Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json)
Hash identifier: VR2ze1hqeKgPg2XgY5YhWEXCCEYvuEb4o3BjRxES7uY=
Subject key identifier: E3:38:D4:F0:A7:49:BC:74:3A:6D:01:65:C9:AB:68:E2:89:20:38:47
Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Certificate serial: 0197B6A133666C8CCF00E1455B1223B3EBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
Manifest number: 04DF
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: nAMXECreyFJ8agVTA8BaRHnQdk512lAnGG3U02t1svI=)
2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:33:66:6c:8c:cf:00:e1:45:5b:12:23:b3:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=e338d4f0a749bc743a6d0165c9ab68e289203847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:f8:35:9c:44:b6:5e:71:b3:db:84:ed:e0:
f3:90:b5:32:f2:83:d9:02:dc:34:dc:29:c6:fb:9d:
0c:fb:c7:1e:16:28:d3:a8:81:22:aa:0d:37:d8:98:
4c:53:9d:5b:25:37:9c:52:f8:78:3b:e9:61:16:4b:
e8:a7:72:12:eb:e2:2d:ef:c7:ac:e2:63:f4:3a:4d:
91:05:69:09:0c:c0:f0:03:fc:39:0a:45:8c:7a:d7:
09:9b:1f:09:24:c4:92:f6:68:ec:d8:21:fb:0f:67:
48:dc:c8:28:02:f6:29:b1:ed:96:a7:36:3d:fd:9f:
55:18:64:be:8b:c9:21:14:7a:d7:b5:87:f5:3b:26:
dc:5f:fe:8e:41:e8:c3:8b:d9:5c:89:ed:dd:61:6a:
5d:fb:a8:a9:f7:2d:34:29:5e:dc:2c:22:ce:3a:4e:
61:e5:9f:82:fe:33:a0:a3:9d:af:61:75:fa:ba:1d:
0b:47:e0:3e:ae:df:2c:22:3f:10:03:b4:d1:8d:e3:
f5:60:f3:31:9b:32:29:46:10:ca:51:18:ce:ec:ef:
d6:62:18:92:93:cc:af:61:e3:7c:0f:23:69:fa:33:
aa:0e:3d:2a:9a:74:8f:cf:7c:6b:ed:2e:07:6a:c3:
3e:8c:82:c3:a1:de:ea:85:f0:1c:4e:f0:5d:c1:64:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:D4:F0:A7:49:BC:74:3A:6D:01:65:C9:AB:68:E2:89:20:38:47
X509v3 Authority Key Identifier:
keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:71:aa:c5:58:0b:2f:5f:e7:e1:fd:a8:c1:e6:69:4f:90:c9:
2c:5c:d6:b8:eb:38:30:76:ce:59:6c:36:6a:d8:49:9b:4a:50:
39:b5:de:25:30:a3:78:75:23:3e:39:f8:b6:05:31:68:70:15:
a3:84:67:7e:33:19:55:28:78:20:55:3d:9a:99:7b:ad:a7:69:
bb:b2:cb:d3:85:08:dc:e2:d7:2a:22:16:85:c4:f0:98:ec:68:
48:49:8f:b4:98:22:0e:28:fc:2d:f2:e0:1f:6e:42:3a:af:3c:
3f:0d:ba:a1:5b:8c:5a:0b:3c:cb:36:f7:e7:ec:87:2f:96:7e:
bc:15:8c:e4:16:0b:88:94:c8:7b:db:2d:ba:39:83:e3:b5:a7:
3d:34:02:58:d1:08:b3:ff:38:d4:c7:fa:a1:1d:15:e1:ff:84:
e7:51:a1:a3:51:7f:f5:35:19:c5:f5:30:24:bc:fd:38:84:41:
ec:fa:3c:67:89:0c:b2:7b:64:87:d3:9b:36:0c:64:da:26:bc:
67:75:8c:0b:6d:fe:64:00:9b:d7:d6:be:51:38:57:1b:36:7f:
80:ca:92:b0:01:a0:fb:4d:44:c9:84:fb:bd:7a:90:83:1a:f2:
e9:13:1d:27:6a:ef:60:dc:c2:43:d9:75:40:e0:f0:3b:34:13:
d3:01:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:41 2025 by rpki-client