Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: uu1+Wt6k6FVYDRDxVYtIwYMwOoZ370r6z1/sgUMvA/4=
Subject key identifier: 2F:11:D2:F0:E8:B7:38:1B:E7:E9:4B:07:64:EB:78:D5:F0:1C:C7:3E
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 01975E3900C91EB7B2EAB2D09CA2E0E8B75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 0578
Signing time: Wed 11 Jun 2025 09:01:23 +0000
Manifest this update: Wed 11 Jun 2025 09:01:23 +0000
Manifest next update: Thu 12 Jun 2025 09:01:23 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: su2bZdl0qDXuVpYz4XuLzDEbLqUc9gjAgP6/+Dh+SWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:39:00:c9:1e:b7:b2:ea:b2:d0:9c:a2:e0:e8:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jun 11 09:01:23 2025 GMT
Not After : Jun 12 09:01:23 2025 GMT
Subject: CN=2f11d2f0e8b7381be7e94b0764eb78d5f01cc73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:48:b1:8d:7a:48:11:04:1d:9c:e3:db:47:
24:76:24:72:ef:df:66:ec:97:76:ca:d4:75:04:c2:
de:70:7c:83:b8:97:92:11:54:5a:34:5c:30:07:58:
99:6d:4d:a7:f8:64:8d:dd:74:69:f3:6c:a5:13:f7:
0f:99:15:54:32:ec:73:11:bc:17:82:26:0c:c6:35:
74:01:b1:8b:13:8b:9c:8b:10:5f:49:a5:7c:8e:65:
f9:d1:54:80:71:5e:22:9a:50:ce:58:19:50:1a:a7:
cf:a0:45:35:d4:bd:32:ad:e6:76:72:5d:f0:c8:0f:
ad:09:f2:71:5a:d6:a5:80:fa:52:42:38:8a:f4:e8:
6e:04:d1:8a:50:8d:32:73:f4:db:f1:f2:fc:09:2d:
3b:bd:ce:f7:95:b6:b3:fa:0c:a0:b7:72:25:c3:3b:
7c:a8:80:74:b5:56:f0:ce:be:8f:95:4f:d6:5e:e7:
b1:be:c1:7c:65:86:25:62:ce:82:33:14:75:bb:09:
5a:bf:c9:99:b4:06:a7:07:c0:02:d9:15:96:61:a4:
e2:8c:d6:b8:58:00:35:cd:3d:7d:22:b5:90:3f:a0:
7e:0d:e0:02:6e:bd:92:a8:00:88:75:e1:3c:fb:f9:
0a:c1:65:91:5e:3b:84:cd:b3:c7:95:fc:05:aa:c7:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:11:D2:F0:E8:B7:38:1B:E7:E9:4B:07:64:EB:78:D5:F0:1C:C7:3E
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:64:3e:c0:e4:fd:5f:52:b2:99:b4:db:00:38:7f:5b:de:e0:
19:94:ef:50:25:d2:a9:9c:2e:8e:25:3f:51:a9:02:e3:c3:ba:
b2:d3:db:2a:7a:41:fa:4c:f1:05:fb:47:c8:08:1a:f7:1f:bb:
83:db:41:fd:1e:5f:98:83:0e:a7:db:ef:02:99:2e:98:b7:8d:
da:d1:e6:98:a4:79:54:8c:75:64:c2:54:17:a1:89:5d:c3:80:
b1:dd:47:2c:45:49:5a:91:cd:91:70:91:8f:eb:69:de:26:87:
12:6d:c0:3a:41:73:f7:49:98:7c:b3:01:6c:11:96:cd:81:f6:
dc:02:38:61:3a:7c:2f:2b:52:f1:c2:99:35:73:6b:87:db:21:
6c:2b:04:ad:56:33:12:71:83:ac:8b:a1:77:42:2a:d5:24:b0:
a4:a1:84:c9:ec:1d:e6:2d:01:2b:89:db:3a:02:60:2d:1f:47:
bb:0c:36:57:11:25:6d:32:75:14:5d:9a:ed:02:ac:d6:09:2a:
c1:3c:6a:a9:51:a2:d3:aa:fa:0b:65:de:ad:85:e8:d6:a5:8d:
c8:47:99:30:2d:f1:e2:f4:03:ed:29:da:4e:9b:0b:7c:85:07:
c4:ee:e2:25:b5:dc:0c:3d:39:9c:0f:33:79:4a:d5:9c:35:9a:
4c:51:f9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:57:09 2025 by rpki-client