Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: lp1GjC0d+mPvzQOcIqSQr02VjGUds1cNp+2fR8/KQkw=
Subject key identifier: 62:7D:9B:E1:FE:76:66:82:32:24:A4:24:D4:54:82:BA:A7:52:5A:A6
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 0197B89001FFDC9C73B0DDDC53F72F7BF8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:02:14 +0000
Manifest this update: Sat 28 Jun 2025 22:02:14 +0000
Manifest next update: Sun 29 Jun 2025 22:02:14 +0000
Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: Dp2seI57waFWafdvXGUGLIk8NhPuIr4HReOxJTeOCsU=)
3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:01:ff:dc:9c:73:b0:dd:dc:53:f7:2f:7b:f8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Jun 28 22:02:14 2025 GMT
Not After : Jun 29 22:02:14 2025 GMT
Subject: CN=627d9be1fe7666823224a424d45482baa7525aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:20:94:2a:b8:cb:7a:dc:02:d3:5f:71:cb:
a4:04:23:21:1b:14:0b:28:76:71:f4:a0:0a:3c:6b:
39:7f:e8:d2:c5:07:31:74:8e:41:7d:aa:13:dc:e1:
bf:c4:db:7d:5c:c5:10:7c:0c:d1:1b:43:75:ac:36:
73:d4:16:f7:e0:98:b0:67:05:e5:69:32:ae:29:df:
eb:30:c5:18:85:19:2a:97:73:b7:5c:2e:1d:07:16:
e1:6b:e5:ff:e2:2f:db:0e:9a:16:c1:dd:47:ab:1b:
9f:d3:03:3e:74:6d:48:df:fc:27:86:c4:7e:1f:ee:
a0:cd:a0:0d:3f:84:b3:d3:7f:d4:ff:1c:92:d9:8a:
b1:f8:8e:74:f4:63:e8:8f:9c:30:2b:79:bb:4b:1d:
a9:ec:f9:10:20:4e:e9:57:29:86:9a:07:b3:67:c6:
b5:32:bf:86:fb:a5:ec:c2:f2:e2:a6:34:b0:8a:b1:
72:16:94:8c:23:f1:b2:b9:ab:2e:7e:ee:13:0d:91:
8f:65:52:2e:22:c9:c8:18:12:bf:70:70:af:f7:77:
4e:43:1a:6b:6f:c0:ab:66:93:b0:b6:f4:3d:7b:d4:
6c:d4:5c:c9:4e:6d:5e:14:64:0e:9a:d5:78:90:e4:
cc:64:13:93:48:07:65:94:db:54:9f:ab:eb:d0:b4:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7D:9B:E1:FE:76:66:82:32:24:A4:24:D4:54:82:BA:A7:52:5A:A6
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fa:be:fa:f0:39:ae:6a:eb:0f:5c:9a:d7:ad:c9:8a:98:26:
4e:ff:fe:61:0e:ca:fd:a6:e7:3c:c8:95:9a:63:91:49:4d:be:
57:4c:8a:f1:a5:08:50:21:8c:7d:7e:84:aa:7e:f8:62:38:c6:
21:e8:c6:cf:f3:15:ac:be:20:53:eb:9e:7d:b4:bc:d4:33:7c:
75:45:e9:73:f4:14:c5:4d:2f:fd:d6:ee:57:58:65:9d:6c:c2:
0c:ac:05:97:30:dc:df:8d:bd:7a:ab:1b:da:a3:31:00:c4:60:
05:27:a3:a9:94:ad:ed:ef:a7:25:b3:66:bc:4b:18:b5:99:d7:
4c:e0:91:b6:43:c0:f0:42:13:9a:5e:3d:c7:a0:79:54:b0:f0:
de:30:b2:07:48:e0:bf:13:4d:72:e6:4d:94:dc:b6:85:c9:25:
ad:5c:b6:cb:00:10:11:1c:50:c1:df:a0:4f:ac:33:d2:f2:47:
56:5c:e1:90:60:34:52:a8:54:d0:65:09:eb:ba:35:5d:54:44:
89:2d:8f:ee:d0:97:23:9e:7f:1c:80:f8:e7:01:c3:7c:9b:7c:
10:ec:17:5f:19:23:c0:bd:9a:98:c7:3a:44:16:2d:3b:c2:e2:
42:41:3b:57:a5:86:5b:9d:6b:90:66:d5:9c:1d:e3:b3:9c:7e:
2d:78:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:11 2025 by rpki-client