Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: GPQNLZYnkaD1XAsEzLTktqNCJ6yDPd83QP03QY8aPNk=
Subject key identifier: D3:D6:6A:D2:26:C1:6B:3A:7D:BD:E8:23:76:3F:C6:08:A7:68:CF:BA
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 0197B77CAB91D8549610D26F3D2AA2657E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 0DF7
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=)
2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: PLIskAqwNabq9/g7JOAM8bvEOhJHyWbg+sKiVCnF8WU=)
3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ab:91:d8:54:96:10:d2:6f:3d:2a:a2:65:7e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=d3d66ad226c16b3a7dbde823763fc608a768cfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:ca:b1:cd:2f:2e:cb:a3:69:4d:09:19:e6:
a9:cc:1c:6e:d0:b5:72:1f:c9:62:b1:62:d3:56:12:
9f:fc:cc:8e:ae:f3:29:5a:8c:3f:a3:bb:4e:17:2f:
ef:08:b8:07:a3:20:3a:eb:95:54:92:d6:59:6a:95:
19:69:e7:f7:08:41:cd:47:3f:49:4d:46:32:52:02:
7a:e8:26:98:d1:95:81:b4:03:b3:1b:01:fa:b6:9f:
dc:c7:29:a2:a8:60:04:87:b3:57:c5:4e:a4:37:51:
18:d8:92:f2:61:c3:63:4f:17:92:a3:82:11:61:89:
6e:6f:92:e8:43:80:38:eb:ea:78:0f:7c:47:0b:8c:
76:e1:48:dc:86:20:91:79:50:22:b0:dc:e0:36:f8:
29:e4:11:8d:04:6c:62:f9:2e:4b:47:17:cf:47:02:
2c:3c:7c:24:01:d4:3d:02:95:e2:21:9f:fc:82:95:
fb:e4:c1:b9:d3:c0:b8:1d:d8:b5:6f:f4:38:30:1a:
40:09:fb:35:fc:2c:af:31:a6:85:4e:1d:41:c8:52:
59:65:97:a8:d1:86:00:1e:0e:75:a5:af:be:92:19:
a1:4f:78:9e:2d:6a:0c:7d:44:80:7a:bc:a4:7e:93:
0f:17:48:18:23:91:8b:ad:b0:d6:89:0f:c6:ad:33:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D6:6A:D2:26:C1:6B:3A:7D:BD:E8:23:76:3F:C6:08:A7:68:CF:BA
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ec:17:6c:05:e6:b8:ea:c6:e5:45:58:6b:fc:75:20:e8:86:
b8:f3:3a:cc:e2:7d:3c:93:b6:2c:5a:4f:5f:24:ec:0a:c6:d6:
21:ff:88:03:bd:dc:bf:0b:bd:d0:76:a7:2a:1c:5a:9e:d6:ad:
6d:ad:28:e2:7b:a9:c7:62:92:95:de:be:c6:01:22:0f:97:b4:
0e:cc:9e:22:5e:c7:af:3a:5a:a9:85:57:82:1b:c4:97:f6:ed:
6e:ee:44:ed:70:d3:d2:b7:d1:9c:16:6f:99:43:70:40:fb:d7:
46:a7:5b:16:ea:b8:48:2a:8e:13:cd:ff:bf:31:40:a5:65:fe:
35:b0:53:d8:55:2c:57:3a:12:e2:1d:2a:51:0d:fe:7d:ee:8e:
f5:26:9d:01:ac:93:3d:dd:a1:38:9e:e7:00:28:97:31:3e:4d:
64:4a:dc:e4:a3:78:b4:67:57:47:27:5a:fe:b9:0c:01:54:5d:
50:21:e2:25:37:0a:57:65:e2:88:94:43:86:84:09:bf:89:ea:
7f:7a:62:6d:40:43:1c:48:88:32:68:d7:ea:85:43:7d:27:7e:
84:a0:cf:f6:bb:51:a1:9f:58:f8:82:5d:45:cf:f2:08:2b:fd:
33:43:57:e2:bc:fa:1b:1a:63:9f:8d:d0:60:a2:de:02:90:d4:
3e:58:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:38 2025 by rpki-client