Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier: v69dvZ0jaG9D6CBvSI9jHYhuOQYGM3RcSxnELJAPxFU=
Subject key identifier: 00:0D:E9:BE:96:76:0B:31:49:29:C6:53:21:BC:6E:BA:3C:74:3C:F3
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial: 0197B70E848CEC49E1C56F5FA54778CB0867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number: 0D50
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: 7oIzidmPV5DMaJu71KEE7TN3jrE.roa (hash: kCtY+zZ5Nv1Tl34nUDS681Pc5/oW0aaVlayqB3KyvjU=)
2: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: dGWmcxDu2wWkFDQXATY8kcewdJLv9cKtr7bzuJngBXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:84:8c:ec:49:e1:c5:6f:5f:a5:47:78:cb:08:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=000de9be96760b314929c65321bc6eba3c743cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:f9:67:ef:83:18:46:70:73:6f:82:61:3a:
ef:e8:a8:77:0e:8e:08:da:3b:f9:f5:98:2d:2e:3e:
ac:b2:e7:09:07:eb:f3:39:b9:14:40:e9:65:32:a9:
ee:71:17:97:85:8b:c5:1b:2b:97:6d:75:ea:06:d1:
22:d2:b2:c7:2a:7d:17:93:6e:86:68:db:73:9c:c9:
66:71:93:60:2c:60:44:1b:7e:d8:a3:8c:ee:31:0e:
83:a7:92:aa:b2:be:45:cc:8c:fc:23:fc:eb:e7:73:
1f:60:8c:0a:7d:31:b1:75:31:b3:97:64:6e:e2:38:
4c:a8:d8:ce:00:5a:74:b5:c8:f1:e3:ef:59:b8:27:
17:40:8c:b5:9d:db:a1:d6:c2:b4:e0:01:17:e5:ee:
c6:08:07:ec:b3:e0:67:da:85:65:e3:b0:dd:3d:ea:
e5:45:dc:c1:41:b7:27:c4:1f:08:3d:ab:52:f4:1e:
46:66:4b:37:f4:bb:7e:67:d0:63:6e:51:fc:8e:bc:
bc:27:e5:82:ea:9e:f1:2a:e7:f5:62:96:b2:eb:dd:
b4:c7:27:fb:44:4b:16:fb:71:d5:18:9b:b7:50:45:
a6:78:9e:03:2b:7c:e9:db:e5:6c:6d:52:d1:96:6d:
ca:e0:93:3d:48:d5:7e:ec:d8:82:34:2c:8c:1a:a8:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0D:E9:BE:96:76:0B:31:49:29:C6:53:21:BC:6E:BA:3C:74:3C:F3
X509v3 Authority Key Identifier:
keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:57:08:bc:95:ed:83:e0:6c:d0:7f:23:0e:e0:d4:61:14:36:
29:c6:f6:e3:a4:d1:fe:7d:6e:87:7b:97:74:2a:77:a2:1c:d4:
86:78:e7:91:55:3c:ec:1e:f0:21:11:99:1d:77:be:dc:8e:6f:
c9:12:b7:58:18:16:d7:d9:96:43:51:c5:9b:7c:68:c3:74:73:
c9:d9:ec:8c:94:fe:b7:f8:7d:f7:f1:34:be:fd:ed:f3:60:d4:
ce:76:6e:e1:51:31:98:e2:bb:3f:9f:e9:9c:7c:e5:69:b0:c0:
ba:7d:64:bb:6d:dc:1e:fa:44:68:7d:f9:b0:da:30:31:61:8d:
e4:bb:c3:12:2e:88:c2:e3:ca:c5:c0:9f:1f:a3:2d:fb:56:59:
77:49:45:72:ed:31:21:92:12:0f:a8:5a:16:36:47:dd:ca:19:
70:3e:82:62:d0:3e:8b:3d:6c:b1:1f:8a:10:24:f1:7d:26:b4:
6a:4e:2b:fb:00:77:2c:63:e8:68:6b:53:b9:98:92:b4:48:dd:
3f:84:fe:43:73:80:40:90:6c:0d:04:8a:a3:a3:ec:9c:48:52:
55:bb:70:eb:d4:87:c1:e6:80:5d:17:ac:6a:eb:8c:be:cc:a3:
ed:0d:8e:3e:5e:b4:ea:cf:90:6f:03:45:81:29:f1:3f:1e:97:
9a:2b:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:44 2025 by rpki-client