Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: wEJl6to4bbxzilA0LiSZg8iwFImcMo8HAB3MM4Us6mE=
Subject key identifier: 95:1D:49:DE:D8:A3:EE:E7:BA:B5:13:43:9F:35:39:35:F2:97:26:B3
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 0197B6A1ACBDCF04737CB925D638761C8206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 0DB6
Signing time: Sat 28 Jun 2025 13:02:18 +0000
Manifest this update: Sat 28 Jun 2025 13:02:18 +0000
Manifest next update: Sun 29 Jun 2025 13:02:18 +0000
Files and hashes: 1: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (hash: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=)
2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: WqCuYyTAFeV6c0ot1G2zCLCCRmXdAAz8DqXrqNGfK20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ac:bd:cf:04:73:7c:b9:25:d6:38:76:1c:82:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Jun 28 13:02:18 2025 GMT
Not After : Jun 29 13:02:18 2025 GMT
Subject: CN=951d49ded8a3eee7bab513439f353935f29726b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:96:1e:72:e2:ae:f2:26:f2:f9:ce:31:49:
2d:84:6f:a9:52:7c:1e:72:19:e0:62:29:ed:d3:78:
60:9e:2d:80:c5:2e:32:f1:4c:d7:ae:f4:95:76:2d:
b0:49:f3:a4:bc:e4:3e:98:fc:f5:ff:77:cc:b4:e7:
c8:45:fb:11:b9:e3:32:27:7b:52:8e:c1:74:7d:f6:
3a:51:ee:24:07:de:d9:32:f3:a4:90:a8:e4:e8:d4:
a6:94:d3:66:6b:bc:2d:dc:c3:2e:ed:b4:84:13:f5:
3a:5d:89:f4:50:b3:91:fe:0d:ad:2f:e9:ee:4d:c4:
61:4a:ea:e9:b1:c5:f4:7d:6d:2d:4c:1b:42:ca:ce:
1c:d0:f6:2a:22:b0:f5:ac:24:eb:41:ab:3d:b7:a7:
4b:98:e3:4d:40:57:6a:35:9e:e7:99:e3:f7:ac:27:
c0:45:58:42:91:c9:68:cc:1a:1b:19:5c:6c:15:16:
b4:65:18:43:26:6c:6b:a3:27:6b:0e:73:7b:ec:e7:
27:0c:68:cf:50:12:c1:06:9b:3b:66:a4:69:49:03:
f9:59:01:bb:9f:13:49:36:91:dd:cb:41:3f:bb:f7:
97:36:2c:f7:58:f9:94:17:b3:47:25:48:97:fe:d7:
3a:02:2e:7e:aa:c5:bb:0d:6e:a0:24:57:74:ca:06:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:49:DE:D8:A3:EE:E7:BA:B5:13:43:9F:35:39:35:F2:97:26:B3
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:01:a9:ab:f7:f0:e1:97:ff:c6:c2:46:23:43:03:20:b4:99:
f8:a9:41:23:92:46:6b:b9:e2:f1:a4:ad:a7:8b:9f:a1:77:06:
9f:18:0d:83:07:f2:4f:dd:33:ef:5c:e1:d8:93:8b:09:28:c8:
5a:9a:fe:4d:7d:05:27:fe:c1:05:b2:c0:18:50:79:29:2f:3b:
0d:e9:7e:16:6b:ad:e5:dd:5a:5f:59:4a:02:5c:5a:65:5e:dd:
cb:8c:f4:bd:98:0f:d8:23:d6:78:10:4e:8c:ab:da:1e:85:42:
ba:65:35:44:40:00:f4:32:f0:20:2d:ca:06:8b:e5:b4:aa:f4:
64:33:30:6b:c1:19:80:58:96:0d:d9:6f:d0:7e:d1:b0:da:a7:
b8:c5:1e:47:b8:cc:ee:45:8b:17:50:9a:22:c1:93:07:1f:55:
8a:29:a1:83:58:9a:8c:34:d8:b1:34:c5:f8:19:75:05:41:be:
fe:95:2a:7e:29:d4:7c:83:70:d2:54:72:96:28:9f:09:b7:62:
49:81:43:a2:c5:c3:52:50:4f:a4:23:5d:70:d6:41:f4:bf:3f:
b9:70:86:ca:ef:39:45:f3:e8:c7:c7:1c:82:36:ab:59:2b:83:
0c:2f:ee:0b:11:8b:06:1d:fc:d0:87:a8:28:7c:2c:e9:37:e7:
c4:61:a4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:31 2025 by rpki-client