Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier: FeHq4BElXUecnaLxh8rvTtaDItCn37rblaHDx0Lc1eY=
Subject key identifier: 2F:F6:2C:59:3D:76:3E:A4:A1:BB:86:1B:B4:15:00:A8:AE:EF:61:C7
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial: 0197B7EAB3E2E0E562F8BD172EE7E1C4D261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number: 1525
Signing time: Sat 28 Jun 2025 19:01:41 +0000
Manifest this update: Sat 28 Jun 2025 19:01:41 +0000
Manifest next update: Sun 29 Jun 2025 19:01:41 +0000
Files and hashes: 1: YXf-UI6sodjRtp6HqVvWtQPvYyw.roa (hash: Jo6+/rWF7ZwPltXrVquS1cq9nd5I9gl4VOXFVkjNYeU=)
2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: Yv9ZbhZpqU5TVMmO+HMFptm0Y/P6yi1KwOK684gDU7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b3:e2:e0:e5:62:f8:bd:17:2e:e7:e1:c4:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Validity
Not Before: Jun 28 19:01:41 2025 GMT
Not After : Jun 29 19:01:41 2025 GMT
Subject: CN=2ff62c593d763ea4a1bb861bb41500a8aeef61c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:ca:4e:33:cc:12:0b:70:15:1f:18:7e:50:
27:6e:2e:20:d6:98:24:50:4c:8e:06:59:40:84:97:
17:45:8d:75:d0:84:e3:1f:53:79:64:a0:a9:ad:73:
99:ff:ab:2b:ad:db:f7:af:03:c8:92:e2:d3:59:df:
91:ab:f7:a4:f2:a5:1a:fe:9f:81:b9:a6:78:2e:b9:
0d:3e:81:cd:01:e8:ed:ca:f2:6f:c6:e0:d1:11:97:
87:da:14:aa:f5:5c:1f:b9:a9:b5:54:2e:69:c8:80:
d1:80:0b:0f:8f:fb:93:7e:c9:08:70:10:bf:0e:d0:
f4:cf:9e:97:90:a5:38:53:c7:d3:af:8c:b2:02:fc:
8f:be:5a:17:23:4a:a5:a5:d7:02:0a:13:55:40:46:
7e:8c:2f:f1:4b:a1:bf:5b:95:fd:41:9c:bb:a4:5d:
56:f2:dc:e1:ad:90:7c:fb:dd:21:cb:11:9d:93:89:
32:19:f0:ac:dd:7e:90:89:b3:dd:3b:09:f5:78:15:
01:2e:c9:e7:52:99:13:08:2f:f4:da:4a:e3:50:01:
ea:56:13:84:f6:44:f4:cb:69:23:06:43:d9:f4:5f:
8a:f9:92:a4:bb:e3:bb:50:d3:78:4f:34:50:36:4e:
94:c9:29:45:be:99:ab:13:fc:f8:4f:01:d5:fe:04:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F6:2C:59:3D:76:3E:A4:A1:BB:86:1B:B4:15:00:A8:AE:EF:61:C7
X509v3 Authority Key Identifier:
keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:90:38:fa:01:e3:73:5d:3c:1c:11:89:1e:8b:83:44:5b:db:
9f:2d:40:f9:ed:aa:21:c3:da:8c:be:d6:72:76:57:d5:a7:ff:
1d:14:a7:b9:68:b2:68:41:d9:65:13:c6:f1:b1:b6:34:f7:50:
37:d7:a0:43:6e:0a:dd:23:2e:c0:8a:8a:d1:1b:3e:33:2d:be:
57:6a:36:a7:7a:82:e6:b9:7c:3d:2d:33:8f:74:8e:da:71:dd:
98:fa:97:b7:cb:ce:d6:49:de:9f:c5:9b:8c:3b:0f:43:54:8a:
57:99:de:36:5e:0b:4c:71:8f:34:8a:4b:cf:db:eb:ec:b0:0f:
73:17:56:aa:de:3a:ed:2a:76:cf:dc:6f:d0:65:4b:06:29:84:
aa:d5:43:ec:fb:cb:c0:69:3b:0c:ee:20:81:c9:48:66:88:4c:
1b:8f:79:9b:b9:aa:9f:85:dc:15:a5:26:2c:23:33:1a:85:5a:
6c:82:0f:d9:48:2f:51:28:33:8e:91:3d:e6:85:3f:2c:41:6c:
93:0f:6c:48:5f:8d:97:f9:96:eb:8c:98:dc:8a:d9:52:08:63:
7c:80:81:f9:88:2f:ec:67:87:0c:b9:60:5f:0a:d9:b7:73:ac:
eb:2a:52:5b:c5:40:10:f7:ab:c3:96:49:52:ce:96:f6:4f:72:
4a:e1:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:23:07 2025 by rpki-client