Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: byspAYeTD+cWmU3gIXXY4AFt58ITpb/aa6Un9yT0zJw=
Subject key identifier: 08:68:AF:86:7B:52:22:00:3E:2B:AB:08:0F:1D:94:14:EB:FF:48:A6
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 0197B6D757D471FE0449B13B0F4432A8A142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 0E7B
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: 4t3OXhqwyF1wA5aHm1KXIvobofFp3rhoFYq/l5wrrsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:57:d4:71:fe:04:49:b1:3b:0f:44:32:a8:a1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=0868af867b5222003e2bab080f1d9414ebff48a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:ef:0e:33:9c:47:db:aa:7c:70:bd:ea:c5:
b8:9c:4d:25:17:d2:91:63:6d:fa:50:65:3b:10:09:
75:aa:b9:fb:ff:93:82:ab:54:f6:e4:ef:2a:b2:d0:
56:75:70:e3:5b:49:04:ce:7d:2b:28:71:1a:7b:6e:
67:dc:d1:a3:ed:65:c4:b7:a6:f3:2a:e4:60:de:f3:
a0:0a:5f:7d:63:5c:b6:30:d5:e0:f9:85:12:92:be:
bd:ff:18:11:5e:85:bd:bb:05:c7:56:b4:36:12:f3:
f3:20:87:6e:41:b3:30:67:7e:1f:be:a1:65:cf:e9:
4f:d2:58:32:28:35:ac:fb:e3:d2:07:5c:48:54:c9:
fa:b7:c1:50:56:85:c7:fc:31:4f:17:9c:0b:5e:c9:
45:28:4b:71:48:c7:fb:3e:cb:18:5c:1b:fd:08:a5:
c8:fe:a7:fc:4c:74:e6:91:55:c0:43:35:a5:67:36:
81:a2:b3:d3:0f:22:ac:a9:5d:1f:93:0f:80:c6:21:
2a:a3:3d:09:c5:f5:74:84:c5:11:13:04:02:fe:49:
f3:75:99:a2:42:cc:f6:c4:44:44:26:6f:89:62:b1:
cd:05:bc:b3:15:66:15:b3:bb:b9:bc:e8:de:e2:b0:
1a:56:c1:ec:73:f3:80:60:2f:8b:89:b0:74:fb:03:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:68:AF:86:7B:52:22:00:3E:2B:AB:08:0F:1D:94:14:EB:FF:48:A6
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fe:14:e6:02:df:32:ab:b9:01:55:16:d8:f0:58:8f:bf:c1:
3b:87:f9:2e:d6:f8:e7:9a:ee:79:42:09:4b:52:da:61:f6:be:
13:b8:ec:cb:69:d5:c7:e2:e8:7c:e3:1d:10:ca:e7:28:12:fc:
f9:2b:0d:de:d2:93:9d:27:7f:33:88:73:0d:59:9c:34:c4:20:
79:0c:d2:01:0c:fa:a1:2e:09:95:08:63:da:c5:1c:3c:85:b6:
26:69:3b:00:cc:26:3a:90:d0:bf:f7:37:18:75:8d:46:b0:1e:
e0:38:51:03:a7:f7:4d:01:11:3a:aa:f6:18:1d:7d:91:ad:e3:
c7:2c:2a:d5:84:70:e7:e0:39:93:e4:3e:b6:4d:b4:0a:78:21:
c6:d4:16:b8:3e:18:42:4f:68:dd:16:87:48:73:14:ad:ab:e4:
30:0a:e0:1b:6f:4d:16:79:c8:2e:7c:27:3b:01:7b:5c:06:18:
d8:9e:5b:fa:5b:b2:7c:71:30:da:71:04:c9:fe:46:54:3c:5a:
5e:d4:84:42:7a:bf:d4:27:fa:eb:b0:cc:1b:33:a5:c2:bf:e0:
b0:ca:df:38:21:f1:1f:69:74:bf:70:b2:b5:05:56:77:4b:85:
e0:13:5c:f2:c5:e8:21:8f:14:5a:f4:35:b4:b5:d9:4a:7c:17:
07:d4:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:27 2025 by rpki-client