Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: c72oQdIzJlAkWOgxYohZRRI2YgEe2VMrFYHhlWa6W9Q=
Subject key identifier: 32:8B:7B:B6:34:63:E5:4C:E7:60:C3:E4:22:F7:05:E1:BC:88:8A:D5
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 0197B70ED1DCE03E67E4424C2DF1E2590B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 05A6
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: G88bU17JU+QBOs9AbjE8FxQ1MKoJNDRjaDfifGUj/w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d1:dc:e0:3e:67:e4:42:4c:2d:f1:e2:59:0b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=328b7bb63463e54ce760c3e422f705e1bc888ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f4:ce:10:c8:f9:fb:c9:47:ba:3e:68:f2:42:
0e:5c:7c:20:fc:81:fe:9c:ca:81:81:6b:15:61:50:
d7:b2:07:48:45:4d:bc:f1:d0:c9:79:a5:42:e4:37:
7c:a0:55:74:21:f6:3a:99:54:22:e4:0e:b4:0f:f7:
5e:38:bf:86:71:0d:9a:ae:37:78:a9:8f:86:7c:d1:
16:25:cd:3c:7e:f3:5e:3d:4c:2b:30:1a:d0:ea:8c:
e7:77:80:cc:2b:75:e0:23:42:4f:93:fd:e0:7c:89:
11:7b:b9:7c:29:9f:43:53:e1:74:07:2f:78:c4:43:
99:ed:84:27:0e:3e:47:1f:94:02:0e:f0:17:96:e6:
b9:03:bb:d9:af:0c:3d:36:ba:e6:00:df:25:f3:60:
22:50:f8:ab:7a:a8:75:79:14:61:dc:98:27:23:0f:
43:d7:14:06:38:7c:d2:1f:e3:31:65:4a:c8:28:75:
5b:78:63:cf:70:7a:2f:fc:fc:a6:a0:9b:7c:17:5f:
c6:01:28:ae:35:72:9f:65:7c:a4:4d:d1:ba:a2:6e:
3c:0f:f8:98:5d:2f:3e:07:c5:35:4b:c8:df:78:b3:
1f:2a:89:be:51:24:4c:97:ba:d2:59:dd:fa:4a:35:
2a:3f:43:91:5c:17:bd:a2:a0:4c:53:2f:a7:59:10:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8B:7B:B6:34:63:E5:4C:E7:60:C3:E4:22:F7:05:E1:BC:88:8A:D5
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b1:38:59:a8:15:3d:d2:5f:0b:3c:53:8b:90:89:8a:5d:58:
e9:81:bf:8d:e7:bb:a8:c4:f6:81:aa:13:b5:68:2f:6e:87:66:
fc:33:a8:1f:be:56:d3:e3:8f:aa:eb:6b:08:89:f6:f6:b9:69:
65:c3:91:c4:7c:53:39:6f:c1:7c:54:51:1e:83:6a:e4:66:01:
64:a6:c3:bd:27:ac:e3:49:35:fe:bc:cb:77:9c:3c:19:c0:bd:
a6:39:d6:61:dd:9f:7e:6c:e0:0a:7a:f4:e8:7d:f1:0e:d8:dd:
9c:7b:00:8b:64:89:b5:6a:f2:38:2e:2f:d8:82:28:e8:38:99:
dd:fd:16:cc:2a:60:6b:86:cb:88:16:8e:09:c0:6b:3b:e1:24:
63:58:cb:b8:b9:5f:0c:a1:83:b0:d2:d4:1d:d1:17:d0:31:53:
da:4a:d6:33:35:1d:ff:b2:2a:c9:fe:1d:4a:b3:9d:8e:1c:89:
cc:80:16:a9:4e:25:b0:dc:f2:0f:19:49:9d:95:bd:7a:3c:aa:
fe:a6:86:0e:e7:17:af:8b:5f:bf:7e:38:a3:26:81:8b:29:14:
44:85:76:b5:63:4d:15:bc:ca:85:af:5a:28:54:bb:50:15:f3:
18:27:bf:7d:c5:c8:f4:38:6e:9d:15:a6:0f:92:e6:41:a2:3a:
95:50:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:35 2025 by rpki-client