Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: Bkve8vKEDPPD9VQzxh9cXWE0WS1SsnWznZkgB3s43hY=
Subject key identifier: 6B:5F:75:89:AA:C5:B1:64:3D:40:D1:5A:44:0E:FA:0A:E3:67:65:FD
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 0197B88FCA636E65464C786AE67A22475F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 10FA
Signing time: Sat 28 Jun 2025 22:02:00 +0000
Manifest this update: Sat 28 Jun 2025 22:02:00 +0000
Manifest next update: Sun 29 Jun 2025 22:02:00 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: Spk68kswXte1pSc8o6OIxKOvpEugWEGtISBUroCm9jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ca:63:6e:65:46:4c:78:6a:e6:7a:22:47:5f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Jun 28 22:02:00 2025 GMT
Not After : Jun 29 22:02:00 2025 GMT
Subject: CN=6b5f7589aac5b1643d40d15a440efa0ae36765fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:22:c9:ba:8c:c0:2f:e3:b4:9a:93:44:47:
ee:9d:24:62:1c:3c:01:a6:f3:e8:22:e9:43:ee:23:
eb:d5:6c:49:21:62:a7:91:57:9b:c5:d3:7a:f6:9f:
c0:0a:8d:9f:94:b6:84:df:c6:0d:1e:fb:5e:13:98:
6a:de:3e:6b:08:e0:a4:4e:60:0e:91:77:ec:5c:08:
6e:46:90:85:cd:f8:7d:26:a2:ba:d2:98:59:aa:bf:
f2:80:94:4b:d9:0b:b2:ed:b5:2a:3d:2b:85:f7:d5:
24:10:14:99:01:46:36:21:1b:d3:c6:d9:25:32:17:
17:0b:cc:06:77:96:d1:d5:fe:62:9d:32:a2:72:bd:
fa:e8:1e:28:dd:0d:17:16:a3:24:f1:3c:cf:b2:7b:
94:a6:19:c8:64:14:4d:2a:01:f8:5e:d7:89:4b:97:
4b:95:89:d5:93:7f:6d:bb:20:6c:8f:ac:f1:5e:7f:
1e:67:06:23:c7:cd:ec:18:d4:f4:08:9d:35:3a:09:
55:c0:60:ff:d9:8c:8f:1b:cb:cc:fe:38:28:0f:35:
bb:1a:60:f9:84:72:ba:0a:c9:a5:d5:c8:d2:6f:23:
00:6f:28:f6:ac:d1:44:1f:42:7e:1d:5c:ad:cb:40:
98:a2:24:b9:09:b8:5f:5b:eb:11:89:e0:4f:b9:3b:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:75:89:AA:C5:B1:64:3D:40:D1:5A:44:0E:FA:0A:E3:67:65:FD
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:29:0a:be:7f:fc:bd:04:80:7a:1b:03:19:18:86:de:14:5e:
cc:1e:59:d2:76:30:65:cb:80:a1:46:49:7b:32:7b:af:c4:91:
c6:5a:5a:f7:07:ec:94:1c:ce:b2:1c:aa:89:5c:26:c1:9d:7f:
81:5e:51:44:29:d8:69:12:5c:15:9a:28:67:38:d5:a3:0c:29:
ab:67:b6:c1:3c:c0:ac:6d:88:3e:5b:d6:e9:48:b6:d8:55:73:
f0:5b:7b:5c:34:c3:92:81:fc:33:4a:f8:a7:98:37:22:ad:dd:
6a:12:cb:16:79:f0:59:e6:7d:86:2f:52:f5:ab:0e:6e:39:8d:
f2:17:82:f2:5d:40:7e:7d:43:44:db:4e:ff:22:03:08:13:8e:
d8:e4:0c:18:8d:47:11:ba:a5:27:5b:31:24:22:5c:e5:d6:2e:
52:c7:49:ab:49:8b:a8:52:4d:18:cc:0e:f2:9c:f4:0f:3f:d5:
f2:a2:59:64:77:1b:b4:ed:94:0e:46:4d:39:b1:23:50:72:7b:
ed:1d:57:20:1b:98:f9:2e:a1:72:fb:e2:e4:41:f3:1c:e7:6b:
92:c2:eb:b9:5c:59:98:00:06:1b:8c:69:47:bc:14:71:72:4a:
d7:54:9e:89:53:f9:6d:1f:bd:a1:5b:86:55:7d:ed:0e:95:0c:
81:73:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:24 2025 by rpki-client