Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: i1xpJdZMLcvrQRuaDa3gELbsAb6ti7b0eDRGXADlRo4=
Subject key identifier: 93:7D:C5:04:C7:7F:B7:F2:FA:B2:E6:78:F7:93:61:C8:FA:19:EF:0A
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 0197CA5E3DB2F49D7EC2FC058DDA58FE4984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 0AE1
Signing time: Wed 02 Jul 2025 09:01:03 +0000
Manifest this update: Wed 02 Jul 2025 09:01:03 +0000
Manifest next update: Thu 03 Jul 2025 09:01:03 +0000
Files and hashes: 1: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: NAz5BLGdLG3AFLLhl6+kqErWW0ZqPYJlI4lM1G9KmaM=)
2: fS7Vtpenx3ISocQLcsKDmT4cdAc.roa (hash: lsacutCDcdT1KWfBtvedBOBvauWcszwNt+V8+YsxMyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:3d:b2:f4:9d:7e:c2:fc:05:8d:da:58:fe:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Jul 2 09:01:03 2025 GMT
Not After : Jul 3 09:01:03 2025 GMT
Subject: CN=937dc504c77fb7f2fab2e678f79361c8fa19ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:56:4e:26:03:f5:d0:26:07:3f:e6:d6:84:
77:8e:91:92:20:02:ae:5d:ca:51:ef:b2:0d:7c:bc:
9e:51:e0:9b:16:54:69:d7:2b:51:e1:be:b4:84:e1:
60:3c:79:59:b9:06:1b:6a:3a:6b:b7:2d:d7:09:c3:
96:7a:f2:fe:83:9b:77:bf:9a:50:37:bc:df:b1:7c:
20:57:66:df:98:e0:87:72:50:59:0b:60:6b:ce:55:
08:59:4e:28:4b:ff:f8:b8:dd:a3:93:0a:10:e4:13:
a6:92:1b:89:a2:d5:26:b7:92:d2:39:40:aa:89:ca:
0e:97:01:61:02:2f:33:68:99:b1:e6:24:11:e1:46:
54:f8:92:b1:3f:7e:b7:ec:4a:c8:4f:1d:d4:19:91:
02:da:f7:24:c4:b2:c7:b9:dd:eb:40:8a:e7:c1:36:
42:70:3d:be:aa:bf:74:16:da:60:65:a2:68:37:49:
29:bd:80:76:ca:9d:fa:99:e7:bb:5e:1b:e6:e6:54:
95:bf:18:77:5a:c1:73:58:fe:df:8b:a3:61:55:f6:
e1:9b:ea:90:86:2c:c3:13:9c:00:4c:58:48:fa:f3:
f1:a6:91:00:56:e2:3a:3c:d9:ba:c5:c8:6d:17:36:
fb:61:d4:8c:8f:4d:e5:9e:93:30:72:19:fc:0e:39:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:C5:04:C7:7F:B7:F2:FA:B2:E6:78:F7:93:61:C8:FA:19:EF:0A
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5e:39:1e:3e:31:5e:75:e0:b3:4e:06:67:f1:75:d3:2c:1a:
a2:a5:6f:b4:36:b3:51:5a:72:27:f7:36:16:10:6b:5b:37:72:
f0:8f:9a:86:f5:1a:48:71:e4:d2:fe:f2:60:64:59:de:fc:92:
5d:1a:98:67:af:e2:28:02:4a:54:38:5f:0a:83:37:13:71:b0:
00:ad:54:7b:f2:c4:7b:d0:8b:3d:dc:87:35:af:69:a9:98:8b:
a5:40:16:37:b2:40:76:7f:10:20:d6:fe:2c:7c:87:95:16:fb:
2e:56:86:91:cb:82:75:99:b4:b7:40:19:73:05:71:8d:27:8c:
0a:e1:da:d2:52:8f:13:25:80:ce:4d:ca:ae:c7:f1:30:8d:c7:
9f:7c:30:bf:cd:4f:d5:cb:fe:39:b7:a5:2f:68:41:13:aa:e0:
1b:e3:52:57:a5:a3:cd:60:36:44:87:05:63:b5:72:ea:cb:9c:
72:e2:50:7c:67:42:95:1d:6e:8c:ca:ce:8a:e3:bb:b8:ad:bd:
6b:25:3b:19:51:89:ec:96:ce:ae:40:6c:18:bf:65:1a:b1:9c:
e5:c1:04:25:98:f0:5a:20:ff:aa:90:c3:e3:04:36:00:9f:4b:
7e:5b:ea:72:13:c6:91:4a:64:b4:0e:5a:58:ee:77:ba:65:d5:
0c:35:ae:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:35:11 2025 by rpki-client