Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: ayJRQ923pXM/Ttcy3qlYCmPKuV2RMAmcHcrkRx8u+vo=
Subject key identifier: CB:9E:B4:C5:E9:2A:8B:2C:07:BF:D0:F5:2D:D9:B8:2D:B3:20:E7:BA
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 0197B6A0DEF53BEA8C1E2AE2C3C0AF580136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 12E0
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: KQJKn6TkLF0VxtJn2VZxbODwCdJAh7ijeWGjlgsn8oc=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:de:f5:3b:ea:8c:1e:2a:e2:c3:c0:af:58:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=cb9eb4c5e92a8b2c07bfd0f52dd9b82db320e7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:92:86:90:00:ab:32:c1:c8:7b:38:41:59:
5f:e8:79:b1:e8:8c:c8:c5:b1:17:40:96:c0:1a:b3:
cd:11:4c:1d:25:dd:34:0a:fd:fa:d5:88:55:b2:ff:
37:88:a0:13:f8:23:7a:73:93:c8:ae:85:e3:7d:a9:
f7:27:0a:5f:46:6e:56:52:73:22:7b:76:eb:d1:1f:
7a:3b:b1:92:0e:fe:b4:3e:fb:a2:2d:a8:40:ef:f7:
dc:39:07:60:dc:2e:42:d2:92:6a:c1:c6:a4:86:a7:
a4:a9:a2:47:f3:38:ea:a9:33:80:b7:ed:db:9b:ad:
9c:2a:0d:4e:56:75:45:31:88:db:69:32:fc:4e:1c:
28:a1:6a:a5:06:51:92:f7:8f:66:33:64:a9:a9:c7:
27:f0:2a:f2:47:dd:1f:c1:ac:35:e4:5e:6f:21:d9:
1c:ec:62:2a:68:95:81:c9:b1:8d:04:27:bb:b6:70:
e5:f8:85:d0:dd:c0:27:e0:5e:18:81:c2:0e:f7:09:
bc:54:07:cf:43:1e:5c:46:da:ae:af:bc:a6:ae:10:
01:68:b3:96:d6:35:f4:bb:88:cc:f5:be:a3:e7:5e:
87:e6:88:8d:28:35:5c:3b:55:13:ad:e0:a6:76:02:
51:0d:56:20:3a:31:cb:04:b6:92:2a:21:e8:80:19:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9E:B4:C5:E9:2A:8B:2C:07:BF:D0:F5:2D:D9:B8:2D:B3:20:E7:BA
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a7:5d:e5:a8:aa:35:37:36:7f:37:94:6c:ca:d5:72:bb:a7:
4c:79:0a:6f:0f:12:c7:1d:b8:9d:0f:27:e4:33:24:2a:9e:b4:
37:74:72:17:0c:f3:53:d9:34:f0:0e:eb:0c:4e:13:1f:a8:72:
20:44:0d:92:fa:81:08:8d:ae:68:16:08:34:ab:f4:be:64:9f:
60:5f:6c:51:2b:51:3c:c1:19:ea:2a:db:29:64:59:07:c4:6b:
52:ec:85:10:8b:02:34:96:c0:c9:0c:6c:1c:36:65:a5:fe:f1:
1d:55:1c:cc:a6:24:3d:0a:cf:01:b0:9a:ec:e8:e3:9e:e6:09:
ac:9e:c3:7f:96:86:52:bf:26:51:b8:e0:ec:4c:cc:97:7e:26:
19:b1:7a:fc:8a:93:8b:d6:04:b8:6d:6d:c0:1f:63:a2:4f:f0:
2b:04:e0:2a:42:55:f7:0b:df:9d:63:d3:bd:86:5c:7c:65:c2:
31:26:4c:74:53:ac:6c:16:b3:64:22:bf:f5:aa:a0:82:2a:49:
63:7a:5f:95:82:29:fb:3f:36:cb:af:2d:95:30:78:fb:ee:be:
a5:f4:cc:92:7e:15:72:b7:6a:92:91:e6:cf:63:c8:87:51:4e:
78:7e:0a:36:64:8f:d3:66:99:ee:da:03:57:e6:e4:91:b7:e4:
c4:f6:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:16:13 2025 by rpki-client