Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: 6abNvOt5MFI9acV/bIC51rmx/a0kfDOaFuazqME0rcI=
Subject key identifier: DA:9C:DC:B2:B6:06:E7:CC:E9:2E:07:44:92:38:80:58:68:46:EA:64
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 0197BA0F52A9614B5F1767C4C4164D886CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 15C7
Signing time: Sun 29 Jun 2025 05:00:55 +0000
Manifest this update: Sun 29 Jun 2025 05:00:55 +0000
Manifest next update: Mon 30 Jun 2025 05:00:55 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: IRMguDCCNPLrvJj2nohDXYmATSwAjYMNW0eZ69T2roc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:52:a9:61:4b:5f:17:67:c4:c4:16:4d:88:6c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Jun 29 05:00:55 2025 GMT
Not After : Jun 30 05:00:55 2025 GMT
Subject: CN=da9cdcb2b606e7cce92e0744923880586846ea64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:04:12:31:3f:53:1b:16:ea:a0:34:c1:63:
2d:52:fe:1f:1e:ea:8f:59:e3:04:17:52:d8:a7:03:
6f:57:34:81:9a:fc:33:4a:eb:17:a2:16:0a:21:03:
c9:59:20:a1:6e:11:2b:71:71:0b:5a:39:82:61:71:
f1:f5:3a:f2:ff:ad:37:2f:f1:aa:d6:f4:0f:ce:4e:
e1:17:7b:a9:1f:b0:7d:81:91:bf:d4:45:6b:2e:17:
d2:b3:73:c2:ac:b1:61:b8:8b:9e:2f:8b:a2:62:d2:
20:6c:c9:ae:c7:14:db:88:6f:a6:2c:ed:88:3d:4f:
17:f9:c4:f8:3a:5c:e8:59:ad:1d:2e:ee:77:77:1e:
94:03:46:1e:70:d5:18:c6:27:14:9c:5e:4e:f9:c1:
66:93:b1:54:66:cf:11:5e:fa:6c:80:3b:78:86:93:
3c:0e:88:06:58:42:35:78:2b:e2:94:eb:31:70:d8:
f6:9f:7a:c3:8f:98:16:b6:4b:15:e3:0c:3c:0b:c9:
89:00:30:2a:8d:76:d1:f6:fb:d5:d8:cd:77:fc:62:
ec:57:15:8f:f3:be:a4:9b:d9:09:d8:4a:ef:2b:b4:
86:70:66:b4:c7:c5:de:72:ac:97:eb:99:0a:a3:23:
47:a1:b4:67:a2:22:22:44:74:86:ea:80:2d:12:78:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9C:DC:B2:B6:06:E7:CC:E9:2E:07:44:92:38:80:58:68:46:EA:64
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4d:ee:44:fe:cb:ba:87:4e:02:0c:2e:ca:58:59:8e:0b:c9:
40:12:c0:d0:45:f7:94:83:77:81:7e:f9:23:87:da:2b:0e:dd:
69:c6:38:01:06:e5:40:e5:f4:07:a4:32:ec:49:0c:0d:76:af:
9d:85:fd:e0:a1:c1:de:f1:67:d5:65:a1:b4:fb:70:71:15:1f:
a2:05:04:bd:e5:40:9e:ff:40:64:2e:e4:39:8a:78:a7:55:e8:
e7:70:c0:f9:6d:0c:71:61:29:26:cb:a8:91:ba:40:7c:96:46:
d5:a2:41:19:e9:a3:0d:73:b7:7a:c3:38:57:02:58:79:18:5e:
81:07:32:86:dc:60:0b:8f:cb:83:d4:12:8e:db:da:a6:a4:fc:
5d:cc:58:1d:e8:f5:7e:4b:b3:9b:8f:60:d7:68:b6:08:81:20:
23:69:14:e1:82:43:56:84:e8:ca:09:8b:df:cf:68:43:d8:04:
bb:56:22:cd:fa:4f:62:80:96:8f:a9:8f:dd:84:ad:fb:16:e3:
1c:6e:36:f0:11:d0:bc:67:3e:22:ac:67:a9:3f:01:fc:c1:96:
a2:ee:61:5b:56:89:cf:be:00:a5:b6:27:4b:e1:dc:f3:5e:9f:
89:1c:3a:81:3a:75:6a:58:67:98:9d:c3:ef:ea:9b:1e:fa:49:
03:27:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:13:34 2025 by rpki-client