Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: BW4oM3Ffh7LLh5CDZUMdL/X2dWzBvjBvoZz94G+hnug=
Subject key identifier: 8A:DF:C6:24:DD:5D:A4:1B:62:0F:96:BC:8C:5A:A5:EF:60:08:7B:AD
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 01974E5861A217B8A4CDF455F42D43B7796D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 07:01:44 +0000
Manifest this update: Sun 08 Jun 2025 07:01:44 +0000
Manifest next update: Mon 09 Jun 2025 07:01:44 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: X9CuvL++2rkboLBI3JzrqXFW/+Ur/1GWm7mCOA+0ZQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:61:a2:17:b8:a4:cd:f4:55:f4:2d:43:b7:79:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Jun 8 07:01:44 2025 GMT
Not After : Jun 9 07:01:44 2025 GMT
Subject: CN=8adfc624dd5da41b620f96bc8c5aa5ef60087bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:7f:69:64:14:de:6d:96:98:25:51:ed:12:
39:5e:ce:7f:a9:a7:ae:6f:ff:89:69:6a:d2:d9:15:
50:78:23:44:b1:b2:d7:1d:28:a2:6f:3b:50:2d:e5:
45:44:78:29:a9:8e:f4:ca:72:cb:25:27:f6:b5:5e:
2e:c3:37:72:ab:22:f6:67:9f:ee:15:ed:01:02:69:
51:f2:b6:fb:56:05:88:fe:9d:3a:fd:b7:47:bf:b2:
da:d7:82:2c:5a:b2:3f:03:7e:2b:c4:f1:f3:b5:54:
bf:b9:45:8f:9b:50:72:c2:e3:ec:4f:1e:d7:6e:23:
a2:5c:d7:06:eb:a9:c9:76:28:8e:9d:c5:19:40:e3:
ea:f0:db:c9:43:65:fe:92:13:7f:14:80:03:5b:54:
f1:91:2c:9f:c0:0d:0c:da:1c:fc:07:e9:0e:a8:d3:
28:e5:90:e1:05:a6:0c:c5:89:0c:7a:60:8b:04:41:
a5:66:5d:2b:e0:b8:dd:86:d3:69:3b:66:77:7f:72:
8b:5e:4c:12:9e:5e:dd:d2:be:cf:64:f2:03:f8:e8:
07:44:a6:1e:6e:b3:88:17:4c:a9:51:a5:1b:83:09:
fc:9c:81:3f:24:6f:69:f5:26:a9:ea:98:2e:de:9e:
27:c7:a9:14:33:ea:6b:1b:cb:c8:38:21:26:d8:68:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DF:C6:24:DD:5D:A4:1B:62:0F:96:BC:8C:5A:A5:EF:60:08:7B:AD
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7f:13:f7:7b:6c:bb:01:47:98:37:2c:46:46:71:2b:53:86:
cf:7f:0e:c3:ce:06:0b:da:1f:4b:94:da:ad:a7:0a:99:08:22:
9b:f5:69:35:46:00:3d:c6:6c:ba:80:b1:e1:9d:db:f9:88:83:
be:d6:43:68:38:24:8f:41:1b:cd:8d:c8:0a:dc:f7:e8:c9:82:
3b:f7:e1:6e:fc:f0:1a:08:cd:d3:6d:73:42:cd:76:bf:e0:80:
82:45:a4:cb:1f:22:1d:b8:63:4f:4d:70:1b:ea:9f:2c:35:a0:
bc:65:58:c4:17:62:aa:9a:e6:51:ca:53:50:f7:fb:fa:1b:f7:
a6:3c:5a:7c:18:49:0f:2f:59:f4:e2:dd:04:47:cf:33:a2:78:
54:61:1f:a2:e6:4b:35:5f:f7:8c:fe:2c:69:b7:21:b6:10:f4:
56:bb:9a:d5:20:6a:c9:c2:4c:1a:0e:d1:c2:e2:d6:48:20:db:
49:fc:c1:9e:66:0e:7b:8a:e7:17:59:73:75:c3:8a:a7:2a:d7:
b9:91:89:44:21:27:0e:03:e1:d9:a7:03:ec:cf:e5:29:e4:ed:
7f:c7:7a:e1:72:1b:37:4e:8e:5f:0d:42:54:b3:20:77:69:3d:
79:17:3a:09:18:3d:c4:e9:cd:fe:e3:de:40:de:fe:76:49:a6:
34:42:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:13:57 2025 by rpki-client