Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File: cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier: UTRm3fnpDYcTZcrbCiepzT+zDdu4dvNN1tr/zqbSOG4=
Subject key identifier: 68:8C:A2:56:D3:4C:A8:D3:6B:D1:73:46:ED:75:7F:ED:2A:DC:97:F7
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer: /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial: 0197B7EA264170C2C67C98B0DBE928A20745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number: 15CD
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: ELVDoYmFaTCtnTMhAqZufMc8mXg.roa (hash: GX/uRjpcUEeVnkiAfonTZ3Q7zJlqdixXVsuNiqh4BrE=)
2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: gxYupD6bGs6GWe2qaKG1dJY/0WtOFndAh+BEf/pvYSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:26:41:70:c2:c6:7c:98:b0:db:e9:28:a2:07:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=688ca256d34ca8d36bd17346ed757fed2adc97f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:a7:bd:bf:9b:19:81:64:f1:32:9f:f4:74:
88:55:23:f8:d9:2c:17:01:28:c0:98:7c:e8:6d:a4:
06:6e:63:98:d7:56:c1:36:19:38:b8:4d:83:32:f7:
bb:23:04:31:02:84:96:66:5d:14:d9:70:d9:a8:41:
4a:3d:90:ac:b8:7d:cf:28:4b:19:54:29:9f:88:8c:
9d:cc:86:b2:4b:58:de:3d:20:40:07:03:70:83:0e:
91:29:2a:60:33:d6:e0:38:60:9a:1b:71:f7:7f:13:
e7:31:5b:e9:44:a8:3c:6b:5f:09:29:11:df:3b:34:
9d:2f:b8:68:74:f4:c2:ef:85:01:11:c3:cb:c9:d7:
ed:73:41:41:f6:a9:39:6e:50:a4:ff:9a:5c:af:24:
7b:a7:7c:89:ad:14:be:0d:22:11:06:a0:ae:34:c6:
5c:ba:90:1a:de:bc:07:17:ff:5a:4c:85:d3:02:58:
95:89:f8:30:76:f9:b3:8b:ee:58:b8:ad:1b:d8:4d:
ae:95:e5:61:dd:cb:e4:ad:3a:5f:c7:88:3b:44:22:
2e:c1:ba:71:84:6b:12:bb:33:2f:71:3f:77:1c:c4:
7c:9d:32:82:4c:63:4c:29:e9:84:e2:33:39:9d:57:
a5:d6:bc:23:dc:ef:38:ce:c3:6b:2a:09:90:34:9d:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:A2:56:D3:4C:A8:D3:6B:D1:73:46:ED:75:7F:ED:2A:DC:97:F7
X509v3 Authority Key Identifier:
keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:51:8f:8b:27:4b:ac:fb:25:77:47:c0:e9:b5:80:2d:23:
80:a9:e3:26:8d:3f:f4:85:f8:f5:0b:27:cb:8c:d8:1c:02:84:
8b:2d:97:52:ab:b7:b5:56:07:e2:92:99:15:c8:6d:db:b6:d6:
49:9d:a1:48:74:29:49:51:0b:49:43:6b:75:9b:ce:8c:f1:d6:
36:0c:0b:d9:2c:14:ec:bd:68:d5:fd:94:44:3e:4c:7d:57:24:
1a:9b:53:94:11:6e:c3:0b:5b:55:34:28:43:f8:dc:f5:fd:dc:
34:82:d6:20:e4:a2:c1:32:99:16:c6:7b:6f:1b:a9:db:37:0f:
23:f5:a2:4d:96:a5:35:29:3e:d6:7f:08:5d:39:81:f5:32:87:
1e:02:29:85:a0:1a:66:39:53:e9:22:92:29:30:8e:57:f4:00:
38:f0:9b:44:92:08:a4:a3:2d:91:1a:69:98:78:69:45:15:b9:
54:10:44:02:4f:e9:d4:e3:d2:95:78:42:4e:67:8a:d7:4f:59:
9a:88:15:4c:3f:f0:07:97:a0:ac:31:56:5c:29:29:54:31:0c:
43:54:68:a2:4c:7f:00:2b:a2:d5:31:b0:ce:51:4b:f9:88:85:
fe:f5:0d:20:49:3f:0f:ad:ed:f9:b3:5f:12:ba:37:ed:2a:8f:
35:87:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:25:48 2025 by rpki-client