Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: IE2RLaW307Kz35zJemrauEhmwrtxrPTE2Zzp8hg/xao=
Subject key identifier: 44:88:79:7D:8D:30:A8:16:1F:5C:50:BC:43:71:F8:8E:E9:C1:0B:AE
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 0197B70E61558214B5247E3AB0FD5EC5395B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 10DD
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: W/Yt8+lX+3MH6W7aB5303kvm3yq0gTQaKxfdZ7XvvFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:61:55:82:14:b5:24:7e:3a:b0:fd:5e:c5:39:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=4488797d8d30a8161f5c50bc4371f88ee9c10bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:96:5a:fc:36:9d:02:5d:51:23:b7:4d:2e:
5b:dc:2d:f6:ea:c0:23:15:bb:f8:04:9d:2b:b9:e8:
f5:51:de:74:dd:f4:ca:82:b2:7b:f3:c7:9f:e5:68:
4f:f1:e0:59:51:44:95:b3:21:08:33:f1:56:70:9c:
49:d3:0a:4d:1b:fa:d8:ab:c4:af:5e:73:04:14:50:
19:4e:1a:29:95:3f:38:50:7a:58:04:cf:52:64:53:
d3:94:b2:28:e6:9c:5f:38:e3:e9:13:89:73:d1:5e:
45:c0:64:1d:6a:4d:fb:d7:30:cf:ce:68:16:05:21:
6e:8b:7c:60:ce:d9:06:0f:d3:7e:f3:e7:88:ad:b7:
97:93:d6:c1:1c:c1:72:f3:0e:3a:ed:6c:ea:d0:ef:
5a:76:bc:86:1a:37:5d:f0:7d:83:6d:79:aa:cd:b8:
c6:60:5d:ed:11:4f:7c:47:20:c5:c2:bf:2b:79:b1:
06:2c:f6:63:7b:66:87:ec:56:02:c7:57:78:ab:d1:
da:e3:83:bd:12:81:1e:e8:5b:f3:93:4f:a6:21:99:
94:fb:aa:f9:90:1e:80:39:0d:67:d6:15:9a:1b:31:
5d:eb:6e:ea:d4:e0:b8:03:5d:d4:50:4d:5f:d9:93:
ce:33:1b:19:30:96:a3:8a:1b:8a:70:6c:ce:c1:60:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:79:7D:8D:30:A8:16:1F:5C:50:BC:43:71:F8:8E:E9:C1:0B:AE
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:95:23:64:2f:de:f5:7f:46:cb:36:ef:91:02:d6:f3:6e:59:
84:9c:a7:90:8b:8b:71:7f:bd:88:a9:5d:66:e2:28:85:c2:24:
4a:19:07:18:57:c2:4f:e5:1f:03:5a:27:aa:28:29:26:42:36:
66:5e:ff:1e:ea:25:5b:70:2c:a4:dd:8e:6e:59:b2:cc:5c:96:
49:b9:98:1f:78:29:c7:10:b7:c9:d7:95:da:3d:1a:92:3a:d8:
37:d0:4a:e3:6e:4d:ff:1a:18:bf:2b:dd:aa:95:6f:63:75:1c:
55:61:55:83:52:7b:0b:d9:8f:8f:08:13:50:6b:d2:f1:75:bb:
fa:d7:d5:31:27:6e:48:bf:1a:60:90:4b:ef:6b:39:eb:eb:e9:
4e:9a:0f:ef:f8:cc:e7:0c:78:41:2e:17:f9:37:65:d5:7c:ae:
4e:6b:a2:56:74:19:3b:a2:bf:0c:1c:84:88:6e:5d:70:29:04:
5d:c2:4b:d1:93:90:a1:95:22:f1:95:63:6e:7d:90:30:64:87:
9f:ad:13:e8:48:cd:99:e0:8c:0b:29:04:a6:df:79:d3:54:bd:
07:d2:80:b2:86:c7:d9:2c:f8:2f:60:b4:d8:4c:7b:10:24:fa:
2d:68:73:ec:e3:91:35:1e:7b:63:9b:6b:bf:8c:b5:f6:02:2f:
3b:d6:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:28 2025 by rpki-client