Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: DaX9liADpZe2yROsATv2Cjvt2DF/1nhWZdJ8y6vqxKY=
Subject key identifier: 02:DA:E5:91:CA:34:7C:D2:A8:21:E7:2F:E8:1E:2E:B9:5B:C0:06:87
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 0197B7EADD81A6FE74DB317E4AEB89D0EBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0C5A
Signing time: Sat 28 Jun 2025 19:01:51 +0000
Manifest this update: Sat 28 Jun 2025 19:01:51 +0000
Manifest next update: Sun 29 Jun 2025 19:01:51 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: tw1iVRurilgend0MO7+/NI73zdXGdV/pjPmuTBLTGoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:dd:81:a6:fe:74:db:31:7e:4a:eb:89:d0:eb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Jun 28 19:01:51 2025 GMT
Not After : Jun 29 19:01:51 2025 GMT
Subject: CN=02dae591ca347cd2a821e72fe81e2eb95bc00687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:9c:da:1d:44:f9:41:c5:c3:f4:cf:92:1e:
1c:ae:8d:f4:7e:86:56:39:dc:e8:dc:86:44:75:e0:
a8:d2:0f:55:3d:49:8c:cc:d6:f8:a0:a9:f2:50:68:
60:29:b4:17:b4:a5:5a:dc:0b:dd:40:60:a0:55:b9:
ea:b6:c5:ed:f9:ef:c6:59:ff:94:94:74:12:26:00:
25:52:ba:f1:e4:25:5b:34:b9:1a:9f:ab:9f:1b:2e:
20:a8:8b:29:53:94:11:7f:0c:30:e9:eb:51:33:a6:
a9:e1:44:78:08:a3:bf:b1:61:e3:11:3c:8e:58:a2:
45:a1:5d:96:15:68:65:29:cf:b9:22:fe:13:10:1a:
12:a6:6e:5b:1f:63:9c:a9:c1:45:6f:ba:e8:75:6e:
a1:04:40:30:9a:f7:d1:eb:f2:d2:0d:ec:1f:bd:76:
9c:06:65:9c:3e:a3:fa:1f:e5:30:3e:ec:02:c4:54:
04:23:75:88:fe:bd:1b:6d:12:42:7c:b8:36:29:cf:
94:3f:31:0d:f2:a6:96:87:c2:bd:23:b4:f9:89:60:
92:19:c5:bd:44:d1:93:7b:de:df:ce:21:54:c8:d1:
04:b2:23:3a:b5:b5:45:5b:3d:a9:21:e6:4c:10:08:
c1:00:80:4e:1d:2d:4d:15:0d:97:5f:9d:c4:36:7c:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:E5:91:CA:34:7C:D2:A8:21:E7:2F:E8:1E:2E:B9:5B:C0:06:87
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:40:5d:ad:2f:14:a8:58:b3:98:80:48:1a:73:1c:7e:73:d0:
8e:be:ac:db:0d:3c:e8:ef:1e:56:49:73:a3:c1:64:09:6c:62:
b5:c2:ea:8d:99:01:48:41:6f:32:58:d9:06:3d:30:2f:6f:17:
d0:98:72:62:4e:03:93:57:d0:06:36:93:99:22:53:1d:94:94:
f3:a8:89:0a:08:75:57:e2:82:aa:a4:1b:ed:92:70:43:ff:af:
db:db:19:82:d3:8b:8f:d5:c0:b5:b1:eb:18:af:72:91:89:72:
bb:12:a2:e3:5d:29:b5:dd:6c:9f:00:36:71:b3:1f:94:ff:62:
1a:99:4c:bc:9c:21:7f:c7:00:59:f6:84:a1:f8:de:72:04:0c:
58:44:71:82:47:48:1a:d7:94:88:dd:b1:1e:b3:22:8c:99:13:
53:df:24:8b:fd:8e:8b:97:9f:7f:24:7b:87:e4:8c:34:8f:3b:
1a:63:26:e7:b6:39:bd:3f:d7:0a:3e:4c:5f:bd:5a:a1:d4:40:
89:1f:41:1b:47:bf:d7:2b:de:c4:dc:e9:e8:86:ab:53:fd:9b:
8c:97:e5:df:bb:5d:21:3c:dc:a7:3e:46:60:7f:c6:09:ed:44:
b4:7b:7d:9b:71:fc:f3:83:d8:4e:6f:27:b7:59:4d:d8:c1:72:
33:4c:40:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:49 2025 by rpki-client