Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: J4CqJYloFdHCTOVW06evDke8JXE17rN2GMUYYQuQPjw=
Subject key identifier: EB:36:ED:9E:1C:59:76:F6:DD:3A:72:AF:D2:0F:56:00:A8:ED:C4:BB
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 0197B7EA7B1E6B7FF491A03B95D95A7DE779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 01F9
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: Bh01mxvHFHcD2KPLhWJ+W7R00+9T6+CHrSoEQRqF2/g=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7b:1e:6b:7f:f4:91:a0:3b:95:d9:5a:7d:e7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=eb36ed9e1c5976f6dd3a72afd20f5600a8edc4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:b0:3a:cd:07:91:18:54:5b:e9:27:88:b8:
76:3f:48:3e:70:ee:39:aa:52:2a:db:6b:7f:25:1f:
28:23:2e:d6:1f:3b:f7:a7:d8:93:b4:5b:84:40:09:
0a:21:33:00:5d:3d:96:89:19:60:4b:92:f7:5a:85:
10:be:a6:4e:db:2d:f0:b6:69:b0:77:ed:ce:8c:9a:
53:d2:b8:e5:79:31:a7:e5:15:36:2b:a0:59:06:32:
8c:f9:2c:78:43:40:cb:0b:cb:5a:6a:af:d4:88:71:
ce:da:3c:4f:75:d9:11:e6:e4:58:96:a9:09:48:7b:
62:e6:91:98:29:00:ae:33:b3:c2:2a:b8:ad:df:46:
06:4f:9f:85:1b:e7:57:70:dc:85:2f:07:9a:30:72:
41:01:bf:f3:f0:7f:56:3f:2d:d7:39:d2:d4:20:03:
60:90:90:1d:82:f0:5f:47:d0:e3:a7:e8:27:cf:c4:
76:cc:9e:aa:f7:84:00:0f:32:46:4b:a1:9b:ea:20:
c3:0f:a2:ca:40:dc:0c:6e:e8:4b:63:31:88:25:2a:
67:f3:fb:df:cd:7d:01:37:f5:ff:d1:0e:e0:6d:1f:
bb:63:af:c1:08:8f:a8:2b:0c:92:94:5a:f5:c1:6d:
25:d7:90:84:7f:9f:8d:c0:e6:1a:d9:1a:e0:56:c4:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:ED:9E:1C:59:76:F6:DD:3A:72:AF:D2:0F:56:00:A8:ED:C4:BB
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3f:e5:fd:ea:56:04:95:b5:e9:72:9d:84:f2:69:9e:dd:60:
e6:a8:2d:f5:5a:78:2a:be:1b:17:b7:b8:52:1d:df:e4:95:bd:
c2:33:65:ed:e1:06:7e:fb:59:3f:06:d5:36:71:b0:9d:23:3e:
14:dc:11:9a:ad:7e:01:37:1c:d3:9a:38:c5:14:7a:4d:05:a9:
f8:0a:28:49:3e:69:2a:27:f6:2d:50:95:50:96:c3:c9:7d:e7:
82:25:29:57:c2:82:37:66:c4:4c:7d:69:50:aa:28:45:07:84:
5e:34:aa:37:4a:de:96:a0:56:cd:54:9e:d0:db:04:95:2f:a0:
e7:4c:c9:f4:13:bd:41:2b:37:98:51:09:ae:a8:f8:ba:9e:2a:
4d:ae:33:23:27:af:81:3d:22:44:6e:a9:17:e0:55:57:b1:2b:
41:df:ef:64:17:5f:88:f5:91:80:1e:d6:bf:a8:bc:e2:59:61:
2d:71:70:1f:e6:9a:f9:a4:df:1e:ee:b5:2c:40:f0:1e:14:c0:
fd:e9:73:0d:00:d7:dc:b2:ab:ef:4b:77:4c:e1:19:bc:31:4b:
70:19:33:ca:bb:b1:a8:62:83:6d:fe:e6:65:e8:f4:f7:a4:85:
4a:d8:b9:c9:72:ee:5c:e1:45:70:23:58:99:e3:e6:85:7a:c9:
e2:98:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:12 2025 by rpki-client