Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: YL7efO+DeipGHImCTYeqfzhy0+LHxPn8L7XKgeSp6ec=
Subject key identifier: 2C:51:72:AD:A4:40:00:0F:2B:CE:11:C6:39:29:EA:35:A0:62:08:80
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 01975C4A795E65C1605643FC20051F8A3AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 0577
Signing time: Wed 11 Jun 2025 00:01:13 +0000
Manifest this update: Wed 11 Jun 2025 00:01:13 +0000
Manifest next update: Thu 12 Jun 2025 00:01:13 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: Obl/FqX55JkJqEHgbbYpCLoito5bKQRqNfbLG3csU08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:79:5e:65:c1:60:56:43:fc:20:05:1f:8a:3a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jun 11 00:01:13 2025 GMT
Not After : Jun 12 00:01:13 2025 GMT
Subject: CN=2c5172ada440000f2bce11c63929ea35a0620880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:6e:b6:56:4d:e9:f7:00:10:ba:37:81:c4:
eb:4d:ca:5c:fe:3a:58:a0:b0:4e:a1:5a:9a:5d:6e:
1b:3e:7b:47:ad:6e:2d:17:f5:fb:1f:1a:34:4e:0e:
47:95:3b:b9:f6:3b:a2:91:c2:b1:21:14:46:a1:24:
e0:22:d3:bc:44:8f:b8:76:2b:2c:32:bb:50:ae:11:
95:57:3a:37:62:54:a0:00:08:b1:29:af:ad:96:55:
14:32:ae:0e:ec:ad:57:88:f9:f2:e7:25:ed:ab:5b:
64:1f:95:26:11:4c:f2:c9:c1:6d:46:82:95:b8:af:
7c:0b:eb:9f:38:55:97:0d:54:96:57:70:5c:d8:bd:
e7:d6:67:99:45:1f:54:f7:44:fc:9d:5b:c7:d6:e2:
e0:02:03:f4:30:a5:c1:90:84:12:41:2c:b5:71:45:
13:87:09:bc:31:a6:59:4e:b1:78:67:ec:38:c4:c7:
86:d4:f0:e7:69:7e:62:37:cb:40:93:40:f9:bd:2f:
87:ba:74:1a:39:e4:4e:04:3e:1d:cc:f1:4f:cf:04:
0a:aa:58:a0:06:e1:7f:3b:dd:eb:88:c8:e8:20:75:
56:bf:b7:4c:f8:b6:f0:2b:d5:9c:e7:a0:f9:cc:fa:
f5:e0:69:6e:dd:46:04:d2:22:4c:c9:a1:5d:91:f0:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:72:AD:A4:40:00:0F:2B:CE:11:C6:39:29:EA:35:A0:62:08:80
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:62:00:eb:d6:57:53:17:be:5f:62:b8:50:54:da:7a:42:60:
ef:a3:34:45:ba:14:b5:22:7d:d4:2a:2d:8d:37:a0:f9:95:cc:
d1:da:ed:f6:93:4a:2a:08:01:a5:5b:cb:ad:ba:94:fd:18:3f:
8a:d9:98:6f:7d:a8:e2:7b:b9:00:57:38:cd:d6:8c:6b:35:6a:
8c:1c:ce:24:ca:6a:f2:83:e2:3d:3d:c8:4c:5c:cd:05:61:b1:
8d:b2:18:2b:48:f6:e7:73:cf:cd:12:a5:8b:27:02:26:94:04:
71:11:0d:d9:00:57:f6:61:ec:16:a9:d0:9e:34:06:43:77:38:
ee:64:7d:0d:60:83:79:60:76:e7:20:45:3a:1a:eb:28:f7:12:
17:8d:3a:e7:80:16:38:79:3b:ba:a7:b5:79:58:20:87:ab:6e:
e1:df:f3:1f:3f:22:44:3f:62:20:7d:31:8a:30:e8:7f:47:aa:
37:8c:2e:8f:bb:72:0b:da:42:f2:6f:1b:ee:f5:c3:1d:67:a1:
36:95:48:d9:c7:ef:0b:5e:0c:04:a2:88:5f:2c:8a:ef:77:6c:
a5:20:65:c9:91:dc:a7:ca:65:71:6a:e7:ba:6c:99:b1:ef:ed:
f6:65:a9:5d:b6:92:e8:2d:96:72:cc:b8:da:f7:ee:f8:47:d7:
e2:01:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:45:53 2025 by rpki-client