Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File: 1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier: 4zaWKfS+61ERLKqn6fo/kuoWmcbW1+TOjKo64QqE5Xo=
Subject key identifier: CF:CE:BC:4C:53:8B:34:17:FE:2A:CD:1D:AA:27:99:B8:67:BB:C2:B3
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer: /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial: 0197B6A16BD013EB7CAE5B0CAD19DE9C007D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number: 0538
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: 3CCxds7M4aOggkbJFm/1vtqOOjtO1CUvha5SwaQ3zN0=)
2: oKBWeiCdr72OFTmQ9qAC_2ODyWc.roa (hash: S0rlxTkwKd8+RpY5lx0VofPErbqrcMDFmRtkG28exLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6b:d0:13:eb:7c:ae:5b:0c:ad:19:de:9c:00:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=cfcebc4c538b3417fe2acd1daa2799b867bbc2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e6:0f:f3:7b:3a:3c:c3:e5:60:61:c0:4b:7c:
3b:d6:40:2d:72:7f:95:0f:80:0c:e5:3b:45:c6:76:
46:ba:6f:8d:8c:4d:c9:b6:64:8c:b2:48:80:f1:65:
cf:bb:bf:d4:c1:aa:49:b2:65:da:c2:c8:91:fc:f2:
3c:09:f7:f0:7e:4e:bc:4b:10:7b:45:96:a5:96:61:
d8:a3:f2:8b:25:44:d0:bf:99:ae:e6:2d:99:24:d6:
7a:f2:ec:e9:1e:2e:9e:8f:b3:a2:93:78:21:cb:b2:
1e:1b:35:1d:9f:f5:b9:da:6e:c6:5a:0a:55:04:b4:
fb:60:f0:8f:01:e1:f8:d5:a4:59:65:cc:ae:34:3c:
28:9b:2e:c0:38:2f:d2:e2:4c:3a:34:b1:f2:38:be:
dc:d4:73:d1:43:d9:a0:f5:1c:5c:8c:ce:a4:1e:19:
95:6e:88:c0:86:2e:65:bb:4d:88:1d:fd:90:75:4d:
31:bc:e7:e0:97:ff:fc:63:fa:67:fa:5f:c9:d6:3a:
84:a0:b7:76:a8:56:0c:27:ba:2d:7f:52:c4:a1:6f:
96:b0:4f:e6:54:8f:94:f4:5e:81:c5:d4:be:a5:f2:
df:ba:5a:3f:95:94:cd:6f:4d:3a:9e:d6:cd:93:1e:
8d:0f:0b:6e:75:b7:14:89:47:7c:28:5b:e6:a6:fb:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CE:BC:4C:53:8B:34:17:FE:2A:CD:1D:AA:27:99:B8:67:BB:C2:B3
X509v3 Authority Key Identifier:
keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:db:b3:b1:14:e1:d0:b2:7d:33:33:aa:6c:a5:6a:1e:7d:e6:
a1:6c:64:18:26:f0:2e:58:95:e6:b8:d4:a2:cb:c4:34:b5:03:
9e:8b:5f:c1:fa:72:0c:8d:c8:ca:ca:15:f0:6c:43:ed:58:b8:
92:f8:9f:12:96:08:66:de:2b:87:1b:b9:8e:90:f2:e1:fe:13:
7b:6d:34:6f:6b:c0:38:4a:cd:62:f6:e9:55:66:99:c7:71:21:
51:59:5a:57:20:60:c6:2c:1d:86:88:b6:b8:e6:53:e3:e0:50:
e1:63:54:73:82:80:ad:a7:7e:c9:7d:90:dc:74:05:9e:db:e4:
10:d0:18:c0:58:24:03:54:67:e5:78:37:7c:57:04:98:e0:3c:
ef:57:d0:a7:a7:ae:e0:c6:45:40:7e:a4:86:3d:92:69:e4:01:
6c:67:e5:60:b9:c0:55:50:73:b4:98:c8:a0:87:3a:65:10:4f:
ac:28:9e:20:7f:b0:ab:86:48:55:c5:3b:8b:ef:7f:d2:91:ca:
93:0e:20:79:70:e9:b8:e0:2c:04:b4:a5:0e:96:82:63:70:7e:
60:e3:68:a3:09:fa:1a:b6:c1:09:e3:ea:94:15:f9:bc:d1:1f:
b2:07:d3:13:99:33:2f:18:61:c5:e4:0a:8b:5b:ff:ff:01:09:
93:83:f2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:52 2025 by rpki-client