Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: wQgyyqTtRdM+6fOzoqMvu6rH9FfiSlapGM3A3KphqX0=
Subject key identifier: DE:4C:54:99:0B:BF:61:17:34:3F:00:CA:B8:F4:52:92:0A:99:22:52
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 0197C124B160334104A43D25D9450CFB00FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 1141
Signing time: Mon 30 Jun 2025 14:01:36 +0000
Manifest this update: Mon 30 Jun 2025 14:01:36 +0000
Manifest next update: Tue 01 Jul 2025 14:01:36 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: R/IteYhCFnpmfanxFhk/MtfI3P2cY9ABnSVs+B1czcU=)
2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=)
3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:b1:60:33:41:04:a4:3d:25:d9:45:0c:fb:00:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Jun 30 14:01:36 2025 GMT
Not After : Jul 1 14:01:36 2025 GMT
Subject: CN=de4c54990bbf6117343f00cab8f452920a992252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:75:eb:de:0d:58:e3:fb:35:3b:9a:21:b2:
f5:20:cd:03:32:97:7b:88:8c:d2:b5:e7:8c:ff:46:
3f:84:df:6d:66:7d:03:e7:d2:62:e1:57:a4:7a:e3:
fc:ec:95:89:9e:91:ce:79:1a:26:33:00:13:a5:db:
9f:43:8f:be:71:dc:b3:ff:f9:b1:bb:99:e4:7d:d3:
59:84:10:10:5b:e3:49:72:d5:e2:93:a6:fc:21:d3:
34:f7:27:84:12:2c:5b:a5:7f:86:cb:68:43:6d:3b:
2d:3a:4a:a1:5b:93:ca:23:15:8b:04:58:43:5d:9c:
03:62:41:1f:a1:b4:d3:77:8e:c1:13:3d:cf:a8:01:
7b:bf:19:5d:37:ad:95:48:01:61:06:b9:c2:f9:b4:
6f:1d:64:b4:bc:13:9d:3a:45:85:7c:08:f3:34:88:
c3:b0:a4:e0:87:8f:bc:11:01:1b:d7:6d:72:2f:a0:
65:e8:54:80:c3:1e:b7:de:27:5b:64:3c:73:05:90:
fb:ee:ca:05:95:d8:19:c9:a9:b1:87:b1:e9:88:0c:
6e:7d:2b:99:b9:ce:e4:e9:0b:bb:6f:8e:07:58:9d:
7a:42:50:63:bb:ea:72:c1:88:c8:9f:8a:e1:01:7e:
50:dd:67:bf:10:49:33:e9:ee:9f:0e:7e:1b:b7:a0:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4C:54:99:0B:BF:61:17:34:3F:00:CA:B8:F4:52:92:0A:99:22:52
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:bf:db:89:2b:c9:62:51:0c:0e:2c:80:a8:a8:e8:96:e9:d4:
aa:c3:48:0b:0c:56:b1:a1:34:42:8e:31:34:90:b4:a0:78:fd:
43:72:1d:e3:a7:ae:c7:c1:a5:1f:2b:85:24:6d:83:70:dc:11:
70:42:a7:39:86:ac:80:b5:e6:03:3c:7d:e1:7f:ad:b7:af:b1:
50:c6:14:66:eb:b1:42:9f:2b:a6:1e:34:86:bd:10:0e:3f:1d:
c4:b2:71:10:ba:55:49:97:83:58:c5:ef:32:2e:e7:d7:46:22:
e1:2a:a5:a7:92:e6:02:7f:fb:5b:ed:09:da:be:3b:83:37:30:
27:c8:af:4b:82:c2:42:8e:a5:37:1b:3e:72:95:a3:6c:49:b1:
97:9f:0e:f5:4c:3b:0c:4d:74:bc:a1:62:7b:5c:17:0b:21:63:
05:2b:41:b6:ec:55:e4:85:9f:cb:9d:be:47:22:95:a8:d4:56:
7d:c7:0b:0e:b5:f4:55:3b:0a:09:f6:7e:eb:0d:1b:f4:52:3b:
7f:a4:d9:43:20:01:1d:c9:5e:47:8b:89:db:85:88:3b:78:fc:
6d:4e:60:1e:ed:28:c3:3c:41:7f:57:6c:7d:d0:00:a4:59:8e:
94:f3:78:59:0e:53:a6:be:f7:c3:c6:f0:d5:3a:14:c1:7f:d2:
51:ee:ab:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:12:24 2025 by rpki-client