Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
File: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json)
Hash identifier: J3qgMe+DS+2bcYR93U+oe03i6SJjih0FBRK1aXB8zGI=
Subject key identifier: 5F:B8:62:8F:88:A2:1F:22:B2:DE:2C:42:37:3C:4B:8E:4C:4C:56:D7
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 0197B6D73EB60C2B2F792FF125715BD40EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
Manifest number: 0580
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: j1qCGkznHF4F111AVHJ4P51DCwyoNb4iBH3H8Y7qKbw=)
2: gf0Xy6qbBLzQzsLjIlFfh_7JZjk.roa (hash: Ah/uhPrNkgzcI+es99gluPPaRScN93x4JTQmt+pb9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3e:b6:0c:2b:2f:79:2f:f1:25:71:5b:d4:0e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=5fb8628f88a21f22b2de2c42373c4b8e4c4c56d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:ce:b9:9a:3d:32:ba:24:96:94:94:6c:6b:
7e:3f:c2:d7:06:14:d1:7f:04:d9:50:7c:66:60:0b:
2f:15:93:7d:ca:a9:27:bf:29:28:18:b4:7e:56:04:
e0:6f:23:40:b4:f7:b6:4a:5d:94:a4:67:48:38:fe:
ec:d9:cb:57:12:7f:ba:23:9d:85:d2:55:7c:bb:15:
59:f6:fb:ff:81:82:fa:5b:c3:86:43:ec:fb:03:db:
45:bf:33:8c:c7:02:e4:29:ce:c1:d9:78:ab:54:c5:
91:c2:72:70:f1:e2:20:e5:c0:3a:24:55:0d:bd:32:
4c:49:e1:04:83:ad:cd:73:bc:6c:75:a9:d7:d9:28:
ef:8c:56:cd:6d:72:5e:94:e9:12:8f:27:14:2c:27:
a8:b3:7c:7d:7d:ba:7a:f3:3c:9c:1e:d6:61:24:f4:
cc:67:95:b4:aa:c5:8e:28:18:ae:e1:47:b7:b1:5b:
3f:c9:fb:6f:8e:0f:fb:45:19:ca:c8:c0:4e:3d:fd:
9d:6b:88:a7:ce:6e:7c:65:63:93:8b:d1:5f:22:e2:
98:80:af:15:8c:5d:35:1d:d8:96:1b:e3:a2:0a:4c:
c4:ee:77:85:4a:da:5b:97:e6:f1:f2:ef:42:29:90:
a5:25:c8:47:50:8f:0b:a0:fc:38:61:1b:d3:d1:7b:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:62:8F:88:A2:1F:22:B2:DE:2C:42:37:3C:4B:8E:4C:4C:56:D7
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:85:25:7c:e0:9a:b1:f4:85:87:09:dc:b6:8c:33:10:22:03:
f2:9c:60:16:5c:eb:fa:6a:42:6a:51:9e:72:f6:e0:88:6e:5b:
2d:c5:8f:58:c4:6e:fa:91:f9:33:5f:bd:4b:42:26:5e:7c:a6:
ab:16:f8:5a:07:6e:3c:94:7d:70:80:bc:31:e3:a5:b4:9b:d4:
79:df:8b:69:48:1b:7d:db:c8:c7:5a:76:99:11:b2:32:76:6a:
8d:2b:09:1d:2e:e0:6f:e4:5b:c2:f3:f5:c0:6b:f3:90:8d:6e:
20:9a:06:4b:33:0e:06:69:3a:f6:a9:5b:88:d5:90:a9:2c:3a:
89:24:64:09:ea:47:28:60:52:70:81:46:42:09:e2:dc:f6:98:
5c:b4:13:75:57:02:b8:a9:62:ce:38:6b:e0:aa:b4:c4:87:76:
dd:85:79:60:a1:11:c1:57:74:0e:29:06:fe:b0:6f:49:8f:67:
de:3f:92:65:36:71:1e:52:2e:2e:39:4d:f9:a4:7c:d1:d8:43:
aa:ec:96:d6:fa:65:de:c0:2b:51:b5:fa:d3:72:5d:d8:b2:be:
9a:b9:18:b3:e4:06:0a:b9:0a:f1:6e:68:7d:67:91:5f:cf:b8:
2d:2b:6c:af:23:4b:85:61:c5:e5:e9:02:92:9d:24:0b:6d:fd:
5d:c2:1b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:08 2025 by rpki-client