Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File: cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier: 5QDtQXppQe1WVsGvelrMHiGOjhcZXEzaamiL8HqVBJw=
Subject key identifier: CB:3D:2A:0E:43:40:91:60:4F:EF:3A:F8:CA:C7:0F:81:CA:B6:68:76
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial: 0197B74593F959F863E82DA8FCB6DF1E3CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number: 08
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: 9D20MJo1eJrWCvNcDcVu6FPioaoOlf60h4aRvA71Fa0=)
2: l3EQEBZnleFof5yb88UhTSSdRTM.roa (hash: UQRjHQuRnFXbfdwyx6MJct5Sj+7na+HTqU/QptK8INI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:93:f9:59:f8:63:e8:2d:a8:fc:b6:df:1e:3c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=cb3d2a0e434091604fef3af8cac70f81cab66876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:11:05:06:26:ca:0c:9b:58:87:30:d8:f5:
0e:a6:8e:14:8a:51:48:65:23:0c:4a:e3:ac:29:8b:
3e:a4:c3:8c:9f:13:49:83:33:33:bf:0a:d6:dd:c8:
f7:98:2c:1d:b5:e2:d1:47:3b:4f:25:bc:ef:04:e1:
45:23:90:13:52:91:e8:e7:49:78:0d:19:df:f7:b5:
3f:47:1a:96:2d:fc:e6:03:98:ca:85:75:28:59:3c:
30:e2:9d:56:53:0b:a4:4a:a3:ba:f0:c3:7e:de:99:
77:d1:15:8a:fc:9d:c5:19:fc:3e:70:c8:7b:37:2f:
93:4a:80:5e:6c:2c:b2:02:98:f7:6f:20:69:b6:ad:
76:d4:e1:bd:f7:2b:1c:6d:48:42:36:e2:5c:5c:bf:
0b:7d:d1:ef:34:c6:26:36:5d:ac:9b:9e:96:e4:73:
26:43:ef:40:fe:9e:9b:ac:a6:05:47:a1:0f:1e:1d:
2a:78:cf:d8:e5:54:26:04:78:af:2f:5b:19:3a:bf:
f7:50:55:44:eb:09:86:1d:23:43:9b:d1:7f:cc:32:
30:d5:96:34:32:e9:78:26:c1:eb:18:66:b0:cb:4b:
07:d5:23:dc:55:47:0c:8f:4d:e7:b9:ff:94:f2:c1:
89:cd:bc:95:be:c9:09:f6:10:8d:42:75:d0:7f:5b:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:2A:0E:43:40:91:60:4F:EF:3A:F8:CA:C7:0F:81:CA:B6:68:76
X509v3 Authority Key Identifier:
keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4d:b9:41:61:70:6f:37:b4:f4:89:0d:41:cf:20:ac:95:c5:
c7:4a:a7:1c:6d:0d:98:37:b5:2b:75:a8:a2:d0:79:7b:88:1a:
75:16:55:36:9c:42:50:65:ce:24:05:29:73:32:38:cb:78:73:
86:2a:c8:1e:86:13:1e:6a:c1:73:e7:d5:30:58:2a:14:f5:46:
08:d4:53:98:ad:3e:c3:90:ca:0b:40:5c:fe:69:4f:d6:78:ed:
1c:e0:1f:29:cd:aa:33:ac:16:96:bc:24:c7:55:3c:b4:a4:46:
36:e1:42:4d:71:45:11:d1:b3:1b:50:a9:d6:43:a5:ed:e9:a4:
f2:3a:b0:5c:b2:3b:1c:74:a8:3e:99:f3:aa:20:19:e7:4f:0d:
65:fb:0c:ab:d0:2d:6b:1a:85:dd:64:3d:72:7d:9e:c4:a7:dd:
5d:ad:e8:ba:d6:90:5f:0b:7d:f9:21:41:f6:69:a4:f0:a8:c8:
d5:7e:bb:cd:97:86:6c:8c:e1:c4:b2:b1:69:8c:49:6f:51:c7:
f5:70:38:05:4c:9d:aa:be:e7:df:56:01:26:12:ac:fd:1d:b0:
22:dd:b9:17:f6:1b:aa:4c:22:4a:08:be:a6:ac:52:11:15:3b:
d5:91:d8:58:b7:44:8c:3b:d1:f5:21:84:ba:7e:57:41:d3:2f:
dc:dd:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:02 2025 by rpki-client