Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
File: cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json)
Hash identifier: sdYLsRmz2YlmYbuFEQ5jQ7Wz4xzP5iWA+9m1sRUkLbM=
Subject key identifier: 3A:F1:86:0F:79:49:51:7E:FF:C2:18:C2:5A:88:D7:1F:EC:ED:69:90
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Certificate issuer: /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial: 0197B77C3B91225B78FE7E25D487AEA29F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: ZMvF8N06VsuZ5tNxMMczzsSTe5w.roa (hash: D7vN+YdR9s6oznh1bq9p5ngAxVIRYXDWMiWld/VomNA=)
2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: /ipywItbuO17/Jia6FCIVAQ3dvABfsbbW3BAxKccIsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3b:91:22:5b:78:fe:7e:25:d4:87:ae:a2:9f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=3af1860f7949517effc218c25a88d71feced6990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:75:ed:b8:dd:d3:64:f3:1c:a0:f0:48:d5:
ba:cd:b5:18:71:a4:9b:8e:2e:df:2c:c5:a4:e4:cc:
8d:f9:04:d6:07:94:9b:58:82:fc:32:e9:70:a2:1b:
ff:f5:c0:b2:00:d2:23:95:a0:89:41:8e:4d:0d:bc:
4c:0e:2f:8f:3e:80:e0:f4:7c:fb:6e:fc:d8:82:42:
08:db:6c:12:a2:13:4a:a6:e0:9d:ca:0f:e5:ef:c4:
d3:61:bd:52:f6:aa:88:6c:3d:8e:cb:bf:a2:e0:40:
a2:a2:54:dd:5b:31:09:f8:53:c3:5e:3f:99:40:f3:
d7:8c:c1:0d:cb:00:e6:ff:b2:9b:aa:c9:b5:c1:ca:
ac:82:b1:47:d5:e5:64:ad:92:a5:32:a8:16:6f:19:
b1:29:2a:86:91:d1:ab:d7:9d:44:71:fa:23:5d:49:
8b:1c:c3:2f:99:00:40:17:a2:0f:6d:cf:f1:52:87:
a2:bc:be:f0:73:89:e8:15:07:64:d6:f0:20:f2:a3:
57:a9:15:61:5f:a0:45:83:6a:d8:68:30:47:8e:5b:
b0:69:57:e2:7a:12:ef:3c:44:70:6a:06:9c:cd:a4:
82:b0:04:87:58:51:53:c6:27:e1:cb:67:1d:8b:80:
55:58:55:12:19:31:6f:c2:aa:bb:93:7f:57:19:64:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F1:86:0F:79:49:51:7E:FF:C2:18:C2:5A:88:D7:1F:EC:ED:69:90
X509v3 Authority Key Identifier:
keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:33:26:d9:e5:b6:52:c8:4d:3a:10:65:a5:ac:d9:39:61:fa:
4d:9c:db:96:b6:e8:4a:1f:f5:6c:2b:cf:b2:0d:60:66:95:42:
b0:fc:6f:ec:85:bd:1b:22:50:fa:04:11:ab:5b:84:56:fa:aa:
a3:6f:ff:85:1b:ee:42:06:e3:36:3f:a0:d6:90:11:5a:91:73:
83:da:ee:c2:41:50:30:11:e7:d9:86:29:16:49:d1:94:07:e2:
f9:19:e6:ac:ed:7f:95:5c:65:3a:7c:90:1c:d6:35:d7:70:7d:
a3:c7:53:2d:82:6c:6c:b8:92:a8:a5:d9:77:ba:79:a2:0a:58:
6c:94:9b:0c:82:f6:de:af:8c:36:8e:cf:73:f8:ba:87:c9:84:
22:6e:58:d1:8d:07:4d:9d:9d:e1:24:4c:14:fe:41:cd:66:ce:
22:99:76:03:42:ff:4f:ab:47:cd:12:50:9e:ff:53:4d:4e:b4:
dd:4b:b0:ba:15:de:3e:98:3a:38:9b:68:12:cc:72:c9:2a:f8:
1b:09:29:f3:61:d4:c0:01:17:e4:5d:61:1d:ca:19:8a:31:ee:
c9:4e:e3:b3:27:6a:ec:15:09:fb:b9:c8:b3:7f:fe:83:f4:81:
fb:57:a9:9c:0f:7e:1e:c4:e8:7d:06:53:13:7b:05:19:a3:85:
63:9b:ce:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:06 2025 by rpki-client