Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: rY7fpSVdY0Gl//EKmDOI+HSLxlAblNhh02YR7msynNI=
Subject key identifier: 3B:82:CB:F0:F0:27:BD:26:2A:1B:72:82:60:D9:83:8D:1F:45:DE:26
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 0197B8C5B5601A4327C1E9C675A385A25F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 23:00:54 +0000
Manifest this update: Sat 28 Jun 2025 23:00:54 +0000
Manifest next update: Sun 29 Jun 2025 23:00:54 +0000
Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: qMI9b8foz3e1944EHn57Req3p/bOnPxxDkcgrWoyqbE=)
2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:b5:60:1a:43:27:c1:e9:c6:75:a3:85:a2:5f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Jun 28 23:00:54 2025 GMT
Not After : Jun 29 23:00:54 2025 GMT
Subject: CN=3b82cbf0f027bd262a1b728260d9838d1f45de26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:56:b3:66:37:b9:a9:8a:23:f5:1d:fc:22:
54:5a:14:29:08:68:24:9b:91:b5:da:98:7c:e9:17:
a5:3e:ca:d8:df:6d:7e:ea:85:df:33:20:ad:fa:ca:
a5:04:fc:26:75:be:d3:85:75:9c:e1:7b:b1:30:b7:
83:13:f7:ef:d6:e9:52:db:d4:98:e2:1d:e9:3c:9f:
14:43:c0:0c:81:79:37:cd:de:f3:8d:c4:61:1e:f9:
ea:04:d0:77:f3:c3:bd:5c:e9:32:6f:69:2a:df:7c:
76:43:9f:9b:b8:52:f0:22:b8:4d:04:4a:2a:86:2d:
33:d5:a0:6c:1a:01:42:1d:3f:8d:79:41:15:e4:a7:
6e:f8:14:26:0d:fb:41:65:66:9a:dd:7b:b8:e0:1f:
b1:b6:53:e9:57:85:7d:55:8e:70:cb:03:0b:6f:5b:
4e:ad:bf:85:03:bc:1a:2f:d7:17:7c:cf:ab:54:86:
87:95:ac:41:18:26:62:5e:54:56:ed:6d:2b:b1:42:
30:c1:75:7b:e0:55:62:e0:03:e5:0e:1a:d4:f0:5c:
a3:9e:90:8d:84:03:b2:38:53:04:cf:35:92:05:9b:
bd:1f:91:86:f7:33:ea:59:80:a1:a5:62:70:db:46:
29:ab:42:9d:49:36:5c:48:9a:4e:b1:91:5e:e7:11:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:CB:F0:F0:27:BD:26:2A:1B:72:82:60:D9:83:8D:1F:45:DE:26
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:43:97:f3:f4:b3:5b:2c:dc:31:9c:6c:c6:6e:fa:6e:ed:fb:
75:9c:db:f3:b6:8c:3d:00:e3:af:d0:8f:76:90:9c:ea:c4:81:
8a:6b:98:84:72:39:2b:31:e9:4a:11:a6:6b:50:ba:71:47:1c:
55:e7:b2:c9:4c:ce:92:83:92:e2:84:e8:e1:01:44:61:f9:21:
20:fa:75:61:8a:80:db:a8:d9:df:70:d9:90:c7:d9:4d:7d:85:
b4:b4:d6:95:fc:61:5f:7c:fd:f8:3c:54:33:46:72:61:1f:5d:
ed:bd:b8:8e:51:32:c7:20:57:0f:c4:bf:4a:af:97:05:58:5e:
50:2e:b4:a4:d0:38:b5:eb:83:c0:7e:e0:c8:be:9c:85:e3:1a:
4d:34:33:2a:f6:87:bc:13:59:08:f5:75:8d:b8:a0:79:85:5d:
84:f2:8f:d9:0d:98:08:18:e0:e3:09:1e:46:9e:82:a9:c1:28:
27:d5:27:9d:ad:fc:ed:43:11:1b:16:37:3f:6e:a4:35:4e:cd:
3b:84:cb:b5:f0:1e:7f:e6:6d:a8:b0:f6:df:36:96:d5:c9:af:
81:cc:28:d3:c9:5e:bb:f2:fd:b1:d4:b6:20:c2:3f:af:f2:96:
c7:85:61:7d:a4:a4:1f:f5:3f:16:4a:49:4f:ea:0d:67:17:9e:
97:ad:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:21:16 2025 by rpki-client