Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: oxEc2ymG+Ag9eUqJArXH/z1FFNdtSVC1rEIcxEr8Cok=
Subject key identifier: 03:9C:8A:8B:59:1F:3E:51:E6:98:7F:98:C3:BF:7B:E6:7A:B7:7F:5B
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 0197B820FC3213E3AE9A91DF527F76B26136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 01A6
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: FUQ+EC/5jBQnZXj42CozK+y4jrELmxxCt8AunQLs/vI=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fc:32:13:e3:ae:9a:91:df:52:7f:76:b2:61:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=039c8a8b591f3e51e6987f98c3bf7be67ab77f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:4b:b7:88:b1:53:e6:f5:16:fb:6e:89:a1:
0f:9e:a5:77:c4:27:ab:e6:83:b2:b6:ac:8e:fc:b2:
d2:f7:67:af:8a:dd:8a:56:13:30:1e:76:dc:1a:54:
74:b8:f9:0c:ba:ab:d9:52:ff:3e:65:f9:fa:ee:30:
40:cb:25:bc:b1:79:6e:19:54:00:21:f2:df:e7:ac:
e6:09:58:f9:6c:8b:8a:6d:2f:f5:a9:32:ed:fc:3e:
9a:b9:11:cc:10:dd:98:2d:49:ba:55:48:51:26:cc:
12:2d:e3:38:60:43:43:ed:88:98:a6:14:49:a5:1a:
ce:b3:56:b4:5b:34:65:2a:34:90:64:00:ec:91:22:
e2:a9:6d:09:a0:2f:8f:33:4d:ff:4a:97:3b:a9:22:
84:8c:19:df:30:20:34:ec:e5:64:8b:7c:97:da:a0:
fd:06:3a:5f:8a:8c:4d:b3:fe:8a:3d:8c:a6:63:71:
26:05:33:5c:d1:6b:2b:04:51:de:1e:5b:14:ab:75:
22:1a:a6:db:55:49:e1:11:db:47:4a:42:47:4d:5d:
07:93:cd:6d:00:18:01:b9:1d:12:ea:2e:ce:aa:6c:
98:14:d3:73:b6:e7:88:2a:c1:04:e7:9d:4f:5a:48:
7a:94:12:83:f7:c1:e3:80:81:0f:01:6d:d4:a0:40:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9C:8A:8B:59:1F:3E:51:E6:98:7F:98:C3:BF:7B:E6:7A:B7:7F:5B
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d7:df:d4:ad:ea:a3:f4:d0:a4:59:87:68:77:a2:28:d1:ca:
18:15:26:9e:04:f1:73:5b:38:c1:f7:59:fb:f3:89:03:7d:19:
b8:1c:ef:a8:9c:a7:31:d2:cf:28:9f:62:a5:a9:5d:3a:23:76:
f7:2f:15:e9:e1:ea:14:4f:fb:f6:47:00:87:b9:5f:b3:5c:b4:
ae:86:4d:46:6b:01:8b:3a:7d:c7:d8:21:dd:b1:89:4b:61:e9:
f3:07:10:83:c7:7c:1c:0e:a3:a2:b5:5c:eb:58:46:0c:b9:5b:
14:01:fe:b0:bb:38:d0:25:39:32:f4:29:52:03:70:19:30:42:
d8:7a:b2:81:2a:c4:29:65:00:d4:87:43:65:7f:f6:17:98:6a:
79:2d:11:02:ee:ae:a3:7e:2f:5f:48:b6:8b:f8:ae:69:9e:b3:
93:96:9c:3f:ee:17:89:72:80:15:79:5c:3a:61:eb:80:4c:b7:
27:58:29:e1:56:1a:ef:fa:06:22:0a:b8:92:77:43:bd:30:02:
24:9b:f5:fc:9d:67:55:15:3f:df:76:56:f9:49:4a:41:df:95:
c1:c8:cb:4b:ed:65:8a:cb:c7:fd:79:95:8a:b6:3c:58:a7:b8:
fd:12:4b:01:11:e4:e2:9b:57:57:78:44:a3:c1:42:6e:82:0f:
b9:5b:c5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:40 2025 by rpki-client