Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: Sde89+ZVayMY7/N6GjeW0MzuhvBYxgU2EUZdclGHd6M=
Subject key identifier: 4E:26:B8:3E:1B:94:FF:2A:06:77:A2:33:26:14:D6:39:7C:5B:89:37
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 0197BA7D123A5AE431ADC652C08ED5A33C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 07:00:48 +0000
Manifest this update: Sun 29 Jun 2025 07:00:48 +0000
Manifest next update: Mon 30 Jun 2025 07:00:48 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: Hb+SdEu0zVOawe9apYOD1f5tFItFiyKVmQ0HMk/KG3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:12:3a:5a:e4:31:ad:c6:52:c0:8e:d5:a3:3c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Jun 29 07:00:48 2025 GMT
Not After : Jun 30 07:00:48 2025 GMT
Subject: CN=4e26b83e1b94ff2a0677a2332614d6397c5b8937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:8b:22:15:b2:77:e8:36:f9:0e:09:39:c7:
33:97:ba:cd:1f:7c:aa:fb:a0:c8:a8:21:b1:05:32:
10:e7:cf:11:d8:ce:43:2b:dc:cf:20:c9:55:8a:74:
dd:e7:84:33:8f:cd:20:7b:53:c0:94:54:5e:20:ec:
b2:90:b8:6e:f4:f7:f9:10:a6:63:ba:6b:18:ce:1f:
2a:b9:04:82:aa:a3:b3:71:ed:70:fb:d1:2d:3d:48:
d4:59:3d:a1:1f:c6:53:9e:28:db:3e:64:74:c2:f9:
15:27:b4:32:31:a7:d8:05:f0:92:f8:52:b5:65:90:
ad:37:57:fa:78:c0:ea:52:71:90:c0:6f:e0:6b:9a:
65:7e:00:56:2e:09:36:83:4e:17:54:af:eb:28:16:
12:37:e4:67:b2:8e:e2:f2:55:9e:0c:12:4d:a2:c1:
d1:d0:b4:38:0b:03:16:93:52:03:c3:35:05:fb:0c:
6d:24:c7:ad:60:d0:41:be:ab:26:32:37:60:32:51:
ae:e1:54:a5:bd:c0:73:d4:ef:ee:be:1e:60:05:28:
d0:71:e1:fa:59:de:fb:04:90:28:64:60:ea:da:21:
3c:34:59:19:6a:94:51:e6:b5:df:e2:27:9e:cd:af:
61:38:21:c8:a9:4e:11:03:01:88:97:01:b6:c9:97:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:26:B8:3E:1B:94:FF:2A:06:77:A2:33:26:14:D6:39:7C:5B:89:37
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:4f:18:b8:49:94:f5:f9:c9:37:55:3d:89:63:5c:e1:28:
ba:55:f0:ca:59:83:40:cf:92:0e:e6:0f:25:fb:2a:b5:ea:b0:
83:a2:ca:c8:40:2a:04:f9:6e:cb:98:d5:d4:6b:1f:e6:df:66:
10:1c:3e:b8:da:03:4c:84:27:68:ef:71:3f:7a:7f:c9:71:21:
f2:94:bb:f3:e9:3f:b3:90:89:f2:ee:dc:45:52:b3:ed:84:c0:
4a:ca:8a:eb:81:35:01:bc:7b:4b:63:b9:2c:d8:b3:56:64:42:
97:89:6a:6a:a6:94:bb:b3:68:67:68:06:75:4b:55:a8:8f:a6:
be:49:09:53:85:2a:de:b9:a3:cc:e6:cc:10:5d:4b:f2:ea:12:
cd:c2:c9:5a:2b:bf:90:4a:64:34:b1:49:29:02:8a:50:67:4a:
54:06:b4:33:88:74:1c:56:86:63:29:70:38:6c:c7:5f:fc:cb:
30:cb:32:c4:0f:31:a2:be:7a:f2:d5:77:eb:15:8b:ad:6e:6d:
1e:af:9c:89:85:9b:c5:41:be:7d:2c:ea:96:94:da:dd:c5:1f:
1f:1c:c6:68:9d:b4:33:f3:9e:5d:df:88:d0:7c:48:16:40:63:
c5:52:85:cc:d5:d2:1c:e5:f7:c2:1b:b2:6e:30:71:2d:89:ca:
c5:c2:bf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:09 2025 by rpki-client