8a:c6:a6:29:ca:
be:9e:6e:d2:70:37:f3:77:84:92:03:2a:9d:e8:c6:f3:29:e9:
90:7d:b7:8e:40:72:96:7a:aa:5b:f4:8e:9d:4b:7c:ea:4c:18:
e3:c5:a3:bd:2d:80:5b:96:fa:e6:b1:32:75:71:70:df:20:3f:
cd:42:1f:4f:1e:70:7a:eb:b0:fd:bf:54:4b:61:31:69:25:1b:
28:47:6d:38:08:71:07:8a:5a:ad:eb:d8:de:a3:15:14:69:98:
3e:97:f9:39:b5:bb:a5:5a:df:c6:58:4a:19:56:44:27:dd:3a:
b7:39:92:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:25 2025 by rpki-client