Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: h58cK0hZAVZFpp24yfZZKErOhmk/LNHRglxSnV2IBJc=
Subject key identifier: D4:57:8D:08:40:ED:2B:48:38:A9:15:C3:46:4B:5C:07:14:9A:AF:32
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 0197B70E854D7A3F790973D66C2C9E420B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 05BB
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: 4xHTCf4xm5SvnHW/3uIVOsk0HdQKb9nkuLmr9q1jELk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:85:4d:7a:3f:79:09:73:d6:6c:2c:9e:42:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=d4578d0840ed2b4838a915c3464b5c07149aaf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:e3:e0:a1:03:1e:8f:cb:80:a1:37:0a:93:
c7:4b:39:6d:6a:f8:37:3a:9f:0c:e9:90:eb:52:b7:
97:ed:3a:db:4e:8c:4b:48:d1:d9:f0:cd:46:f0:07:
1e:b9:14:7a:d7:f1:f1:ec:b5:9d:af:7c:84:32:7d:
d3:51:24:97:8f:8f:fd:2c:60:03:51:80:77:6a:f2:
d4:1b:4c:a9:e8:1b:03:06:bb:56:67:78:d1:05:f7:
2a:b0:a3:58:c9:d4:0b:da:a1:04:ec:8a:c9:5c:f7:
54:fb:50:ab:5f:8d:1f:d9:65:3c:1e:4c:ae:61:57:
03:1d:a2:d1:6f:c6:13:e2:8e:fc:bb:cd:40:b7:69:
36:20:fe:3d:11:7c:22:4f:0c:d6:f6:33:7a:ce:ba:
27:51:8d:2d:27:d6:b9:2e:a2:9b:0f:44:87:fb:58:
14:70:c1:8d:5a:2d:b3:04:34:5c:50:84:79:3e:9a:
6d:7d:76:51:8a:47:3f:70:50:2a:47:3d:63:a4:9c:
7a:e8:b9:39:26:3e:5c:5b:9f:ab:e3:61:69:37:7a:
b1:3d:e7:58:a0:65:4e:e4:b8:d6:b3:49:0b:41:cd:
41:2c:4f:28:8b:fd:c5:f3:78:fc:d6:3b:b5:39:0e:
09:7c:ba:68:a5:db:e0:95:ea:f5:0d:e8:e8:ff:3b:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:8D:08:40:ED:2B:48:38:A9:15:C3:46:4B:5C:07:14:9A:AF:32
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:38:bd:ee:41:07:ec:45:ae:f6:dd:59:2a:f6:32:9d:19:52:
31:db:18:cc:f5:00:10:06:22:2f:98:fd:2a:fc:97:ee:50:3c:
15:cb:03:57:d5:61:87:fd:82:56:25:7a:2b:9f:d9:48:e7:e1:
93:56:44:9b:2c:a1:6e:fb:fd:cb:53:31:d7:49:7d:dd:bc:6c:
a3:0b:b1:8d:96:fa:35:7b:e6:c2:14:11:d1:57:00:9f:a3:53:
bd:8c:b7:5f:24:0a:7c:54:f1:f7:54:9e:c7:33:87:6e:ea:48:
2f:a3:40:f6:89:35:27:d3:14:e2:ab:29:6a:97:cf:8a:4b:c5:
76:b7:69:f9:53:27:7e:fb:b4:9c:f5:04:af:4d:73:79:37:c2:
2e:db:97:a1:31:da:2d:43:4d:2a:85:3b:87:c9:11:2f:be:84:
53:66:e9:70:2f:34:6a:77:a8:5c:be:3f:d7:30:16:29:be:ed:
bd:df:4c:86:a2:36:be:e6:5b:d0:6b:3a:e3:02:cf:2c:99:d1:
e1:1f:5a:f8:61:8b:2c:bb:6a:69:e4:62:87:80:45:f4:ef:1d:
a1:2b:f0:e5:26:af:d3:42:f8:8d:b5:6d:36:80:93:7f:cb:1f:
d8:61:48:1f:78:50:5c:dc:57:7f:ba:70:49:4c:fe:57:98:11:
38:fb:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:04 2025 by rpki-client