Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: ll4/qUK7AAgEboex63dW1RyrBb+poho7KbPZSTLZzJE=
Subject key identifier: DB:5A:53:B4:2E:64:C6:BE:AC:D5:D2:0E:40:75:49:DD:9B:00:78:32
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 0197B70E8342A62D67DBFB031F1320197EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 1342
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: BjD2xImobwIk3d9WHsDiTYkljtvpFRKsAbzI+Mcvbq8=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:83:42:a6:2d:67:db:fb:03:1f:13:20:19:7e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=db5a53b42e64c6beacd5d20e407549dd9b007832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:0b:7a:6e:e8:f2:65:e9:28:19:05:13:01:
2e:5b:95:2d:29:70:8e:5f:27:42:01:06:95:93:07:
66:dd:41:ff:55:17:f6:cf:ad:0e:41:7d:a8:66:1a:
c4:ed:4b:c5:53:eb:5f:7e:c9:46:1e:dc:bb:0b:f2:
6f:e5:1b:b6:92:af:f7:7b:bc:4f:96:62:b6:04:e7:
20:d5:db:61:81:bb:0e:e2:a0:65:0c:1c:fa:38:09:
f9:fb:f7:9e:49:80:3b:d6:e6:a9:54:05:4e:b0:31:
8a:bd:7f:30:4d:ff:36:43:13:60:c2:33:a6:8a:c9:
b6:ce:06:7d:4f:e1:87:37:37:9d:81:a9:26:87:d4:
ed:b1:f7:4c:80:3e:43:9b:86:71:52:d7:ec:b9:23:
3a:54:9a:6a:1d:5b:ea:d6:c6:a4:e5:1c:7e:ad:9e:
e6:36:01:e9:da:a5:77:68:e1:52:13:e8:69:db:d8:
b8:c5:55:67:95:02:f4:d3:0e:8a:7c:73:97:74:93:
f9:e7:85:ba:d0:c0:71:f4:47:fd:8a:9b:2f:f9:84:
79:ce:c4:37:10:fe:20:7a:3c:37:69:69:d3:eb:3a:
c1:b8:d1:e4:5a:2f:b8:9b:9b:84:b1:57:0a:66:a8:
46:ea:cb:3f:6c:36:1c:de:bf:a7:ef:3d:76:07:13:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:53:B4:2E:64:C6:BE:AC:D5:D2:0E:40:75:49:DD:9B:00:78:32
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:55:11:32:1d:bc:47:8d:e1:0b:91:5e:fc:2e:b6:e3:6b:5b:
81:e0:ca:c6:63:0e:18:92:6c:33:a2:ea:9c:e1:9a:5a:33:6b:
ba:75:01:44:90:ed:1e:31:81:f2:d5:15:c4:41:60:25:46:c5:
50:e9:ee:bc:5f:9b:d9:36:55:06:c6:b7:09:c8:c4:a1:a9:ae:
b1:ed:af:f6:9a:d8:c2:ba:35:b7:0b:fe:18:85:b4:5b:33:46:
26:33:5e:53:fa:da:46:24:d4:01:a3:b9:55:ca:13:6a:5a:96:
60:6f:49:ba:55:b0:3f:ea:fb:95:4a:54:a0:e9:28:36:70:03:
2a:64:0d:45:6d:da:f0:62:cb:c0:1d:af:1f:eb:01:0e:79:5e:
a5:91:3b:63:6a:4c:24:7e:8e:f0:8f:21:d7:d0:a0:bf:2e:38:
06:2f:b1:ea:81:ee:a7:4c:41:82:6d:70:1b:7d:f9:00:a7:05:
9f:7b:27:d9:b8:51:4e:e1:e6:72:15:82:94:ad:b4:ca:65:3e:
e2:ef:c6:64:44:87:4c:9c:c3:73:fe:14:60:4c:57:0a:67:cf:
b3:80:e2:c6:d3:d5:05:1d:ca:de:90:8f:17:d5:94:a7:97:f4:
73:1b:51:0e:bc:05:13:45:fc:d2:eb:eb:42:46:d2:7b:54:26:
3b:91:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:52 2025 by rpki-client