Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: kJOCn2jl7lKSgqFyf7lSbPGWKV6prP1A16ApkaIzeso=
Subject key identifier: 77:9E:CF:97:83:17:43:2B:96:5B:10:C0:44:5F:4E:08:07:B4:56:71
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 0197B6A10FF4B9F773B72DF67D5170F88493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: qjEA3yEngYuoIHiBGaclTDk4l2/QN2liJE857ASRKSw=)
2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0f:f4:b9:f7:73:b7:2d:f6:7d:51:70:f8:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=779ecf978317432b965b10c0445f4e0807b45671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:46:e8:be:5e:d2:7f:31:87:7a:15:1f:04:
48:45:a2:7d:c9:d6:1e:9b:e0:af:09:80:0c:fd:2c:
50:2a:9e:74:56:0c:41:36:6c:3b:05:c9:ea:44:cf:
b9:dd:97:18:42:ea:fc:4c:51:99:0c:cd:5b:ab:10:
44:95:21:ec:7d:cb:6c:c5:84:24:e8:67:63:bf:39:
2c:4d:fa:ae:f1:cc:58:ad:d9:41:28:36:46:b0:04:
26:68:0f:98:06:50:8e:bc:46:2e:e6:64:52:6d:6e:
20:0b:29:ab:87:37:56:90:a7:8e:a1:f4:99:80:93:
21:a5:27:a9:70:40:d5:20:63:38:dc:8b:cf:cf:c3:
7a:ec:f3:85:f8:78:dd:89:a4:d0:02:dc:f7:e2:c1:
78:4e:71:8c:57:93:0a:65:09:86:49:b9:ab:bf:d3:
52:86:46:d4:27:cc:5d:49:27:73:5b:b6:05:fa:11:
e8:1c:5b:2f:55:88:cb:5b:6c:f1:0e:f5:d1:6e:d7:
f3:3f:f5:3b:53:93:fd:c9:96:27:ed:5c:11:93:7c:
2a:e0:04:c4:c5:99:ef:20:0b:d3:fe:6f:ed:40:c0:
83:36:f7:fc:0b:67:70:ec:77:5e:be:33:0a:67:6a:
0f:1d:9e:17:3e:c5:e4:d0:59:80:17:d7:89:c6:1b:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9E:CF:97:83:17:43:2B:96:5B:10:C0:44:5F:4E:08:07:B4:56:71
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:74:cf:b7:3e:21:9a:76:85:de:e6:74:2c:f8:14:b6:a2:f9:
e1:f5:b9:95:6a:c2:19:78:8b:a2:d1:8e:64:d6:63:8e:6b:cb:
6a:8a:2d:39:bf:91:ce:67:62:9f:e7:8f:39:09:df:cb:38:a8:
8e:0d:4c:4f:df:eb:4d:c2:41:97:87:7e:4f:57:66:d3:5d:12:
f1:98:f5:39:84:a6:79:dd:f8:7b:6f:ff:e8:93:12:46:6e:45:
0f:03:e4:d1:78:61:95:4d:54:7e:95:fa:60:b3:d3:4a:59:a6:
be:2e:2c:89:6e:ea:18:b5:c2:2c:54:29:87:67:f6:ce:84:5b:
2c:8f:d6:9b:70:11:2c:f7:a0:91:9c:b1:44:69:70:cf:34:2e:
0a:4b:22:0d:66:fd:f2:00:ce:db:c0:13:36:d5:e1:af:97:4f:
4e:a6:e9:06:70:e2:57:3b:99:cb:fa:32:8e:4f:81:34:99:b3:
d5:c9:9f:d0:2f:8e:b8:98:42:65:2c:7e:2d:ff:dd:c3:98:d4:
c0:ee:f9:81:bd:11:b7:3a:34:1f:6e:59:f5:5b:06:ea:e0:15:
d2:a4:67:85:bd:99:bc:5b:bd:e5:27:34:1e:7a:52:ac:22:be:
0a:38:8d:19:e8:b4:ea:e5:76:81:53:15:96:70:08:a4:40:fd:
31:68:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:24 2025 by rpki-client