Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: 9ENjLGdrmBOR1zxUcXS6uA6YkyEYp5XaidW35NeatBA=
Subject key identifier: F1:F5:BF:2E:AC:5F:AB:D5:98:93:F9:74:93:C3:80:DE:31:99:0D:66
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 019749D5A0208E2075F0704AD52CBF18A89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 09BB
Signing time: Sat 07 Jun 2025 10:00:26 +0000
Manifest this update: Sat 07 Jun 2025 10:00:26 +0000
Manifest next update: Sun 08 Jun 2025 10:00:26 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: SO4YabwNNL449u4JH2UlzrXfcRHGaVs8jVjSVF53n+E=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a0:20:8e:20:75:f0:70:4a:d5:2c:bf:18:a8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Jun 7 10:00:26 2025 GMT
Not After : Jun 8 10:00:26 2025 GMT
Subject: CN=f1f5bf2eac5fabd59893f97493c380de31990d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:88:37:68:de:58:74:67:a0:3d:99:24:f2:
b9:59:89:1f:4c:c2:5c:ea:9e:96:bb:df:6f:31:33:
c6:4f:7a:dd:e3:83:a2:09:5e:9b:1d:7a:32:cd:45:
8b:29:7e:b8:51:f9:e1:60:c1:28:9b:ec:36:1e:a6:
23:fb:d4:2f:e4:9f:6e:2b:b2:cf:89:4e:b7:52:40:
7d:47:7f:7d:d4:17:33:7d:a6:53:d7:11:13:5a:68:
48:0a:c3:1c:1e:f1:23:d1:ad:13:51:7c:c3:7c:8a:
bb:e0:85:8d:01:bc:a2:0d:c6:82:71:62:6c:2d:c6:
b2:a5:72:bd:57:c2:c0:1f:35:93:8d:7f:d6:8e:41:
47:48:e6:b6:45:b1:11:fc:22:49:1d:1c:92:d6:74:
86:dd:a5:e3:d8:36:9a:4a:d1:b2:ad:07:72:1e:f1:
11:ca:78:ae:a9:40:18:e8:c8:63:0e:02:ae:48:9d:
91:5d:6d:6f:b3:a9:e6:8b:18:9e:b6:72:07:4e:6f:
43:46:b2:c6:99:00:05:21:87:c2:80:7e:f1:b3:e0:
75:09:fd:1a:4b:42:58:a8:ce:34:32:f7:d7:39:ea:
3b:53:ce:36:2f:ca:ed:48:f7:c3:1b:71:a8:55:17:
f3:5a:ed:57:87:c3:22:42:c1:fe:71:a7:71:64:73:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F5:BF:2E:AC:5F:AB:D5:98:93:F9:74:93:C3:80:DE:31:99:0D:66
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9e:7b:f4:45:fc:94:f3:49:31:c0:97:9e:b0:ed:4c:06:5e:
b4:f9:fa:93:90:90:7f:66:d8:98:37:b1:67:1b:88:52:37:1a:
51:4f:7a:d3:e8:61:8b:d3:45:d5:1e:70:f6:5f:fa:ce:8d:a6:
fa:d7:6d:c3:cd:e3:33:f1:82:c2:9b:76:3f:36:f0:2e:b1:b2:
6e:39:93:52:ea:ff:dd:bf:30:16:42:a9:2b:57:67:5d:ce:9d:
97:71:0c:e9:7a:cc:80:b7:b3:7c:ae:d2:04:f3:3b:df:1f:bd:
71:27:05:40:9f:70:7b:29:c7:b2:b8:c9:e2:ff:53:88:2e:35:
d1:cc:07:12:9e:52:70:bf:12:a7:85:2d:11:f8:5b:57:a9:72:
9d:7b:76:7b:c9:b2:26:ab:ff:26:d1:e2:cc:2c:80:d9:4a:1e:
ea:5c:1b:0a:32:7d:47:74:52:fa:21:78:fe:69:7d:ed:2b:b4:
cd:78:cb:b7:d0:14:3a:01:84:47:ff:8d:96:86:03:15:25:3b:
85:e6:12:f0:b8:f0:3c:e2:cf:68:38:79:61:d8:1d:e9:3f:d3:
8e:81:b0:88:db:f8:32:d9:99:39:7c:c0:6b:7c:34:ac:40:2a:
b9:7f:ab:ac:64:01:d4:42:70:74:28:e6:dd:f4:09:5d:0f:69:
8e:47:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:05:24 2025 by rpki-client