Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: zK5tEGTKSe8teczU2JvkQeq8iZulSi9ligElQ0vKRqs=
Subject key identifier: EF:5F:FB:78:C8:D0:90:95:17:9C:16:0D:05:0A:B3:46:85:66:E2:AD
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 0197B6A17F8AEED3A860044B148E1DF1E14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 11BC
Signing time: Sat 28 Jun 2025 13:02:06 +0000
Manifest this update: Sat 28 Jun 2025 13:02:06 +0000
Manifest next update: Sun 29 Jun 2025 13:02:06 +0000
Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=)
2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: /3UCjEfy77TG2523k4D96NY3k7I0WzTUfYEbrbt9s/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7f:8a:ee:d3:a8:60:04:4b:14:8e:1d:f1:e1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Jun 28 13:02:06 2025 GMT
Not After : Jun 29 13:02:06 2025 GMT
Subject: CN=ef5ffb78c8d09095179c160d050ab3468566e2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:06:58:1a:7e:e8:97:96:ed:d9:bb:9a:0d:
59:0c:87:a4:52:d6:fd:af:a8:12:49:ea:6f:94:f5:
64:df:6a:b4:7b:4e:b7:1f:a8:ca:9c:cf:bf:f2:cf:
1d:a3:43:b5:c6:df:bb:1a:7c:fb:31:8f:4e:3b:84:
ec:66:9f:9c:3d:13:d6:da:47:17:19:2b:14:30:99:
16:1d:46:fd:69:86:63:77:fe:7a:84:30:4b:27:e2:
42:3c:4a:4e:22:d8:39:f5:dc:e9:cd:9d:97:31:a7:
50:a0:61:dd:f5:d5:4c:b4:6f:cf:91:20:ba:33:e2:
37:43:0b:55:26:5f:d5:88:57:3f:d2:c6:a9:85:d7:
73:10:6d:0a:84:e9:e2:18:cc:4e:06:91:f0:ff:e5:
b6:4d:00:42:3e:8e:a2:28:4a:ad:a0:59:70:8c:c9:
a0:bd:f2:17:db:94:ff:30:d8:5e:d2:9e:d2:ae:0d:
97:60:09:c6:71:b8:ba:0d:d5:80:e5:b2:bb:7b:68:
10:62:ad:87:f2:57:25:2e:2d:c9:6c:83:e6:21:d9:
ed:d9:92:52:cf:57:50:f0:e1:17:80:ab:aa:13:3e:
13:24:c9:47:af:8f:7d:8c:89:d8:13:9f:f2:9d:0e:
1c:83:5a:0d:db:e7:2c:59:3c:d9:90:46:b6:b5:5d:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:FB:78:C8:D0:90:95:17:9C:16:0D:05:0A:B3:46:85:66:E2:AD
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:01:12:d2:3c:74:0d:21:c2:f4:f2:41:a8:08:7e:c6:f2:a8:
28:dc:6d:4d:15:04:2d:74:7d:76:95:96:84:0e:ab:f0:77:05:
67:13:92:da:58:f4:d8:f0:16:6e:aa:7d:45:b8:d0:26:45:88:
59:d6:1c:d7:78:30:b8:09:9c:4a:cb:13:b8:b1:c5:39:48:bc:
4b:23:b6:29:57:41:99:cd:f7:4b:ac:6d:cd:95:38:d7:dd:1d:
2c:3e:6e:c0:72:a2:18:98:21:51:13:49:aa:2f:76:f3:c6:0a:
b2:79:c0:b6:23:ae:3c:e8:bb:63:b8:60:e8:cd:b8:a4:61:ae:
4a:48:05:d7:d2:ea:a7:18:da:24:ee:bf:e1:67:e6:16:55:ad:
b4:76:3c:ee:ae:93:89:26:46:7c:20:e3:3e:af:cd:0c:05:44:
d2:d4:42:f9:eb:ed:8b:b2:37:45:00:e7:09:81:8d:5f:c4:0d:
6a:94:35:cd:6d:4f:56:83:c9:3f:fe:d3:d9:0a:27:6b:fb:17:
a6:da:7a:4a:d1:2c:ff:37:68:9e:9d:01:6f:17:f9:5f:ff:8d:
8c:45:ea:5f:20:5a:e0:e6:65:c0:4f:22:17:7c:b6:d4:1d:4b:
eb:23:9a:28:3b:4d:60:a8:6d:e9:f4:62:e7:b0:0e:5b:c7:78:
5c:71:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:56 2025 by rpki-client