Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier: wIR+fQbvk31tYKPa59NWx2XwZ5lyurToJaD5snsnm4w=
Subject key identifier: E3:E0:68:92:8D:94:4A:06:58:CD:69:C1:8E:1E:72:D8:BA:57:F1:45
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 0197B6A10C7F8110CAFAB01D4C95E0B5EF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: sTlPbXVLbECElRC4hgIXB14xzL+iU9JDoGeuN6qMo08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0c:7f:81:10:ca:fa:b0:1d:4c:95:e0:b5:ef:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=e3e068928d944a0658cd69c18e1e72d8ba57f145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:36:fc:6d:8f:43:ad:32:3f:3a:5f:6c:14:
cb:0a:82:c6:6c:9c:de:0b:b7:a7:17:38:0f:48:ba:
2c:fd:d1:da:0a:54:e9:34:09:25:ca:a0:c0:ac:fe:
ed:7f:55:85:d8:6f:36:a8:df:d8:6c:d5:4f:94:1a:
59:17:e8:9f:51:9f:36:e2:aa:ca:ca:59:e9:c4:81:
63:f3:21:3b:a9:15:29:db:d7:b2:db:9e:85:c5:2e:
98:07:76:c0:92:9d:29:03:20:f1:6d:3b:0f:0c:78:
05:98:82:ea:2d:ea:ed:07:1f:fd:a0:d5:95:d2:d4:
6c:59:33:fb:00:b7:0e:d5:5b:ca:d0:f4:d7:be:2a:
9f:4d:8e:ee:17:18:98:ba:0b:5e:c1:54:8b:54:15:
3c:0b:2e:62:c8:a7:6c:d4:e4:37:a8:34:bd:e2:04:
5c:8d:8c:2b:61:f7:65:c0:3c:e6:85:a3:9a:e5:b1:
bd:66:10:fd:2c:39:85:a0:29:5b:75:2f:76:7e:a4:
4f:d0:c0:b6:44:c3:0d:9c:e1:51:24:91:43:fb:d6:
33:93:03:18:91:56:1f:28:7e:95:d3:5d:4e:26:d5:
7f:85:0f:42:63:ab:b2:c2:3c:ca:77:92:fb:36:70:
8d:4e:9f:08:06:47:0d:22:03:82:8f:d9:47:ce:3b:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E0:68:92:8D:94:4A:06:58:CD:69:C1:8E:1E:72:D8:BA:57:F1:45
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cb:61:27:c2:86:aa:3c:4f:99:99:e5:e9:fa:cb:95:11:96:
a8:42:e3:cc:ef:be:a4:6c:f5:28:d2:bd:6c:cf:0d:0e:c9:cf:
08:16:1a:e8:21:03:29:e4:d5:f4:04:24:0a:b9:17:66:df:cd:
2d:4d:90:cf:e3:07:13:e7:bc:a4:6e:1a:5c:34:7f:45:0e:0b:
5e:25:e7:7d:bf:64:ee:5c:7e:27:8d:0f:0d:51:7c:32:b5:f4:
99:ee:02:36:6a:c4:f7:67:52:4f:3e:64:a5:41:a2:98:be:dd:
60:7b:3c:6a:eb:22:be:dd:97:7e:fb:8a:17:01:a9:5b:0c:d3:
18:03:4e:3e:6f:33:7e:fe:53:36:e9:42:5a:53:a3:02:7d:c2:
89:b0:a0:fb:93:79:3f:f0:5d:f5:c8:fd:1a:e2:cf:5e:d0:65:
ff:6e:91:44:dd:47:f2:7c:10:d0:da:08:4f:8f:c0:f6:d4:5c:
26:05:15:65:3f:59:01:5c:64:b0:f4:ff:96:00:92:ab:bc:9a:
42:4f:e0:3c:c4:4d:c4:f6:b9:88:a9:1f:bc:06:0d:15:84:97:
b6:96:1d:04:72:e9:99:9b:a5:98:c5:7e:3e:bd:2b:73:5b:6d:
67:85:b9:28:cf:67:6e:9c:57:c5:ac:5f:74:3e:bb:95:d6:2e:
6b:b0:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:55 2025 by rpki-client