Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: 1lAuGLfRpxVY0eewA1Fe3+n0R7YLNq4VCXheTQLLdnU=
Subject key identifier: 4E:55:30:FE:CD:50:B6:9A:6A:F4:52:7B:8F:F2:75:C1:62:1F:5D:69
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 0197B88FFD5437510EAD3DDFA76222E0E3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:02:13 +0000
Manifest this update: Sat 28 Jun 2025 22:02:13 +0000
Manifest next update: Sun 29 Jun 2025 22:02:13 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: OxBS2TmYBlihtp+XZ6EuhbckCzhGJ9Zg/N5jyfEzLlI=)
2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:fd:54:37:51:0e:ad:3d:df:a7:62:22:e0:e3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Jun 28 22:02:13 2025 GMT
Not After : Jun 29 22:02:13 2025 GMT
Subject: CN=4e5530fecd50b69a6af4527b8ff275c1621f5d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:ae:87:ac:d4:ad:d2:fd:69:15:58:40:39:
c6:94:72:16:9c:52:db:49:8d:55:5b:83:4e:50:13:
cc:41:8d:2e:7a:bf:7e:33:a6:05:f6:89:20:b6:7f:
b3:47:72:8c:10:1c:14:a0:e8:0c:95:f0:ec:1a:38:
23:4f:3b:53:36:38:4d:c0:c0:bc:95:4f:2a:e1:43:
5e:3a:39:8d:9e:64:74:9e:af:1a:c9:3f:bf:22:89:
6b:ba:38:c1:8c:f4:ff:73:0a:5e:23:47:52:12:b2:
20:6e:1e:d0:ce:52:d6:c5:bd:87:ef:2f:9c:8b:28:
64:73:71:39:e4:bf:44:12:2c:21:22:39:46:44:8b:
8f:4f:a2:d5:fe:84:26:e9:a3:5a:02:60:09:82:c0:
f0:d6:54:4a:7d:68:1a:65:e2:90:5c:eb:a7:61:32:
c3:9e:60:3b:99:5d:5c:d7:5f:19:8a:e4:8f:83:7b:
10:02:bb:9c:ce:35:66:4a:b6:b1:1c:54:66:af:af:
aa:5c:4a:b1:17:ff:31:fd:9d:75:c3:c2:d3:49:f2:
89:69:1b:ce:09:ba:91:ea:6e:5d:0e:a4:90:68:68:
32:65:9b:ad:4a:74:89:da:92:31:0e:34:d3:0d:95:
7a:df:ab:3f:48:cc:4c:c3:4d:e0:9a:50:49:d0:d4:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:55:30:FE:CD:50:B6:9A:6A:F4:52:7B:8F:F2:75:C1:62:1F:5D:69
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:02:d1:fc:52:e0:3f:81:24:bf:77:97:c2:3b:00:7a:a6:8b:
43:f7:13:e0:a7:e8:a5:f3:d1:63:6d:7e:49:26:a4:da:6d:aa:
d3:15:e8:74:0c:1f:c5:f9:e0:32:57:bd:1a:17:26:68:b1:29:
54:bd:f8:97:1c:f7:b9:6a:38:3f:fc:73:7e:ab:51:c8:18:6b:
9d:9a:1e:f7:7a:ee:29:a0:8e:e9:e5:d3:a1:73:98:49:aa:d7:
d0:cd:79:4a:3e:48:11:e1:69:c4:31:73:84:36:e7:da:5a:1e:
53:3d:19:9c:e6:08:ec:8e:13:57:05:e3:f4:80:f2:da:79:25:
25:2b:ce:68:90:31:e4:3a:5b:10:77:50:cb:a8:81:e1:83:0a:
e0:f9:c5:d8:2b:23:74:65:c6:50:5d:56:e3:b3:55:e0:68:d9:
45:65:be:59:46:8a:77:d3:08:af:0d:7c:41:31:54:47:fd:bf:
38:22:d5:2c:2a:15:24:29:19:fe:8e:cf:40:f2:ec:4e:72:c7:
0e:cd:47:93:87:b9:b8:17:56:f1:31:28:bd:a1:05:18:8e:9c:
43:14:f6:23:aa:52:3f:60:57:84:b5:96:47:51:07:5f:e3:75:
f7:b6:65:6f:36:a0:4a:af:79:7b:de:8b:10:ba:15:92:4a:da:
91:9d:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:36:01 2025 by rpki-client