Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: 2ctXkGlJuCIKhOrGlsoVXOqQmCBEMeDDSPCk3HdxUAY=
Subject key identifier: E9:77:4D:4B:BA:CB:A6:62:AF:2A:82:59:1B:17:4E:24:D0:BC:26:4E
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 0197C49314CC688637664A55F76E761542F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 015F
Signing time: Tue 01 Jul 2025 06:01:02 +0000
Manifest this update: Tue 01 Jul 2025 06:01:02 +0000
Manifest next update: Wed 02 Jul 2025 06:01:02 +0000
Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: 1nVcR51weT+8XiJmeGyDYm5fHPcn8hdclYYupXKKIq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:14:cc:68:86:37:66:4a:55:f7:6e:76:15:42:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Jul 1 06:01:02 2025 GMT
Not After : Jul 2 06:01:02 2025 GMT
Subject: CN=e9774d4bbacba662af2a82591b174e24d0bc264e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:c0:15:7a:7d:b8:99:0f:89:42:01:d1:98:
fe:51:f0:d4:d3:04:54:29:8e:39:0c:34:1c:fd:55:
34:d5:14:61:de:73:2c:89:90:f1:3a:bb:ef:40:61:
30:b9:48:22:ba:06:88:6a:b8:97:e7:f4:5f:bb:07:
3d:b5:48:45:74:32:7f:d0:f0:40:2b:49:d6:b1:86:
0f:a5:ca:c8:70:f7:5c:cd:f7:5d:68:34:5a:d2:8d:
5e:82:d8:55:4f:11:76:a1:05:af:f2:fc:e8:6e:6f:
c4:bd:b1:4a:0d:9b:fb:02:1f:f4:6f:9b:d8:2b:31:
f6:2f:e7:ee:bf:fd:98:c1:f7:99:6a:d9:d0:d0:2a:
7c:21:17:be:a3:c8:90:8a:1b:76:ba:1a:f4:de:9e:
95:e8:c1:fa:b5:8f:8f:10:ba:1d:fa:9f:43:0e:11:
6f:54:33:25:a5:00:c6:96:e2:f6:2f:e9:99:55:32:
31:12:a6:77:ff:0b:2e:50:20:79:21:23:0e:b7:54:
fc:2c:b6:82:eb:82:cf:e4:95:ca:d9:ca:1b:95:db:
df:10:ae:09:7d:45:f3:f1:6e:10:47:5c:72:95:90:
a2:39:8e:be:3e:3c:d7:5a:e6:ac:47:f8:e1:08:f5:
9f:76:ee:3e:1c:8d:db:d0:49:a1:f8:d2:9d:1f:f1:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:4D:4B:BA:CB:A6:62:AF:2A:82:59:1B:17:4E:24:D0:BC:26:4E
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:60:14:28:b0:3f:a2:ce:d5:89:31:a4:7f:db:6c:cd:62:60:
1f:4f:b2:92:1f:5e:5d:22:c1:31:fa:a0:92:82:ec:e7:4f:5e:
36:69:4c:a4:57:41:60:cf:8c:67:81:81:0f:7d:dd:36:f5:16:
73:59:e9:0b:fe:dc:04:9d:9c:c6:2e:69:b0:1a:d7:94:45:d2:
fd:8b:6e:e9:18:67:8f:69:56:db:32:d2:f8:a9:fe:af:13:37:
49:bc:af:26:54:e4:2c:c2:27:90:cf:c5:8a:a9:f3:6a:5f:3c:
4a:11:cc:81:8c:a0:44:49:77:c1:fb:1b:f9:ce:89:60:28:e2:
eb:79:75:06:ca:f9:34:ea:07:cd:95:db:6f:51:2f:48:19:5c:
f0:52:c1:a0:fc:eb:1d:68:ce:ed:35:e4:37:c8:08:35:c9:03:
27:3d:c9:dc:a1:22:00:ae:bc:23:0a:65:b9:b4:a0:10:9f:89:
9c:85:c9:6d:71:f2:bb:66:b4:9f:89:b9:ee:8d:8f:60:32:f0:
c7:b4:3f:29:5b:be:03:ed:16:45:36:39:0b:65:2b:15:04:0a:
f1:a4:93:02:f7:0c:92:a6:d6:6e:37:39:24:f2:16:57:ba:0f:
6b:9a:7b:2d:0d:9e:98:ee:ee:27:8b:a6:02:e6:72:cb:ba:14:
4e:00:ff:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:47:30 2025 by rpki-client