Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File: c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier: azjhvLhVRzITbVFPagxgLEg8lHccdinzgHx9A+4ZCHs=
Subject key identifier: CC:B0:79:4A:BC:94:14:67:B7:B4:0C:C5:B6:57:05:92:D6:DE:7B:46
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer: /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial: 0197B7EA93F54E1787DC344F1F0A7FC3AE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number: 13D2
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: Pb8L9pbGV7NQfgKmcvhMk6D02_s.roa (hash: CoNWry2kYRJwo9FhSFsPeMR2m6gz3FAFYuGEKzEDx5w=)
2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: gHrcJlvkKVGeRG046C5SoulpDVv5fiPOyDEAkzA489w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:93:f5:4e:17:87:dc:34:4f:1f:0a:7f:c3:ae:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=ccb0794abc941467b7b40cc5b6570592d6de7b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5d:33:59:6d:f1:13:d5:31:50:cb:f3:8d:0b:
26:0c:a5:99:c9:3f:b7:59:a6:42:08:50:8d:e2:9b:
52:97:7c:78:af:45:f3:6e:75:52:88:9f:74:8e:18:
8c:31:54:7c:87:a9:bf:e0:8f:71:e4:cc:93:5b:ac:
3e:f8:ea:2e:15:a1:39:96:9e:27:ef:5c:95:cb:12:
83:1e:5b:6e:77:ba:13:63:bf:b2:68:05:f9:f3:51:
e8:e4:a6:6c:1d:a8:c4:d9:ec:7e:66:4d:28:38:8d:
a1:68:80:71:67:b1:17:75:b3:6f:88:d3:46:fe:e9:
3c:9a:be:eb:fe:e4:e6:69:68:ae:41:e8:60:f1:32:
f1:ce:64:8b:51:e5:36:8f:6c:e0:c8:5a:a0:14:53:
e1:e3:8e:69:ea:de:d0:9d:32:ef:88:61:b1:67:4e:
71:8e:b3:6c:3c:92:53:1c:0d:1a:1f:bf:e3:01:ec:
38:6d:69:e3:65:0f:93:46:a2:04:5e:27:1a:dd:01:
aa:d9:3d:58:69:bf:ac:d7:4c:00:f9:ca:59:54:b1:
2d:c0:05:db:9c:e0:21:fb:60:91:22:c1:e0:4a:b0:
9b:50:26:3c:df:8e:63:e9:7f:d9:da:5f:3e:77:c1:
68:85:55:e6:43:25:65:72:60:40:02:46:22:d9:c1:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B0:79:4A:BC:94:14:67:B7:B4:0C:C5:B6:57:05:92:D6:DE:7B:46
X509v3 Authority Key Identifier:
keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cb:3d:7b:4a:15:74:43:e4:a9:a3:f7:f3:9d:69:1e:37:86:
c5:32:88:80:02:ff:ef:49:92:a4:cf:ba:31:bc:33:e0:3a:4e:
48:57:6f:73:80:c6:f8:59:bf:94:c8:26:90:31:45:73:f6:8f:
b1:db:aa:17:16:b2:b3:24:ea:b5:e2:02:3f:d6:a6:65:12:08:
e8:83:73:84:e6:02:11:a5:b3:49:83:88:35:55:a6:7f:94:8c:
88:2b:f0:1e:6d:66:74:2f:1d:6f:e3:12:16:e5:27:ca:7e:0a:
4a:14:e5:ed:8d:10:36:2d:2a:73:8b:4b:42:ef:ab:dd:7d:cf:
e4:35:f6:21:cd:df:f4:ee:fb:74:21:a5:ff:39:cb:16:22:c1:
f1:d0:b6:9f:f6:10:d8:d3:da:1a:8f:bc:2a:7f:03:61:1c:0c:
19:1c:b2:55:74:09:53:15:d4:88:74:cb:47:59:2a:05:4e:57:
f6:4b:15:c4:45:22:1a:62:de:59:48:af:90:2b:3f:f9:eb:da:
91:57:b3:73:a8:6b:07:f0:0e:1b:4e:2a:40:5f:5f:61:ec:52:
07:d6:82:71:81:93:0b:63:63:1a:1a:56:f3:c5:c9:fb:f9:0a:
18:97:81:7a:15:c0:e7:16:8c:06:f3:88:26:88:6d:cc:c2:db:
13:16:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:32 2025 by rpki-client