Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: FFHXw2iuJw+mcJenv4/LpqsOp0UlovJgn7Tg7XxORFk=
Subject key identifier: 1E:58:EC:9B:EC:FC:34:45:66:59:EC:59:3F:45:62:BA:97:DB:FC:40
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 0197B7455481BCB57715277E321758DD4B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 137C
Signing time: Sat 28 Jun 2025 16:01:03 +0000
Manifest this update: Sat 28 Jun 2025 16:01:03 +0000
Manifest next update: Sun 29 Jun 2025 16:01:03 +0000
Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: TIvv8Q2oOePiFGEqNxBNOr1GLgQSwihIGhVLq5cpE3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:54:81:bc:b5:77:15:27:7e:32:17:58:dd:4b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Jun 28 16:01:03 2025 GMT
Not After : Jun 29 16:01:03 2025 GMT
Subject: CN=1e58ec9becfc34456659ec593f4562ba97dbfc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:90:d2:2b:ae:98:55:2a:84:90:ec:18:a8:
32:06:a9:cc:72:ec:40:e5:2a:39:57:5c:59:9d:06:
1a:b7:d8:61:a7:b1:c4:52:d6:44:1d:57:99:31:da:
4e:9e:20:7f:42:c3:a7:fb:33:92:ca:a1:ef:9a:4c:
9f:cc:4e:0c:80:d8:05:40:45:97:2c:ca:de:7b:e0:
13:bc:29:ae:6b:25:92:95:88:0a:6a:cc:85:d3:51:
42:d1:69:e7:90:17:f1:61:14:ed:f6:78:be:4a:4f:
d2:90:96:90:13:e0:e6:de:29:13:66:24:84:3b:b2:
5c:16:35:da:6f:31:be:ab:21:06:48:3c:37:c9:99:
8b:ad:1f:ab:ea:17:70:e8:66:9c:73:6d:d0:0e:38:
fe:2a:45:c6:54:db:f5:14:2c:0d:23:64:67:2a:8f:
b6:b3:6a:5c:f3:ea:88:2c:77:98:14:4f:b1:4b:ad:
d4:87:aa:69:31:8c:a0:ca:73:a2:8b:6a:68:bd:b9:
eb:09:6f:31:24:b5:b5:d5:8b:a4:c2:76:c0:90:f8:
74:0e:e8:90:95:c0:cd:ba:2d:16:9d:be:07:12:e4:
17:c5:7c:48:07:1f:94:44:3f:f3:dd:f6:98:b8:00:
7f:06:b3:9f:a6:ec:1e:65:89:0e:01:5d:15:76:75:
0b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:58:EC:9B:EC:FC:34:45:66:59:EC:59:3F:45:62:BA:97:DB:FC:40
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b5:93:e1:36:2d:c9:4f:25:6f:3c:45:a7:b9:7c:98:01:3c:
d6:7f:1f:5b:4a:7f:4b:1e:97:e0:2f:a2:b9:9d:3f:d5:6e:4a:
64:ac:06:f0:5d:11:45:d3:39:4c:b6:39:e7:f7:e7:4a:7f:16:
59:58:ac:57:63:50:ae:66:ba:45:aa:79:a3:39:f5:e4:e4:f1:
c7:32:05:53:e4:9f:f7:99:a0:97:d5:b0:51:f3:ea:ca:0c:c4:
6c:46:8b:54:91:9d:b6:88:65:b8:71:a7:30:b1:5b:37:25:9e:
e5:c7:24:4b:fb:50:ec:fd:c9:74:aa:66:18:52:0d:a5:39:7e:
2a:05:af:96:80:d9:48:fb:42:45:94:55:9b:fc:09:18:49:c2:
51:a7:35:1f:2a:ff:3b:22:0d:3b:62:68:35:5c:14:e9:29:f0:
12:aa:62:65:75:52:89:da:0b:2b:c3:23:74:39:3e:5b:08:c6:
96:f4:bd:b9:19:00:e2:05:07:d8:3c:10:10:e9:8f:63:18:58:
9e:d8:b1:3a:36:34:42:6e:00:f7:31:8b:ac:5b:d2:9a:06:48:
d8:9b:4e:32:1a:6a:48:7b:f3:0c:57:98:5a:68:90:ea:89:31:
9a:f5:bf:a0:3c:2c:03:48:1e:bf:4b:2d:a9:a2:98:9d:c8:0c:
5f:f7:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:18 2025 by rpki-client