Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier: MzTWxuXREsHoct5rhKI260VEBkyqmEAf1XDdC/XXXLY=
Subject key identifier: 1D:5E:C1:3E:51:8F:AA:AD:FE:96:83:8A:2F:8E:18:CC:96:53:0E:CD
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 0197C191CEF5086C154D3AFA71E665807DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number: 15B7
Signing time: Mon 30 Jun 2025 16:00:47 +0000
Manifest this update: Mon 30 Jun 2025 16:00:47 +0000
Manifest next update: Tue 01 Jul 2025 16:00:47 +0000
Files and hashes: 1: BAJtDqJxaWUqQAfiueye7uuRaiw.roa (hash: xliJwPehY40wkTea7xdHZ3Ii3nZae+NEE66sFETvyTA=)
2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: DoU06KJG6jJvC416Mx/dNlWmgLOb17TQAW4mGPFi1Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:91:ce:f5:08:6c:15:4d:3a:fa:71:e6:65:80:7d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: Jun 30 16:00:47 2025 GMT
Not After : Jul 1 16:00:47 2025 GMT
Subject: CN=1d5ec13e518faaadfe96838a2f8e18cc96530ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:3d:b1:6d:95:e9:55:91:42:2d:25:11:a2:
d5:57:03:76:41:b2:00:d8:e6:99:ce:65:2f:13:f1:
77:17:0f:2b:79:bf:05:4f:23:4f:55:32:75:29:6f:
12:b8:69:3e:a3:d1:70:f8:e9:0e:47:3e:21:6e:d0:
83:19:ec:09:4b:34:5e:e3:85:4c:9f:70:81:59:1f:
2c:ab:e8:46:8a:07:4f:71:e2:f7:b7:06:f8:7e:b0:
24:f4:cc:31:8a:26:ed:0c:44:46:0f:47:76:6a:31:
e5:14:62:26:53:1f:86:ae:74:d1:1d:10:fc:86:83:
c6:0a:f9:bb:d2:21:c8:5a:d5:1d:e1:bd:42:eb:18:
d5:7f:47:23:20:1e:10:68:65:bd:5e:81:a9:0e:4f:
52:05:72:37:43:0e:ff:62:fd:63:45:45:92:d5:31:
bf:e5:1a:d9:0a:87:f7:69:1f:7c:2d:98:72:59:44:
85:a5:77:2d:07:4f:6f:d8:75:dc:72:c8:66:da:fa:
92:3e:fb:77:6e:01:02:28:6a:9f:e9:1d:d2:4c:37:
30:92:83:d6:5b:5d:c6:f2:a6:e9:19:c7:e9:a5:93:
f1:5f:9c:f6:68:de:04:6c:f1:38:8e:ef:7c:69:33:
19:c7:61:9d:15:f8:d8:07:89:b1:a8:09:ea:f1:1c:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:C1:3E:51:8F:AA:AD:FE:96:83:8A:2F:8E:18:CC:96:53:0E:CD
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7d:0d:a6:a7:ca:67:4c:6c:9f:db:c4:2f:a4:6a:ee:80:10:
cd:29:5b:ff:7a:7f:da:29:f6:41:9e:5c:e7:df:6b:99:9e:40:
f3:19:ca:17:f1:1b:15:d1:bf:73:d4:ee:30:66:6e:71:31:76:
b0:70:84:87:e6:a4:84:d5:03:18:bc:d6:dd:3a:c1:07:11:6e:
e1:72:3f:b1:5c:6c:50:77:11:72:4d:b6:a5:f1:7f:83:f8:7b:
35:a5:8d:36:a4:c7:4e:51:7a:d8:88:9b:c3:f5:82:21:ad:0b:
4a:b6:8c:38:1c:6d:c3:70:05:1f:65:f8:a8:71:71:72:b4:26:
55:2c:17:19:1d:5a:d4:68:41:8d:00:a1:02:e3:77:71:95:57:
26:2b:61:2a:d3:a9:b8:4e:3e:60:2a:0d:9b:dc:8f:17:59:e9:
2c:cc:87:93:51:0e:e6:ba:a9:37:64:a9:d5:5d:38:67:bb:0e:
2a:4d:ae:9a:a8:43:ef:26:00:de:9e:05:f2:f5:e2:c6:58:46:
0c:27:0f:90:41:be:78:5f:e3:7a:68:d6:6f:77:58:fb:02:5e:
b8:27:85:60:0e:54:2e:13:71:b5:0d:cc:c9:9e:47:47:29:8c:
df:a2:cd:1d:38:80:ae:34:52:aa:c1:ea:c5:f1:e4:87:be:fa:
0b:43:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:27:34 2025 by rpki-client