Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: grW3YlPSTwwpPS2TsrOlw7r0wRFknnvum4ZYZkjmMaU=
Subject key identifier: 57:E5:24:A5:18:5D:95:CA:3A:19:C9:51:15:04:74:06:BD:F1:53:97
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 0197C9F0911ECA2831B0B28A7D14DA14B0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0902
Signing time: Wed 02 Jul 2025 07:01:15 +0000
Manifest this update: Wed 02 Jul 2025 07:01:15 +0000
Manifest next update: Thu 03 Jul 2025 07:01:15 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: 8gFxVB2WWHzOIPVEbdWgxDvVVzLcd2b2BD6hZ2M57N0=)
4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:91:1e:ca:28:31:b0:b2:8a:7d:14:da:14:b0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Jul 2 07:01:15 2025 GMT
Not After : Jul 3 07:01:15 2025 GMT
Subject: CN=57e524a5185d95ca3a19c95115047406bdf15397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:2b:69:22:8b:c8:70:ae:80:5d:0a:14:3e:
3f:e2:70:6b:0b:dc:d3:29:45:95:ee:01:8c:3f:c6:
a4:d0:3a:8a:ce:c6:90:5a:ac:f0:93:08:d9:68:d7:
ac:c8:6a:49:d7:59:7a:3c:5f:7b:45:3d:e0:2e:56:
90:ce:e8:39:7e:0a:70:76:e5:3b:9c:9a:22:31:11:
55:05:03:7e:6f:63:a2:d1:b7:bf:58:43:38:ee:48:
61:fa:94:0f:c4:85:5e:34:d5:c0:32:95:32:c4:7d:
7b:75:79:bb:be:c6:5e:01:b1:17:91:d2:e6:d2:21:
ad:8b:47:72:0b:9f:cc:0f:ad:c4:d4:e6:ac:b2:1a:
57:ae:41:33:3b:db:db:90:9a:df:19:24:af:02:9d:
66:b0:ea:9c:08:ef:53:ae:e7:20:33:ee:cc:bf:46:
0d:87:8b:7c:5e:25:47:e8:78:9a:9f:18:3c:fb:30:
96:71:9d:46:ea:3f:fa:b3:67:53:1c:77:35:5f:ca:
1f:ee:8e:8d:2e:aa:88:dd:07:d2:02:35:f1:ea:c9:
36:43:3b:21:d6:1c:e7:21:73:a7:f9:b6:33:f2:31:
93:fe:75:7e:15:59:5d:35:06:ee:af:dc:aa:05:ed:
a1:48:00:14:52:ea:c6:75:c3:7d:28:37:97:92:d6:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E5:24:A5:18:5D:95:CA:3A:19:C9:51:15:04:74:06:BD:F1:53:97
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:5c:f2:f4:c0:f8:55:b6:13:ca:97:37:d8:48:9f:fb:b7:
96:2c:4a:b2:ec:dc:20:05:7f:26:7b:f1:1e:15:cb:35:32:da:
43:ca:f5:b8:fd:67:4a:ab:e1:0f:a3:1a:9c:26:60:39:9e:42:
74:71:0c:ee:aa:61:df:74:7a:0e:ee:d4:0e:66:c6:1a:1b:d1:
35:5e:f7:f7:9f:04:a7:99:4c:ab:75:fc:45:b8:2f:8d:5d:94:
b1:03:a0:0b:ef:38:0b:27:2d:8c:1d:8c:f3:4c:1a:72:d1:29:
86:1d:de:e5:08:3e:ec:84:8d:ff:12:0c:a3:8b:dd:f5:97:80:
34:e2:71:9e:fe:4f:1e:59:95:bc:c6:e5:2e:50:b0:10:b4:4e:
bd:08:8e:d2:3a:20:0c:75:0e:af:24:2d:2b:df:b9:d0:0b:ab:
0e:68:6e:74:b8:1c:dc:0e:33:2f:1f:c0:eb:6b:d8:cd:47:5c:
36:69:90:bc:32:06:76:89:d1:4f:53:3e:52:1f:d0:c7:a2:f4:
9d:f5:60:b7:2b:ea:59:71:c6:a6:b5:f9:65:3f:25:65:7a:a6:
a1:4d:6c:9c:35:f6:ca:55:3f:d4:42:aa:cc:ef:ee:75:27:79:
f5:7c:2a:48:e3:47:58:8d:35:3e:88:be:4a:16:c1:4a:dc:18:
bf:18:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:37:36 2025 by rpki-client