Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: tdo5RuZvJfvgUMf3M3OnqFmtpyHyOLu7U/ZydDTsPBs=
Subject key identifier: 76:CD:C0:8A:08:AF:D8:8A:CE:A7:49:19:15:1B:56:3C:21:58:3E:E5
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 0197B6A16DF4509CDE2155B99878720863F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 15CA
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: erUR0TxThsHPYTnJjasoirINYyi0qDJpGFfk3ib+Hiw=)
4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6d:f4:50:9c:de:21:55:b9:98:78:72:08:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=76cdc08a08afd88acea74919151b563c21583ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:e7:13:6f:80:56:98:0b:b8:d4:c8:10:ee:
17:bc:4e:5d:13:07:e2:42:49:2c:da:dd:4f:4a:e0:
30:1f:c7:df:cc:6f:90:53:3f:b9:bc:1b:56:12:fb:
3f:7e:f3:d6:48:26:6e:16:5c:3d:00:46:2f:1c:64:
cb:37:e4:d1:67:e5:03:e9:77:02:5e:7c:be:0e:2d:
79:dd:87:f4:57:93:9f:2d:f6:26:c9:86:cd:56:7b:
d9:e8:74:03:6e:b9:ae:04:dc:50:46:a9:2f:dd:59:
80:6d:f9:16:9d:b2:5c:7c:ac:c9:b5:78:cf:02:a8:
17:a0:7b:cf:ee:f9:c5:ee:9b:71:04:8f:a5:cc:52:
fc:39:93:31:c9:ec:7b:e5:42:57:3e:ce:ca:3c:c5:
28:49:8b:7c:c5:85:fb:6c:ee:f2:e6:43:0d:1c:b7:
4d:c6:00:45:98:f1:5c:a2:a7:42:3c:15:8e:6a:f5:
7d:d4:db:aa:a5:8a:1e:d3:39:36:80:ea:6b:ad:69:
bd:f1:2d:db:c0:1f:0b:ac:0b:dd:30:4c:58:c7:cb:
82:1d:43:99:13:ae:48:4b:1e:4a:e4:66:22:bd:e1:
84:7c:f5:6f:f8:c4:57:97:6a:e4:7d:c1:54:c8:4f:
12:23:fa:6b:e9:ef:f2:0e:cc:39:09:2f:2f:c7:57:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CD:C0:8A:08:AF:D8:8A:CE:A7:49:19:15:1B:56:3C:21:58:3E:E5
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:60:f2:78:ce:43:10:5f:bd:1b:be:79:85:c5:a3:d9:cc:a6:
b9:58:4f:a4:b7:5f:6b:f9:c5:97:d3:bf:93:82:7a:09:56:c7:
8b:e8:1e:3f:02:2b:8d:43:41:1f:d4:b7:55:8d:24:29:00:68:
ed:0d:ab:97:57:56:d5:13:13:f3:df:7e:0f:26:d1:3d:0e:91:
23:81:31:e6:8c:5e:af:e4:66:ba:9e:99:91:a4:6d:1f:b2:98:
24:0c:10:fd:ac:75:65:64:16:0b:72:b0:a9:58:d1:5b:e8:ca:
36:02:98:d6:f3:34:17:6d:02:9d:74:4d:c4:89:96:35:1c:aa:
3f:67:db:9f:2a:0f:55:24:04:43:ba:2e:5d:51:82:4a:e0:d8:
71:0f:3a:3c:a5:cf:37:d6:b3:fe:d4:64:db:35:ee:8d:36:4f:
11:a2:1c:fb:58:24:d6:4b:bd:9e:a9:8e:81:d4:b3:b4:f8:e0:
5b:1a:6b:18:fa:24:a3:9c:f6:83:ec:d1:f8:26:ec:dd:98:17:
99:a8:48:3c:5e:de:8b:cd:8f:ff:6d:47:db:d9:77:1a:e1:7c:
0c:60:d6:b4:6a:60:bb:d3:ad:32:22:a8:09:29:28:d8:a9:31:
21:e9:c3:85:45:5a:03:c6:f9:1f:7a:48:c7:8c:37:8a:45:17:
5c:52:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:57 2025 by rpki-client