Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: B+v9QFMTDFt9aHnUG84vWngdVMJUxSeZk/AxA9NCjdY=
Subject key identifier: 02:4A:ED:CF:82:C9:EE:C9:81:07:63:4A:12:E3:45:D4:BE:56:92:1E
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 0197B77C0F50FCA1B09A88E0855690E83CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 041E
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: n5PQcCMsK9/ZVlh8ozoRisxbZU3iDu9t1OS9Q4TVn8c=)
2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0f:50:fc:a1:b0:9a:88:e0:85:56:90:e8:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=024aedcf82c9eec98107634a12e345d4be56921e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:f2:4c:bc:fc:f4:98:67:40:43:71:8b:5b:
a4:cb:8e:f3:c7:57:c6:6f:55:da:bb:21:fe:a7:10:
57:56:99:87:95:cb:82:88:60:12:7f:67:b9:c1:bd:
31:71:28:9d:08:75:c0:ab:8f:9f:34:16:d9:30:ef:
39:41:24:80:31:73:65:1e:da:fd:90:3c:87:bf:6d:
7f:6a:3a:e3:ab:2a:b3:fd:68:62:24:b6:c2:ac:7b:
e0:8d:93:4a:e8:0a:e9:37:a5:45:8f:8c:56:42:75:
c6:e3:0e:0b:4b:e3:9c:2a:c1:28:f1:c5:ef:e7:84:
1f:dc:d1:c2:b5:4e:51:d1:0a:cd:53:2d:61:ad:28:
34:6b:56:72:80:ff:c5:51:c6:6a:4c:5e:78:5b:0f:
af:f4:7b:f7:16:b7:ec:04:f7:18:35:68:52:10:a8:
f4:7a:01:23:0f:32:bc:f1:3c:6a:32:37:6a:75:3b:
1e:27:05:9e:b6:54:cb:76:2d:22:6c:7a:58:e6:b1:
bf:b0:64:42:ca:1e:35:83:25:64:30:9d:e7:aa:dc:
c9:e3:e2:55:e3:d2:42:77:17:7a:c1:57:24:e4:11:
90:22:aa:d5:b4:e9:11:8f:cf:2f:eb:4f:27:61:62:
5b:5b:54:3b:20:d6:6f:97:63:d8:cb:2e:ed:a0:26:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:ED:CF:82:C9:EE:C9:81:07:63:4A:12:E3:45:D4:BE:56:92:1E
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:dc:3f:a1:87:9e:36:78:5a:93:d0:3c:4f:09:01:1a:55:33:
f6:25:84:5f:fb:b0:37:14:76:e5:1c:57:1d:0e:f0:42:a7:c5:
dd:58:30:96:f8:10:49:4a:77:e3:2e:94:5a:64:e4:d7:a9:3e:
4b:90:17:b3:42:01:f7:a2:6c:ca:51:bc:ea:05:92:24:cb:cb:
b3:cb:75:8a:5b:bc:e3:a9:64:cb:30:27:2f:e5:d9:8b:d0:6d:
f7:5a:b2:46:30:4f:bf:d4:1b:82:21:f0:3d:0d:b3:c5:28:ff:
05:b4:9c:66:ea:0b:72:85:a1:7a:f7:28:96:82:16:51:58:65:
92:f7:16:0f:c8:b3:3b:df:19:dc:0e:ad:7f:8a:79:b5:b7:30:
bc:c4:66:2b:82:fb:c2:cd:32:7e:33:93:e8:d8:c5:16:48:04:
97:90:0b:ee:d2:a4:e6:52:da:79:65:2d:98:32:23:90:4e:e9:
56:d3:8f:09:14:9a:ab:c9:7a:d5:0f:e9:9d:0a:1f:28:b4:7f:
5a:8a:29:aa:0e:3f:3d:c6:3e:e5:ea:3a:88:f9:5e:11:16:f9:
b8:70:35:19:df:c7:f8:d3:fe:90:b1:d0:34:23:6d:da:ef:0a:
d0:04:e1:55:80:b6:f1:99:f3:f3:d8:0f:04:23:1a:39:07:a5:
cc:b0:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:09 2025 by rpki-client