Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: KIUJ1UAeX58CcSDpsxs9nPi7DzK6hbiVpQ/IZQgi+U4=
Subject key identifier: 5C:F1:6D:E7:60:A7:BA:B5:AA:14:D7:F9:5F:D8:D7:A9:32:FE:F1:9A
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 0197B6D76500A5D50DA3964C3B58C999AD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 0727
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: QZoLuFkftySTBFXm0IVGsdEjWSc.roa (hash: OleeaSAA+3wpsX1eMFtI7iInTKkVtH+3kKO3RFIPMMo=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: l+T6dGX4UfLsvCQg04yym1NpsLVpycX+HXtiznRt8ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:65:00:a5:d5:0d:a3:96:4c:3b:58:c9:99:ad:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=5cf16de760a7bab5aa14d7f95fd8d7a932fef19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:ff:72:64:46:78:d0:60:be:cc:6a:25:65:
03:8e:32:56:1b:1e:61:96:6a:34:75:09:66:b6:e6:
c2:37:7b:05:db:4b:dc:3b:a0:e1:c2:ed:1a:69:63:
3f:56:8b:41:30:73:d7:ce:32:af:39:72:7f:4b:3c:
60:22:82:6c:e6:63:e4:86:36:eb:14:ba:50:9f:74:
e4:ef:69:bd:71:2c:34:d9:55:b4:9a:15:9a:35:8b:
c5:12:78:40:bd:4d:9b:c0:a3:74:e5:15:9b:1c:26:
6f:a1:a0:29:7c:eb:fd:0e:2d:83:f1:42:d8:cd:75:
78:94:a6:3a:ba:e7:0f:d8:25:88:9e:f2:1b:14:43:
76:26:31:95:a3:5b:06:c1:d1:79:4a:99:a0:27:5f:
e5:f8:16:60:36:10:6b:6c:d9:fa:1c:b0:20:58:2c:
2e:ad:45:95:f9:4a:52:32:d6:e7:cc:a8:7b:a3:9e:
d5:fc:d8:5f:2e:1a:b0:45:95:e9:a4:db:a1:17:b0:
a0:74:fd:43:fc:14:79:b2:81:83:68:66:3b:fd:e6:
36:a0:10:b7:36:00:88:31:28:b9:50:4f:42:b8:4e:
1f:ee:02:6a:a9:8c:4a:71:e3:07:a2:14:98:6b:45:
01:61:3a:40:5f:00:74:63:28:61:42:94:a2:3f:ec:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F1:6D:E7:60:A7:BA:B5:AA:14:D7:F9:5F:D8:D7:A9:32:FE:F1:9A
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:07:d4:47:1f:0a:3c:98:2d:b5:11:9f:c7:89:40:4a:79:87:
95:26:0c:44:1f:16:bb:f5:05:4d:b2:bd:aa:ab:b0:c4:9e:60:
17:c7:67:18:c1:ba:91:c5:a8:61:96:32:7b:15:5d:f2:11:1b:
23:7c:f8:f7:34:b3:aa:4c:6d:83:46:f6:a2:ca:dd:bf:de:4a:
04:bb:83:69:2b:1f:02:41:e2:eb:fe:2f:f3:3c:ad:3b:10:5d:
f2:36:0a:5b:85:86:11:dc:cb:c4:ae:c4:91:71:af:09:4f:c4:
0a:03:29:b9:40:18:95:3f:84:49:2d:74:f7:38:9c:73:a6:cc:
47:09:10:f6:79:13:ee:62:1f:66:99:49:db:79:15:e9:d1:e4:
20:41:a9:f5:e5:da:29:5c:17:38:80:1c:93:d5:ed:ef:37:16:
3c:ee:ca:c0:87:db:bd:78:6c:3d:1e:6e:ba:c1:c8:f1:84:a9:
ce:5e:9d:a1:ae:d1:73:ec:89:92:75:d2:68:95:5f:fa:11:fd:
5f:11:43:00:77:19:53:b4:71:10:40:92:5d:53:d0:6b:1a:c5:
31:02:8f:67:1b:e6:ef:78:54:d5:c6:aa:11:8f:43:ca:93:9f:
5f:f1:5f:f1:94:da:8f:d0:47:e9:cc:9a:bd:fe:aa:92:23:fb:
48:16:db:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:47 2025 by rpki-client