Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: iAWlX8P/cwqgqae6MGQWVnyIK1fJUevIqJnPvBulKv4=
Subject key identifier: 66:CD:13:34:28:A5:4D:52:5E:8B:1F:DF:6A:D0:A4:CF:ED:B8:61:A3
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 0197B77C8C30D2820A54BCD2A0F0BB750517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 1291
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: LwcpcwOoqqjU1A3ukgQzB2g4vujIarRIK/DUqqFb/f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8c:30:d2:82:0a:54:bc:d2:a0:f0:bb:75:05:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=66cd133428a54d525e8b1fdf6ad0a4cfedb861a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:45:fd:c4:dc:b8:f7:c2:86:26:92:5b:f2:
5e:da:f5:53:db:44:32:a6:6d:38:5a:c5:56:10:56:
d0:e1:97:e5:19:66:56:29:21:fd:71:e9:04:31:64:
4a:76:1f:51:ca:d4:ea:a2:d4:89:97:ed:7f:79:22:
02:72:83:6e:bc:31:0f:20:6f:e6:23:6a:a0:f3:01:
6e:5e:0c:e2:e6:9f:5f:ed:b2:67:ab:22:ad:68:cf:
6c:09:78:7e:91:75:52:05:e3:eb:e9:c2:d9:c2:c8:
ba:75:b6:9a:00:65:d7:5d:04:3a:fe:71:3c:33:47:
b3:fd:6a:62:27:9b:df:f0:3b:ec:e3:bd:9f:31:18:
b5:a2:a8:90:00:a6:d1:b2:f2:fb:94:5e:e7:99:1f:
5b:be:a1:2e:1b:ee:3d:1f:69:71:3c:f2:4d:82:f4:
08:8c:99:25:67:fe:67:12:eb:de:cc:37:6b:f5:53:
a3:8e:d2:25:fd:58:43:3b:59:7b:a4:54:04:c8:13:
27:eb:2a:bc:2a:1f:87:3a:f3:32:c1:8f:88:4f:a4:
8e:b0:80:8c:28:63:9c:3f:9f:8b:50:d3:14:b6:7c:
70:fd:02:16:93:d8:6a:96:2b:b9:21:94:41:8c:51:
a5:e6:cc:ce:cf:be:9b:55:52:69:85:fd:dd:db:c7:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:13:34:28:A5:4D:52:5E:8B:1F:DF:6A:D0:A4:CF:ED:B8:61:A3
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:25:9b:20:e7:ef:70:0f:a0:45:8f:22:6f:f2:7c:a9:64:00:
c1:1b:ff:93:b3:a7:de:c8:76:9e:84:eb:b4:37:37:b1:cf:83:
de:8d:2b:80:e2:cb:62:16:70:55:96:6e:c6:07:92:36:a9:f8:
c8:3b:0b:6c:05:f8:55:81:ec:43:e7:30:d4:55:01:a1:ee:fe:
fa:bd:20:20:30:90:43:0c:e7:36:19:56:f7:e8:43:a8:f3:68:
20:7f:fb:0d:ea:f1:f6:88:8a:08:21:f6:8a:c4:5b:04:9e:8e:
1e:03:52:78:63:87:42:91:09:4f:1f:05:1d:bf:44:a9:87:0d:
0d:38:29:dc:a8:ab:fe:24:c7:c1:50:70:9d:2b:cc:fe:c9:57:
95:d6:d7:21:f9:00:bb:98:a9:95:b3:9c:61:8d:58:2e:af:27:
be:20:7b:98:8e:af:91:df:d3:14:11:7f:ef:aa:51:fa:ab:4f:
e5:6b:62:d3:8f:3c:8e:59:ce:aa:ee:63:e2:e0:30:6e:63:f2:
06:e6:35:7c:bb:2d:7c:85:1b:ef:ee:f1:fc:2d:e9:71:0f:91:
c4:42:f9:61:d6:4a:d9:df:43:07:e2:b2:d6:eb:dd:d6:1b:7c:
5e:82:86:ad:7b:41:a2:44:30:ea:89:1d:d0:c3:d6:48:5b:45:
a6:df:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:29 2025 by rpki-client