Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: f409Jfmj+FpuOIB3tRWT7eyTF5qFuP5amz64n3VipRo=
Subject key identifier: 50:00:D3:F3:C3:2A:39:D6:D2:B5:47:B1:BB:7C:C3:D8:36:5E:A1:AD
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 0197B6A118F6D954678D1E91746890F92C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 0FF6
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: F6TRgo1Qxqb0z2HOICITaJq6vVA.roa (hash: HB4jpWzWtSDjiUJivZqFCyvc7yAlpLdjecgjjSvTmVc=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: 7jJVHYKKtCvc3xhw/LNBj8h1SB24tGEHTnr2kUcHjK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:18:f6:d9:54:67:8d:1e:91:74:68:90:f9:2c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=5000d3f3c32a39d6d2b547b1bb7cc3d8365ea1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:97:b5:2a:c3:5e:9a:72:f1:be:a3:34:96:
2d:04:36:9e:52:bb:69:d1:0f:55:46:7e:ec:41:05:
0b:1b:b7:cf:0a:2f:60:e0:b7:1f:85:d5:57:c1:50:
ab:0b:da:de:fc:6d:02:81:d6:b7:76:72:94:0d:66:
d7:c8:69:f6:9c:55:45:a1:56:1a:1e:8a:09:d9:33:
7e:93:d2:a1:d6:ab:cd:94:ba:2d:fd:0f:7a:a8:14:
8a:72:c7:f6:ac:9d:91:27:0c:47:69:5b:c8:b2:77:
a7:aa:1c:72:b0:d6:47:17:9d:a6:19:96:1e:ab:8c:
3a:cd:df:a9:af:bf:67:34:c1:50:03:dc:53:87:df:
1d:11:81:a8:86:24:6a:ac:6c:62:1d:93:c0:aa:ac:
36:61:e2:2e:ce:38:80:bf:56:dc:50:19:32:86:d4:
e1:f3:ff:63:73:07:70:87:40:bc:93:b3:80:10:d5:
06:49:68:27:1f:69:38:a0:af:af:5c:68:a9:8f:3f:
de:b4:e0:27:18:00:e3:67:ef:d2:93:bd:39:06:1a:
05:c6:69:05:b4:b0:be:5c:26:9b:72:a9:28:9e:1e:
86:1e:75:44:10:22:c1:eb:20:29:02:73:b5:64:92:
87:21:9f:5b:5b:ea:93:ff:a9:b1:6c:79:51:ad:af:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:D3:F3:C3:2A:39:D6:D2:B5:47:B1:BB:7C:C3:D8:36:5E:A1:AD
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4f:5b:33:30:d6:9e:b3:dd:24:31:76:2d:c0:31:fa:51:88:
6b:0b:25:71:50:8e:c1:49:8b:e7:dd:6e:a3:02:f8:d4:ff:90:
f7:cc:2a:ef:da:cc:7d:97:56:8b:1a:c3:de:89:3a:20:32:e8:
ea:f9:a8:d7:c8:2f:db:e0:87:52:80:c6:23:0c:19:37:bd:14:
a7:2f:9f:8a:35:74:3b:a4:ad:be:91:53:87:f3:21:ef:54:c4:
02:50:f8:5a:c0:82:36:cf:0e:81:51:ea:2b:75:b1:e4:6e:3c:
63:4e:49:74:08:37:85:95:16:37:9a:6c:c5:07:18:af:29:8a:
04:42:e7:82:38:20:0d:27:28:c5:21:07:38:89:ff:4d:60:ae:
85:3e:4f:33:ef:04:81:dd:07:da:2d:81:95:44:cc:46:ed:4a:
23:cf:5e:01:3a:26:1e:17:85:86:c0:fe:00:d3:7d:12:43:04:
95:7c:1b:ee:fc:94:3c:43:bd:f7:37:c4:8a:24:8e:c2:52:94:
8b:95:2a:22:f9:52:10:77:50:59:c2:6f:5c:06:0c:9d:6f:b6:
e9:eb:7c:89:65:d8:4d:95:8e:98:fb:3f:d3:65:ae:44:4d:21:
77:5d:13:0a:6b:11:b5:40:3f:dc:05:8f:29:00:3f:60:ff:12:
31:d6:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:21 2025 by rpki-client