Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier: GDWb0Wwg9u8Pn7eAqDryOz+YI7NDr0t+XQ0Hrop42EI=
Subject key identifier: 8C:F0:24:B8:D0:BF:A7:E5:96:7B:9F:8C:DA:C0:7A:D0:28:5A:74:23
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial: 019749D5F04EFF94E96268652CC00E4156C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number: 14EC
Signing time: Sat 07 Jun 2025 10:00:46 +0000
Manifest this update: Sat 07 Jun 2025 10:00:46 +0000
Manifest next update: Sun 08 Jun 2025 10:00:46 +0000
Files and hashes: 1: YXf-UI6sodjRtp6HqVvWtQPvYyw.roa (hash: Jo6+/rWF7ZwPltXrVquS1cq9nd5I9gl4VOXFVkjNYeU=)
2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: vT8mS7AfffIBuLAaR99IGxpy6lI5GlVsTxyl6aSlIkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f0:4e:ff:94:e9:62:68:65:2c:c0:0e:41:56:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Validity
Not Before: Jun 7 10:00:46 2025 GMT
Not After : Jun 8 10:00:46 2025 GMT
Subject: CN=8cf024b8d0bfa7e5967b9f8cdac07ad0285a7423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:4b:48:3e:a4:f9:c6:13:df:21:f6:a6:11:
cf:80:23:cb:25:3d:e9:c3:55:e6:d0:77:e5:ec:6b:
3c:d9:f9:e0:44:09:04:9f:13:5b:44:9b:ee:47:ba:
66:84:11:8b:18:c4:bd:71:c5:45:fd:42:f2:1b:9b:
5a:ad:4c:83:60:4d:fe:27:be:78:6a:a5:5f:29:a1:
b8:17:08:9d:e7:5a:c8:46:c0:74:bf:ab:03:1b:8e:
fd:d6:c4:3a:db:7b:bc:10:13:d0:63:80:63:ef:a6:
10:b2:e3:3f:bc:ee:7f:af:1d:d8:f5:83:65:da:c4:
61:23:18:5a:48:95:af:f9:22:1e:7c:06:22:a8:18:
e9:fe:2c:6a:1b:bb:1f:60:8c:91:65:b8:bc:7a:18:
1f:7d:c3:c4:92:80:e8:93:13:bb:1b:96:8b:1c:62:
be:f7:04:59:9a:12:fc:7e:b2:05:dd:cd:7c:38:f9:
68:c0:7e:76:a0:4d:af:59:11:be:e7:6c:ac:1a:01:
b0:25:91:87:95:3d:42:de:91:fc:20:18:29:e7:9c:
47:39:aa:4c:f7:9e:ab:7e:91:6e:6d:1a:d9:d4:b7:
f1:aa:e6:3c:d9:c4:a8:31:03:c1:2b:97:68:90:c2:
d9:f6:29:56:6c:89:5f:98:2e:ab:da:0a:6a:db:8c:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:24:B8:D0:BF:A7:E5:96:7B:9F:8C:DA:C0:7A:D0:28:5A:74:23
X509v3 Authority Key Identifier:
keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9e:a4:11:4c:27:4e:3b:b2:73:c4:5b:c0:fa:08:2a:55:26:
64:49:f8:39:ae:69:21:52:52:91:45:a4:78:23:84:3d:5c:69:
99:c6:d4:ff:66:f8:fc:3d:4c:72:88:b1:dc:ec:4c:93:9b:0d:
07:24:e5:68:dd:33:60:a0:a7:17:1f:97:e9:39:4e:4f:22:03:
e4:77:78:be:03:ce:1d:0f:92:2e:1a:b3:ed:e3:d0:34:83:e9:
21:f5:52:e4:96:00:82:1f:78:41:54:49:39:1c:62:5d:22:51:
73:98:d5:88:be:a3:4d:d3:62:27:22:9c:1e:19:07:59:83:50:
67:65:f8:17:7d:67:db:9c:2f:78:0a:ec:d2:ba:09:fd:57:b3:
e3:dc:1e:cf:23:34:a9:a6:e1:7b:69:4e:a0:eb:b5:7e:16:28:
c1:e4:d9:d5:09:e7:7d:28:39:43:64:11:00:4b:e1:75:c6:e0:
28:e8:07:fd:f5:8e:3c:46:56:44:28:ce:50:01:4e:a5:e6:8c:
56:6e:bc:b5:3d:94:24:06:43:8d:fd:3b:e4:5b:2a:d2:3d:25:
94:51:c1:ff:1c:32:0f:94:35:39:2f:7d:cc:06:71:cb:36:cf:
d8:d8:0a:d9:88:27:a6:cd:63:37:09:aa:cf:f9:4f:2d:89:0f:
8f:1b:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:58 2025 by rpki-client