Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File: c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier: zPBpWANuEmcag6CKjgx4VV0RQ0RpxldrxDPMAdimFrc=
Subject key identifier: 66:EA:09:AC:6C:1E:1B:67:0D:76:A9:CC:E7:73:6A:10:0C:E3:1A:8B
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial: 019757C84A686C150D917D245CA8FB5A5E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 03:00:33 +0000
Manifest this update: Tue 10 Jun 2025 03:00:33 +0000
Manifest next update: Wed 11 Jun 2025 03:00:33 +0000
Files and hashes: 1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: 4ktlFL/OQvCz9vO0HzW1clS+sX8155FMCG/ks8dx2Cw=)
2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:4a:68:6c:15:0d:91:7d:24:5c:a8:fb:5a:5e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Validity
Not Before: Jun 10 03:00:33 2025 GMT
Not After : Jun 11 03:00:33 2025 GMT
Subject: CN=66ea09ac6c1e1b670d76a9cce7736a100ce31a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:2a:61:2b:da:ad:95:c0:20:30:c9:ae:5d:
fb:a4:9c:7a:87:25:82:ac:2e:74:8a:e5:c8:f2:39:
3e:a6:9c:e8:ee:02:88:d9:f5:0c:6c:ea:90:2f:c0:
36:cf:c7:87:0a:2b:3b:f6:74:d6:5b:c7:0d:33:88:
1a:3d:1d:0a:39:cc:aa:1f:00:6b:3f:77:2c:e1:30:
da:77:8b:2a:3a:85:30:bf:09:a7:81:66:1e:c3:5e:
c3:60:5d:19:0a:21:3e:21:9d:d1:23:af:c1:74:f9:
b1:72:3c:58:d8:ec:a6:7a:e0:47:2e:06:7f:8a:0f:
19:64:a1:88:5e:08:d0:f9:78:b3:08:42:45:a7:36:
fa:f4:4a:65:ed:b4:a4:49:2f:48:54:aa:66:55:3d:
75:f7:be:29:3b:01:ba:9c:62:89:42:f8:5c:8c:90:
c7:4f:d0:a7:47:37:c2:ab:f9:ae:9a:d0:dd:a7:4a:
ce:6c:29:3f:b1:64:1c:e6:cd:fb:ec:ee:0c:de:2e:
d5:11:77:ce:67:5c:ae:47:bf:8e:8c:ac:3e:dd:a6:
b5:f8:98:a1:01:6c:6c:b5:e4:5d:c0:fb:e9:0f:c5:
10:ba:6a:09:56:a6:b9:a3:0e:97:0f:bc:a2:61:81:
45:92:d0:50:25:a1:e6:17:ea:a5:67:10:68:a7:e4:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EA:09:AC:6C:1E:1B:67:0D:76:A9:CC:E7:73:6A:10:0C:E3:1A:8B
X509v3 Authority Key Identifier:
keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:48:78:4a:da:dd:45:a9:35:c3:92:ae:ff:7c:2c:bc:10:bf:
60:b8:ad:9f:b8:f8:d4:d7:09:f7:6a:7e:4e:37:71:7d:54:94:
d9:7d:12:50:de:39:cb:2e:3f:f3:97:c1:0a:82:d0:d1:03:d1:
15:3d:11:1a:7a:f0:dd:9b:07:56:84:05:4e:97:30:e7:cb:83:
4a:58:ce:37:b3:c0:7f:d7:e6:79:a9:49:51:a3:bf:97:66:76:
c6:82:10:c9:b7:3c:e4:bb:3c:23:f3:30:7b:19:60:8c:63:96:
86:92:87:f6:b8:e4:5d:13:f4:10:4b:0d:17:5e:ce:af:90:84:
ba:b0:7c:b4:b6:04:58:d5:9f:0e:ca:35:6c:a3:af:82:06:57:
e2:70:db:8c:55:88:63:01:2d:91:ea:26:a4:ea:44:cd:72:37:
e9:60:ff:e6:61:53:18:e3:d2:9c:23:99:df:14:89:d5:f6:d2:
8e:48:53:b5:52:91:7a:be:d7:f2:c3:97:74:31:25:fd:9b:62:
e5:19:85:45:87:d8:a0:74:82:d5:8b:8e:67:33:01:0b:a6:a9:
1a:06:60:b7:07:3c:68:21:22:1e:3b:f1:4c:26:2c:9a:82:b5:
cf:b9:4c:07:a0:34:e0:81:ed:61:36:05:06:ff:0a:dc:c2:73:
0b:80:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:53:15 2025 by rpki-client