Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: pYaGycvkGDrUGBwduNxi3rCH1IHNXIzBsSRil8E/V3k=
Subject key identifier: 63:9D:DF:9D:FB:28:68:9B:B7:AF:DD:33:DB:15:DB:FF:9F:B5:21:6E
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 01974A7B310965EBA1B7CD57E27A590EFEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 053D
Signing time: Sat 07 Jun 2025 13:01:16 +0000
Manifest this update: Sat 07 Jun 2025 13:01:16 +0000
Manifest next update: Sun 08 Jun 2025 13:01:16 +0000
Files and hashes: 1: 4vVSxg0KLKszb_U4S9rSdoaFOw8.roa (hash: RPAXRjtOt5jMNeEYJ4PrQAbbA73WZ8/bw4emEczQVts=)
2: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: WXCr9KHsP9ycwHHDHR6nY3Kxo+0h8bc1654B9isvtxU=)
3: t3uXJVNYIcETNH2wbIt0kGmTa3E.roa (hash: TpjYWQB/dEWPF8i95tLxQWL3noXfiwIkXuk9Gm2aR3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:31:09:65:eb:a1:b7:cd:57:e2:7a:59:0e:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Jun 7 13:01:16 2025 GMT
Not After : Jun 8 13:01:16 2025 GMT
Subject: CN=639ddf9dfb28689bb7afdd33db15dbff9fb5216e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:01:9b:66:74:a3:c4:b3:94:20:11:4f:c3:
36:bb:ac:b8:01:54:50:67:fb:b2:32:75:81:9b:da:
c6:8e:a3:75:68:c5:27:14:30:85:68:76:79:55:84:
45:72:63:e3:2c:e3:f9:c2:1b:20:5c:d8:71:bd:2b:
08:90:62:e6:de:fd:4d:d6:77:ef:a9:d9:05:90:b1:
ac:5d:41:a1:e5:8a:ae:fe:2b:f2:43:cc:2c:f4:44:
59:05:40:78:1e:6d:1d:fa:e0:78:da:9c:5d:0d:cb:
f4:f1:d8:53:c6:f5:cf:69:6f:8c:e4:a9:e5:33:1c:
3e:87:2e:c4:5b:11:67:49:d6:e1:59:70:75:92:82:
17:1a:70:0a:77:da:8e:0f:90:96:cb:22:19:77:f6:
97:62:d8:b3:da:10:81:92:ee:ae:0f:86:54:36:13:
2a:57:6c:7f:0d:1b:be:53:d6:4a:05:b1:cd:83:e3:
05:95:d1:7c:2d:ac:d0:ba:ee:bc:11:ca:4a:72:b8:
f4:73:ae:eb:a8:5d:0b:fb:c5:4e:26:9d:cd:e7:67:
b5:29:ae:23:c2:f5:3f:a6:df:62:71:7e:79:e3:91:
aa:62:7b:11:d8:ba:2a:dc:c3:73:ec:86:7d:95:10:
8d:a4:e9:16:bf:b3:aa:5c:3b:6e:df:42:1a:d3:71:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9D:DF:9D:FB:28:68:9B:B7:AF:DD:33:DB:15:DB:FF:9F:B5:21:6E
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:10:00:11:54:72:50:a3:62:9d:f6:88:e6:ee:c3:3c:a1:06:
54:5d:e7:09:a6:fe:6b:2c:ca:c5:1c:ec:77:df:4b:a3:39:59:
a0:7f:0c:98:e9:35:62:0f:e1:dc:fa:a4:af:c3:33:c3:75:1c:
f0:54:4c:80:85:4f:b5:ee:6a:80:61:5b:b1:58:21:f1:e1:d9:
6f:63:f9:86:7c:fb:46:a3:d1:97:3a:c6:94:7c:ad:bb:bb:b7:
51:4b:57:74:5f:24:84:20:3b:6d:98:20:66:e8:41:96:e1:af:
e5:12:af:11:e5:f8:cc:6d:80:cf:92:7c:94:e2:7b:0e:9a:07:
83:5c:21:9a:36:ea:66:85:b4:b3:87:14:3c:18:88:69:ec:80:
c1:40:20:30:89:f9:6a:50:7c:fe:0f:1a:22:25:b4:77:25:c5:
16:21:f6:1a:dd:43:b0:c7:fa:04:f4:4d:bf:31:0b:ea:03:27:
20:08:ec:ad:e7:c2:00:90:46:0b:ed:53:9a:b8:fe:ac:cf:2f:
99:ea:d3:f8:c5:75:b6:18:b6:3c:78:de:2e:01:25:44:2a:62:
2a:4a:1d:89:db:02:46:6e:69:dc:15:80:10:eb:54:86:bf:b2:
b3:b9:92:cd:a7:db:8f:a7:fd:2f:37:48:c0:f5:de:e7:b4:0c:
f4:61:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:13 2025 by rpki-client