Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier: jieBLbvRM9NG65sv+wy1FRKLmraQy6koz16F18f+l3s=
Subject key identifier: CD:40:85:42:C2:14:B1:7E:E1:2A:6F:45:94:F4:1A:0B:CB:3A:72:36
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial: 0197B96A93EBD04DC5FD36D7F16F06E80419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number: 0FB1
Signing time: Sun 29 Jun 2025 02:00:59 +0000
Manifest this update: Sun 29 Jun 2025 02:00:59 +0000
Manifest next update: Mon 30 Jun 2025 02:00:59 +0000
Files and hashes: 1: PYsPgn9EIHR5AYha-d_1rxDJZs0.roa (hash: QRdgsHwd+qGrv8yp41/SIFOyI0EFbmqDBRqqwNJuLIY=)
2: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: tt1tu6FAsY8DAzVWmqXRho6B3d50YHD2YkSJNhSCEaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:93:eb:d0:4d:c5:fd:36:d7:f1:6f:06:e8:04:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Validity
Not Before: Jun 29 02:00:59 2025 GMT
Not After : Jun 30 02:00:59 2025 GMT
Subject: CN=cd408542c214b17ee12a6f4594f41a0bcb3a7236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:c0:77:7c:cf:cd:b4:d0:19:68:da:6c:34:
9e:bc:ab:e3:33:2b:c2:59:ed:08:29:e3:98:fd:73:
cd:c3:9a:0f:b2:ed:a9:0c:76:d3:14:84:54:ee:b2:
f9:95:55:23:75:56:50:5a:a5:d6:8d:28:fa:5e:4d:
33:95:5f:7a:be:18:10:50:64:2c:ba:f3:b0:82:3a:
52:fc:f4:aa:c9:3e:d7:ac:89:fe:69:b1:3b:fd:88:
f1:93:dc:7d:3b:af:51:0b:3c:6e:d6:77:49:e2:9a:
a0:a2:58:d0:f6:d0:a8:b4:fd:45:bc:16:7b:9e:59:
92:a5:81:cc:e1:93:e7:f5:31:37:5d:b5:a3:e6:b8:
2d:b0:0e:b6:32:6b:c5:a5:49:7d:a0:10:95:d8:f7:
34:12:52:3f:bd:97:ae:3c:28:2d:9f:4e:94:b4:87:
7a:80:36:5e:1a:24:e3:70:e2:9f:84:e4:3f:c4:aa:
3c:7c:06:18:7b:8f:70:ed:20:2e:fe:0f:f6:e6:8f:
19:f8:2d:f9:e6:61:39:6b:4a:b3:ea:65:8d:eb:df:
fe:a2:bb:2d:ee:3a:a5:09:4c:0c:3a:73:e3:d2:00:
a0:bb:a5:28:0d:86:59:f0:d8:d3:c6:9d:b3:ed:54:
80:bb:2f:07:d7:87:5d:b1:34:31:89:84:b3:3b:31:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:40:85:42:C2:14:B1:7E:E1:2A:6F:45:94:F4:1A:0B:CB:3A:72:36
X509v3 Authority Key Identifier:
keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5b:b0:d8:a9:78:11:56:19:7b:4b:74:fd:c9:bb:41:d0:a8:
de:b5:4b:d9:21:31:fd:22:5d:db:f5:ca:e8:8c:61:d3:ea:1d:
78:49:b4:de:38:96:f2:92:53:26:74:79:04:09:ff:ac:41:9f:
eb:91:c2:15:e6:3b:eb:38:5b:5e:f5:af:a9:b6:43:9f:8b:04:
86:64:7b:b6:77:4f:af:4c:3c:d6:4c:bf:76:f2:64:42:ad:87:
01:22:a5:cd:19:c2:a6:36:2b:76:4e:0c:8e:55:67:5a:6a:8e:
0c:47:f2:eb:9e:8d:dd:06:50:63:16:45:50:4f:9b:9b:8d:64:
1e:32:23:d8:3d:58:eb:d2:8b:31:10:4a:85:cd:7c:f5:cc:d8:
be:e0:a7:89:a3:bf:8a:ce:b1:77:1e:34:d4:17:4d:94:4f:f5:
1c:a9:da:c4:79:0d:b2:2b:4f:0c:27:c6:30:31:c1:50:34:23:
a3:aa:d7:55:58:5b:bc:1f:42:a6:f3:19:cc:90:c9:4b:c1:cb:
c6:f6:a2:e5:7f:90:42:b6:dd:76:a5:97:0a:1b:ca:40:03:e2:
69:05:09:52:79:d3:68:36:c1:d4:23:d7:a7:e9:c2:a5:25:ec:
9e:b6:e1:6d:16:cd:7b:e1:29:9c:91:2c:ca:b7:d1:70:b2:76:
e0:a6:44:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:03:36 2025 by rpki-client