Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: DDXZBa36nkVoASilKkKc6Viu0ZG3vd82rbjxSSrlCTQ=
Subject key identifier: 70:EF:2C:6D:04:7D:34:9A:4D:07:75:54:9C:13:FD:C9:BB:D9:69:5A
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 0197B7B378E974B4E4B16A37E3D62F0F2F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 18:01:21 +0000
Manifest this update: Sat 28 Jun 2025 18:01:21 +0000
Manifest next update: Sun 29 Jun 2025 18:01:21 +0000
Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: AclgimBJEb+AnoGSUpbiaBmySHaWGFI7QRnR3JkTmtE=)
2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:78:e9:74:b4:e4:b1:6a:37:e3:d6:2f:0f:2f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Jun 28 18:01:21 2025 GMT
Not After : Jun 29 18:01:21 2025 GMT
Subject: CN=70ef2c6d047d349a4d0775549c13fdc9bbd9695a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:a7:13:3a:f9:c2:5b:02:19:15:ac:c3:66:
15:23:38:c4:83:a9:70:cb:39:da:7a:ae:cb:ad:24:
8e:29:bd:55:37:c3:bc:31:99:c5:69:e4:de:ba:27:
03:8b:f5:0a:98:f1:c9:ae:8c:bb:48:2d:4f:05:b9:
43:f4:0f:04:a5:0c:49:47:8a:d7:5f:0e:bf:fb:9b:
dd:77:e7:79:e2:f1:8e:a6:f3:77:47:7e:03:92:ac:
ae:6e:93:1d:3e:02:96:4d:fd:9e:86:2f:b2:9d:5d:
1b:66:ce:c1:78:c7:6a:79:30:d4:fd:81:c8:80:a4:
08:56:17:9a:02:bc:71:c1:6d:cf:a3:2b:ea:72:68:
28:11:00:ce:26:67:a5:42:33:65:1a:23:cd:bf:55:
b2:31:3b:89:6f:bb:18:46:1a:1a:02:29:a6:4a:53:
80:1a:04:33:e3:90:81:88:be:e7:07:15:55:d0:94:
87:1b:1e:3a:a7:ef:d5:5b:cc:60:ee:0d:60:f6:01:
9d:fc:84:ce:06:4c:ea:f9:12:33:fb:ae:c9:39:b8:
8d:02:d1:d1:b9:e5:0b:fc:dd:24:4c:b1:b7:24:fa:
73:e2:9f:0c:9b:60:7a:a1:48:79:cd:b2:a0:35:48:
61:09:40:97:23:68:95:87:4e:16:5a:d3:41:7e:8b:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EF:2C:6D:04:7D:34:9A:4D:07:75:54:9C:13:FD:C9:BB:D9:69:5A
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:24:d3:a4:d5:45:4a:a7:bf:93:cb:d8:86:32:9b:bf:f2:82:
ac:8d:32:26:8d:ec:6f:6d:ae:23:4d:6a:f4:73:05:e9:20:6d:
ad:28:71:34:77:b1:cb:7e:43:92:25:47:df:7b:d9:96:1d:01:
93:4c:95:f6:cf:bb:f8:08:5a:02:7f:b2:d5:dc:64:16:9a:c8:
30:95:ff:c5:c0:28:91:6c:00:fc:6f:92:68:1d:c7:f0:04:23:
98:24:6f:15:91:bb:bf:4d:c2:4a:2c:7d:ac:74:0f:80:0c:e6:
b8:86:c8:0a:4b:41:8c:1b:28:cd:01:f7:66:9c:90:0e:4a:90:
6e:16:72:0a:67:ee:3f:e2:f1:3d:11:bc:11:f8:a2:24:f1:4c:
91:4b:f8:43:d1:c1:7d:df:96:1c:74:2f:dc:56:35:74:4a:98:
07:5a:2a:f3:4a:e5:17:32:ed:0d:99:10:b6:ad:f8:c0:54:45:
f8:69:74:97:05:df:b5:9c:a5:ac:7a:fd:54:60:08:a0:30:27:
5b:10:e7:2a:a2:29:37:dc:1d:26:06:f7:a5:fc:03:89:58:79:
8e:a4:71:e8:8b:a6:7b:79:65:a7:33:33:2e:d0:d8:06:cf:ee:
88:44:b1:18:26:e8:62:f6:ee:95:a6:9b:4f:a8:ee:a0:d8:64:
c6:cb:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:17 2025 by rpki-client