Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: h7B3bFjZ5vDhKQ6daW6si8iS1lFXc5PiUeoRLncxjvs=
Subject key identifier: 30:08:75:B4:E1:8F:0F:76:B8:F9:C8:87:C9:34:7C:22:FD:F7:C8:8A
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 0197537D70D062FF7DB16CFF22301AB88BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 07:00:19 +0000
Manifest this update: Mon 09 Jun 2025 07:00:19 +0000
Manifest next update: Tue 10 Jun 2025 07:00:19 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: elL8G6xrNXalw+oXB57NluehY98W7qktUSQJLRdjPhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:70:d0:62:ff:7d:b1:6c:ff:22:30:1a:b8:8b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Jun 9 07:00:19 2025 GMT
Not After : Jun 10 07:00:19 2025 GMT
Subject: CN=300875b4e18f0f76b8f9c887c9347c22fdf7c88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:64:e5:dc:a3:27:e1:4e:8e:95:a4:df:d2:
0f:a5:e5:f5:e7:c6:a0:10:be:bc:91:60:69:ef:78:
8a:94:5c:ea:18:38:a2:36:04:23:63:32:a2:00:f4:
d9:76:9f:35:85:6f:14:7b:5f:0c:97:38:16:c1:f8:
87:4c:23:0d:43:a2:21:bb:2e:08:7c:42:54:e8:05:
80:bd:b5:be:96:f6:89:4a:d0:30:10:cf:96:2a:10:
2d:f1:f6:12:a3:cc:e4:51:e1:9c:24:84:98:d7:2d:
c1:19:24:b3:fe:cf:70:d0:75:53:df:21:24:61:50:
b0:d8:2f:99:2c:2a:22:2f:cc:97:ad:0f:00:c1:cc:
fa:82:ad:0e:25:5e:d5:e8:cd:bf:01:da:19:2f:8e:
4b:cf:27:d7:dd:7e:27:6c:e6:0a:5f:b3:b7:32:36:
5b:6b:b5:6b:16:0a:7b:7e:a1:13:e8:11:9c:a0:9e:
49:8b:f3:2a:5a:a9:f8:63:59:95:a8:f8:a4:74:0e:
10:cc:fc:31:a7:97:bb:11:d0:8a:8b:fe:22:70:bf:
57:c1:7d:2f:7b:af:b1:24:ab:bc:94:29:dd:7b:66:
23:49:7a:40:b0:67:34:c0:cb:2b:04:ee:07:cb:41:
a3:76:80:f2:cf:c3:6c:37:82:a6:1f:09:ca:16:74:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:75:B4:E1:8F:0F:76:B8:F9:C8:87:C9:34:7C:22:FD:F7:C8:8A
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5a:69:49:31:80:c3:6c:d1:81:e0:e5:ba:58:be:dc:8d:14:
3e:94:5f:e1:18:08:f3:de:a8:89:de:70:c4:05:d3:aa:1a:87:
28:75:88:d6:01:8f:bb:b7:f4:49:75:25:b7:28:57:e0:3d:64:
69:d8:68:87:7b:5a:57:b4:f8:d8:93:f6:3a:8c:d8:f2:a1:c0:
21:67:36:da:f6:24:e1:ff:af:9f:d7:41:7c:db:c7:93:c6:ca:
60:5b:bd:4e:a8:74:b2:20:3e:ec:30:8f:84:f7:c8:58:e4:38:
7f:53:97:e7:92:91:14:62:88:d4:56:61:1e:61:51:0a:e1:2c:
ce:3a:57:d9:73:b9:b0:77:3d:d2:8c:1c:b5:32:ff:59:eb:33:
13:95:e4:cd:36:56:3f:92:07:f9:0b:88:12:69:83:41:1e:56:
7f:1b:85:5b:85:26:75:0a:91:81:5c:64:02:2e:50:c2:e9:bd:
2d:4e:0b:02:5f:48:a3:8c:4e:26:43:ea:c4:57:da:57:84:94:
77:fb:49:91:56:62:c7:98:a1:27:2d:db:dd:71:04:a6:d6:00:
79:db:5d:3e:4d:c9:27:f0:f7:47:87:05:14:b9:2b:ae:31:4b:
8d:96:50:b0:9e:33:8d:e8:7f:69:2e:95:d2:98:ca:6c:10:29:
3d:21:be:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:25:25 2025 by rpki-client