Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: ZRewq96vVH6509JNyXZak8RYQW+l3YBDNmp7fP4kPP4=
Subject key identifier: 4E:67:55:4E:19:77:D9:FE:FF:63:6D:4B:F0:CF:D7:16:4D:91:1E:7D
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 0197B70F0F359FD5D5A5D9EE86E32CCB5221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 0B18
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: Aart+qNqNkV41q1ALry3/RK23UkY0PuNsXHkMn+TgPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0f:35:9f:d5:d5:a5:d9:ee:86:e3:2c:cb:52:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=4e67554e1977d9feff636d4bf0cfd7164d911e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cd:04:02:55:20:df:97:2c:9d:9d:d6:cb:ba:
6e:75:67:db:a0:b5:71:93:cf:8d:17:1e:ff:8a:eb:
67:a5:67:d1:ee:cc:e7:82:f2:b0:be:41:80:f1:ed:
d7:29:9f:7f:b9:01:a9:76:17:67:5c:63:d3:8b:99:
82:b8:c8:9b:ab:89:62:fa:a2:f7:ba:70:75:4a:59:
28:8f:de:81:13:81:25:4f:41:38:80:74:55:b9:e8:
66:c3:9e:45:f7:81:e0:a1:8a:b1:ad:14:cf:f4:d8:
7b:d4:2e:43:9e:0e:f1:23:1e:90:e7:e2:bc:7a:28:
8c:ae:66:02:4c:b6:02:ea:21:de:b9:ae:cd:bd:17:
a4:8e:b5:cb:9a:3a:f7:c5:5a:64:c9:d2:97:ac:f2:
62:5b:e3:c4:d7:6d:40:81:7c:95:e5:db:2f:69:d0:
4c:17:ef:a5:77:53:db:f9:92:85:a0:f6:4f:25:56:
cc:6e:fd:21:3e:ab:1b:18:72:03:a5:8d:06:20:7e:
81:34:23:ef:18:aa:4c:0b:55:5c:40:ae:b6:6e:3c:
97:df:a9:49:60:a3:76:46:ce:dd:a5:47:9c:8b:2f:
d8:d5:1c:17:b2:c9:05:89:49:74:13:43:25:1f:66:
45:1b:25:b5:4c:54:e0:4e:ad:f5:f4:12:24:41:ce:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:67:55:4E:19:77:D9:FE:FF:63:6D:4B:F0:CF:D7:16:4D:91:1E:7D
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:74:a0:88:1d:0d:da:d9:98:4b:65:98:4a:a7:ef:01:0c:8a:
a7:0b:70:ca:48:b1:a5:d4:f1:a7:df:bf:16:57:09:93:2f:a9:
5e:1b:75:ba:14:86:1b:d1:fd:46:a7:38:98:f3:4b:91:7f:6b:
04:a1:ac:f3:3a:ab:22:3e:54:28:74:5e:9f:0a:05:4a:08:86:
70:4d:9b:55:12:bd:2a:a3:1c:fa:40:6c:7d:06:9b:90:0b:5f:
6e:13:23:b1:f3:5a:46:e0:54:77:cf:d3:7a:d9:42:4f:2e:39:
6b:fe:09:83:71:d1:0e:ab:fe:f7:b2:f8:63:8b:7b:af:70:a3:
61:5c:89:81:a9:68:6c:3c:85:e5:6c:3e:6b:74:12:c1:f5:45:
38:79:bd:88:bc:34:d1:92:9d:00:28:1f:a9:19:b1:a1:24:83:
09:78:4f:5d:7f:37:c1:7e:90:93:f6:27:87:57:cc:8e:29:b4:
65:ab:02:d3:b9:6a:ca:f9:fb:0f:d9:65:5a:61:b6:33:94:a8:
0e:13:96:1e:c0:39:55:76:d5:f1:bd:b8:38:aa:07:19:0b:8f:
fd:eb:4f:8f:7b:a2:58:f4:54:92:6a:04:86:f5:a3:49:47:bc:
1b:2d:a3:42:08:1c:38:e0:b9:30:9b:98:a6:1c:4f:89:5c:93:
1e:44:51:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:57 2025 by rpki-client