Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: b77kZEFTX08ALOSR/v+3fKNK+S+cDQVEiAGVmj945Bk=
Subject key identifier: 39:1B:BB:D2:53:16:B4:0D:11:06:32:86:B4:B9:8C:97:9F:80:33:74
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 0197B7EA5CF061515F6EBE1CBB0D2C03F643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0CFC
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: ZViEJUena9no3k6Ae1_F2TCUJ1s.roa (hash: 9w7jEI95jS2WRSJaPLFBNXTWhCP7KfI5YnDHB0UiSYE=)
2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: KyqLeA2O7RTL/Qz/WeEZD9D43n7c6UumNaNCs2Xllhw=)
3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5c:f0:61:51:5f:6e:be:1c:bb:0d:2c:03:f6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=391bbbd25316b40d11063286b4b98c979f803374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:e0:d3:98:d5:f8:41:86:cf:a7:7d:9d:3b:
28:fd:58:d7:04:7f:2e:33:e9:1a:2a:e4:8d:95:f5:
b0:66:23:94:a4:fa:63:56:8f:38:eb:82:93:4d:d3:
18:ad:fb:d4:05:4b:2d:de:27:31:d3:ce:95:aa:c9:
27:54:98:23:b4:80:59:5d:88:ac:5a:06:30:e0:82:
ba:94:6f:7e:55:2c:9f:97:a5:e6:9d:f3:c4:0e:b0:
b3:13:92:10:9c:c1:74:6e:d2:b2:fc:9d:39:e1:96:
b2:73:2a:5c:bc:49:78:a4:50:44:2c:85:2e:4e:2b:
54:7e:67:f3:00:86:51:bc:6c:8d:b0:df:9e:95:df:
b2:4a:88:38:a5:68:74:34:b6:de:a6:39:7f:07:84:
2a:85:bc:e4:56:35:d7:a7:be:fa:ed:ef:c1:8d:c6:
13:2e:d2:e5:16:ad:3d:4a:f1:1a:a3:25:e5:d8:58:
b9:a0:e8:64:0e:13:df:07:0c:d4:75:ec:66:0a:21:
08:fc:70:34:b6:03:df:7e:3e:e7:1e:96:7e:a8:9a:
c4:0a:a9:d1:7e:29:9e:46:a0:e3:b9:14:5d:63:2d:
68:22:0a:3d:03:16:ee:7e:44:b0:f9:6c:ce:cb:5e:
2b:84:97:03:7d:ea:d0:85:65:c4:03:a2:08:73:59:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1B:BB:D2:53:16:B4:0D:11:06:32:86:B4:B9:8C:97:9F:80:33:74
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cb:f1:98:dd:b9:d4:2b:ca:06:e3:36:4d:af:4c:cc:2a:89:
19:1d:91:7d:78:1c:d6:be:d4:8c:36:f4:1d:3f:38:b7:d6:82:
48:21:27:fe:b2:b1:08:fc:a0:8a:a6:66:af:a0:00:78:53:77:
68:9a:6d:62:dd:8c:14:86:ec:b7:6a:22:fc:56:ed:c9:4c:5c:
7e:9a:f4:c7:b7:ce:44:65:7b:13:b8:ed:48:38:3b:97:39:f0:
a1:58:28:c0:46:da:97:04:2f:52:9e:94:d6:82:db:81:8c:0c:
bf:77:3e:1c:b0:be:64:e3:95:73:cc:27:46:e6:e3:8f:d8:ef:
6d:3b:89:14:0c:a1:1e:30:ae:54:25:f3:0f:f0:35:20:f3:01:
17:1c:bd:19:67:35:3e:49:6c:be:d0:1c:1c:78:f4:f6:63:32:
22:af:c1:ee:d6:60:69:64:55:a8:56:e4:3c:2d:20:22:42:d1:
00:97:68:f9:b9:dc:39:ee:9b:ee:41:fb:ca:29:09:81:bf:49:
9a:6d:c1:c7:9b:ae:90:d4:a2:98:5c:e6:a0:36:f4:c4:28:ab:
69:bc:b7:75:19:04:e7:59:ac:da:93:8d:55:2d:6f:2d:c9:3f:
bf:0a:5b:2a:d9:f8:39:3d:23:64:ed:ca:39:57:66:fd:94:be:
a8:41:81:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:40 2025 by rpki-client