Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: 3BUBsgEgYbGWlicvaENvSHqEJE+0hV9H9c3sw9EW1PA=
Subject key identifier: 68:49:CC:F1:63:3F:9D:DF:5C:97:2F:60:82:E1:92:B4:38:2B:24:2A
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 0197B821305EECA1261B75D32D209018403A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 03D9
Signing time: Sat 28 Jun 2025 20:01:11 +0000
Manifest this update: Sat 28 Jun 2025 20:01:11 +0000
Manifest next update: Sun 29 Jun 2025 20:01:11 +0000
Files and hashes: 1: 1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa (hash: biNGhGH5AKAvuvZqlWI6oNS4u1EhxLRFN8pAccYPS0U=)
2: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: nak3s6R+pwzeIEO/n1RA4MPpqQtD+n1cBhN/bepDnZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:30:5e:ec:a1:26:1b:75:d3:2d:20:90:18:40:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Jun 28 20:01:11 2025 GMT
Not After : Jun 29 20:01:11 2025 GMT
Subject: CN=6849ccf1633f9ddf5c972f6082e192b4382b242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:fe:02:ab:fe:14:cd:2c:8d:94:7b:1a:3a:
1d:17:28:bb:f7:4e:ec:53:17:72:6f:38:79:cc:9a:
bc:33:eb:80:77:16:62:18:fd:f1:0b:e9:52:60:af:
71:ee:87:11:70:a6:7e:c6:f5:75:a1:15:53:dd:5b:
8b:18:1c:66:07:c0:55:f7:db:23:ff:83:1b:4c:94:
5a:46:5e:e8:8b:6b:83:dd:f7:a8:3b:fc:fd:bb:da:
c0:86:66:61:9a:08:d1:d1:35:5e:89:61:60:26:92:
8a:96:0f:51:a1:95:40:ee:7c:24:cd:2f:91:09:e6:
0f:26:c5:fe:02:93:07:e4:ee:88:09:e4:6b:a1:92:
c7:6d:5d:79:2d:46:0e:cc:2d:3e:d2:46:56:06:c7:
fe:19:d5:a4:86:8e:2f:89:c3:9f:24:4c:23:45:7c:
e5:4b:d0:63:76:db:0d:4e:e1:2a:85:a0:6f:18:27:
b9:6a:01:6d:06:1f:20:21:8b:db:c4:c3:8b:6b:3f:
7c:97:c2:7b:f4:25:4f:79:22:88:f6:0e:4d:2e:d0:
73:91:40:c6:fc:26:58:71:d3:54:64:21:3f:ae:af:
6f:2c:d4:17:5b:28:4d:9d:14:c8:0a:7f:94:0b:5f:
ee:41:2a:43:56:1c:2a:ff:57:d3:79:4a:b7:a2:e9:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:49:CC:F1:63:3F:9D:DF:5C:97:2F:60:82:E1:92:B4:38:2B:24:2A
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e2:ed:6f:43:c3:a9:fb:a6:c1:89:0b:0c:b8:c8:ac:42:75:
06:9f:a6:5d:14:79:6b:d2:da:eb:9b:4b:6b:3d:7a:6e:27:56:
05:f4:c4:9b:da:d4:74:46:8a:68:20:70:65:c6:1a:41:3a:24:
b2:cd:00:54:55:f9:11:c7:15:b1:42:ef:ca:c8:3f:dd:bf:af:
aa:77:20:02:70:a9:2e:77:ad:7c:14:74:fd:4b:55:51:0b:67:
67:5c:86:6d:6d:5f:e8:8d:42:09:7c:3c:55:e3:1d:76:e3:2b:
f3:fb:61:03:0a:60:e1:98:bf:60:17:4f:6f:2b:9e:61:e4:52:
98:e5:db:e4:66:9a:dd:f2:aa:33:29:75:84:14:02:3b:1d:19:
45:d4:28:15:df:57:ae:8b:af:0a:6b:e0:3f:f7:f9:37:35:aa:
eb:54:eb:d6:1c:1d:81:63:48:58:6b:6f:97:b4:0d:59:b0:b5:
52:74:ea:4a:ca:10:e3:ce:89:c9:25:cc:f9:c1:15:7f:24:8c:
7a:27:be:49:5f:17:40:3a:f2:85:aa:cd:49:a6:de:57:0a:0c:
45:c3:db:5d:72:24:a4:36:3a:c5:99:5f:bb:0b:b9:76:b4:ca:
ac:7c:e9:cd:16:b2:c5:db:ec:75:e0:46:6d:dd:3b:23:12:02:
70:1c:a9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:29:48 2025 by rpki-client