Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: +0gTNUB1gn3fFwhwMrQgn8ZM75cu2diypP78a2vgx/Y=
Subject key identifier: CE:EC:D4:79:E1:24:C2:FF:3E:09:3D:A2:32:2C:CA:76:C2:F7:DE:7F
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 0197C75D6129E4F3C7077F8D4B1EDE3DFFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0ED2
Signing time: Tue 01 Jul 2025 19:01:15 +0000
Manifest this update: Tue 01 Jul 2025 19:01:15 +0000
Manifest next update: Wed 02 Jul 2025 19:01:15 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: U8xfr6smqKGnsJAKcE7euwfYQsGZkYIJrlkXBXdw2cg=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:61:29:e4:f3:c7:07:7f:8d:4b:1e:de:3d:ff:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Jul 1 19:01:15 2025 GMT
Not After : Jul 2 19:01:15 2025 GMT
Subject: CN=ceecd479e124c2ff3e093da2322cca76c2f7de7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:fe:e2:cb:13:53:16:17:c7:b0:31:76:7e:
5a:f3:2e:e7:85:87:57:8a:cc:a7:a5:f1:39:ca:55:
3d:34:d5:82:2a:9c:97:0e:a5:61:dd:88:9d:01:5a:
26:ef:40:3b:dd:00:f3:02:16:61:17:25:0d:8d:12:
1d:8f:2b:75:23:52:d8:ac:8d:48:b6:31:6a:6f:47:
09:c9:bc:44:8c:37:0d:76:c5:e2:89:75:c9:97:dc:
e4:4d:b5:9a:4e:19:55:f4:18:40:a5:e6:9f:07:fd:
07:a7:4c:79:a5:ac:3c:34:51:f7:54:db:53:10:e1:
ad:6e:48:79:cf:95:4d:3d:43:c7:ec:d6:f3:03:97:
14:4b:a2:51:3a:09:01:4e:10:f9:67:ba:6b:9d:f8:
9c:2a:80:86:73:ef:8a:aa:fc:fd:4e:ee:4c:cb:c4:
88:ba:99:e4:60:4f:9c:8d:73:2b:6c:01:76:cb:b6:
a0:8b:a7:21:48:c7:94:d1:28:3a:6d:57:41:47:66:
18:4a:d2:3d:db:7e:77:8b:03:e2:8a:b3:a2:a3:bc:
02:ba:d7:20:3b:f4:fb:80:54:93:a0:1d:8f:b9:4d:
6d:dd:cb:a5:3e:85:ae:7c:a8:16:4e:26:54:42:a8:
8c:22:c1:09:4f:d3:9e:b7:c5:a9:b5:09:c4:df:34:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:D4:79:E1:24:C2:FF:3E:09:3D:A2:32:2C:CA:76:C2:F7:DE:7F
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3b:71:f8:b9:60:c0:6b:3e:7d:a2:bb:a4:8a:f0:4e:2a:a2:
3a:1f:74:c3:e0:37:47:d1:dd:d5:06:b9:23:a3:df:21:08:b1:
47:2b:50:f1:0a:c6:38:10:fb:ee:ec:45:45:ca:1c:e3:58:63:
4e:38:b4:99:c4:f1:ab:53:11:e5:89:de:20:e9:4a:65:9b:e4:
c0:aa:9c:42:e4:52:c6:ff:88:26:3a:14:c3:a9:12:7a:7b:86:
d5:03:bf:4f:6f:53:7b:8d:35:35:54:e7:57:63:b9:a5:b8:4a:
4e:84:6f:ae:92:60:8c:35:b9:76:49:05:00:97:c1:39:81:bd:
fd:1c:92:b6:a4:ef:c7:8a:52:b5:0e:c3:e6:cd:1d:f1:7f:c2:
d5:0c:fb:7e:6d:7a:f0:c1:31:ca:14:2e:1c:de:ab:a7:cc:b4:
18:cc:5f:66:e6:f0:e6:b5:d6:02:06:d3:ec:77:c3:94:84:db:
dc:8c:94:60:ed:d2:f0:f5:77:5c:ff:47:a1:57:36:f9:67:df:
62:17:38:df:d0:34:43:78:fd:08:eb:6a:54:85:55:76:06:fe:
1e:e3:0e:ae:7c:27:c9:a1:83:ad:2d:5a:cd:ec:1f:f6:a5:f8:
f0:5a:6d:23:3e:8e:9b:df:30:e4:b6:c4:cb:af:82:1c:b1:b0:
46:f0:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:52:23 2025 by rpki-client