Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier: FidAv6wQLDDaKVuNNb3/1IqY7BtvMhX5AnHzp6Ud4Qk=
Subject key identifier: FB:19:29:79:3F:DE:DA:3E:FD:10:17:C3:57:85:70:E1:5A:58:B8:ED
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 0197C8A6F5F21BECD474CA69B672178AC888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number: 15D1
Signing time: Wed 02 Jul 2025 01:01:14 +0000
Manifest this update: Wed 02 Jul 2025 01:01:14 +0000
Manifest next update: Thu 03 Jul 2025 01:01:14 +0000
Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=)
2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=)
3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=)
4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: j09ONszjMXxSSJ7rpEg29jKxKEa8XlwI4VEluNO4Grk=)
5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=)
6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=)
7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:a6:f5:f2:1b:ec:d4:74:ca:69:b6:72:17:8a:c8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Jul 2 01:01:14 2025 GMT
Not After : Jul 3 01:01:14 2025 GMT
Subject: CN=fb1929793fdeda3efd1017c3578570e15a58b8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:87:37:b6:65:f7:39:be:2b:94:e4:51:45:
ce:fb:4e:00:b3:e8:3d:fe:a3:75:ff:76:04:2e:72:
12:bc:3a:d9:35:98:05:29:3a:00:fa:0e:b0:c7:47:
2b:89:65:3a:59:bd:0c:73:60:cc:09:8d:a3:db:a9:
cb:97:22:24:33:bb:e1:b3:57:b6:57:0e:01:a3:a2:
a4:a4:8e:d4:64:94:e0:be:e8:65:7a:ff:ce:c7:2b:
f3:32:b5:d3:98:13:4a:c2:d1:ab:cd:62:cf:02:cf:
07:a0:10:b0:8d:e8:d4:b4:7c:95:da:a0:97:75:34:
8a:ec:d9:da:86:c6:05:d0:24:19:c5:f1:3b:b9:58:
a8:34:f4:20:ce:06:67:db:49:16:b8:0d:ab:c0:ac:
9a:1e:c1:73:54:70:24:a3:69:de:7b:dd:be:7f:0f:
5c:21:90:df:47:87:34:32:fa:e0:59:76:35:4a:b7:
5b:e1:26:59:3c:91:46:a6:b2:61:78:77:b3:70:d9:
84:c6:8c:2c:53:41:6d:67:26:4f:a6:fa:4d:74:d1:
31:87:59:d6:49:46:d7:fa:f0:9b:6e:2f:dc:53:e1:
89:b7:7a:4c:41:a5:6b:93:14:78:be:f7:fc:89:ac:
66:de:df:37:b1:a1:f9:d9:8c:dd:ea:22:c3:77:af:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:19:29:79:3F:DE:DA:3E:FD:10:17:C3:57:85:70:E1:5A:58:B8:ED
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ed:33:ae:c7:f2:46:75:91:71:dd:7d:f9:2d:ce:9c:87:4d:
e3:0d:9a:73:ce:a9:ff:a1:78:57:0e:0d:4c:d0:bf:ba:dd:95:
32:27:62:5a:b3:62:13:17:03:f1:d8:52:3d:8a:ab:a2:95:b4:
f8:b0:5f:12:3f:bb:f6:66:79:73:2a:b4:e5:5e:9b:9d:04:14:
02:e2:7d:62:74:cb:8d:1f:0f:a8:bb:38:03:91:3c:55:5e:c8:
f2:73:37:94:8d:48:4e:12:9a:60:1b:b4:a4:f8:18:f6:06:dc:
15:6e:29:cc:5b:cf:cb:6a:78:25:6e:3b:5a:82:2b:75:bd:c6:
3c:ea:96:f0:c8:5b:18:fd:eb:69:c4:74:98:66:b5:0d:73:98:
53:cb:ff:7e:cf:df:8b:c3:1c:0c:af:7e:38:85:87:d2:f7:6c:
dd:17:ea:b4:37:ae:e9:2c:7f:d1:b4:6b:fd:63:9e:14:c6:97:
3e:75:9b:e5:ce:bc:c2:30:2a:91:0b:75:c4:7c:ad:ee:16:a3:
e7:99:a0:06:76:f3:a8:03:46:9f:50:28:fa:11:04:88:cf:0e:
f3:af:fb:5c:6e:7d:50:69:a6:28:9c:22:ad:9d:31:a8:fb:a1:
94:13:a1:2c:59:2d:82:f4:2f:49:0d:16:ed:0a:8d:88:0a:70:
96:3e:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:22:54 2025 by rpki-client