Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: pF5qngQ6zJfXSMLRVHGJxWIIt9ktzx3Y79H5CXQkakE=
Subject key identifier: 58:6D:7C:26:FE:0D:C5:29:DA:F6:37:F3:F5:1B:09:EC:1A:38:75:97
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 0197B77C716DED59A739578E1A39CD2D25C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: yJtUAeQnON5NLEa9mD1Gc4CyzA4E3ONDZaHOa2NidaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:71:6d:ed:59:a7:39:57:8e:1a:39:cd:2d:25:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=586d7c26fe0dc529daf637f3f51b09ec1a387597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:9c:42:51:7d:e3:b3:42:06:ed:be:3c:51:
42:be:2b:68:8f:40:85:9d:95:14:17:03:6f:ef:f3:
ca:f9:9f:22:a7:1c:db:41:d9:8d:2d:37:52:e6:b0:
74:ac:64:39:14:22:02:b1:67:19:1e:47:66:aa:c3:
61:69:ed:89:fc:ae:9f:36:b0:30:79:15:2b:f4:b9:
1c:02:7e:43:de:8c:a2:be:0c:ef:94:12:00:ee:dc:
b4:49:b0:33:f3:47:94:c8:af:6b:32:7f:72:bc:ff:
62:29:52:98:7f:12:4c:bd:1e:1c:c6:87:90:e0:f7:
10:56:51:e1:19:de:ae:60:df:86:88:90:6f:ee:ca:
91:90:0a:67:bf:1f:ea:14:3d:71:e3:60:64:65:fd:
c5:bd:35:c5:94:a9:0f:47:e3:c7:e7:f4:a2:a4:79:
7c:c1:38:fe:68:49:66:99:c3:64:e6:91:e5:e2:66:
96:3d:20:1c:31:5f:dc:63:0f:fa:f1:6b:45:4f:06:
53:b5:05:62:a4:4c:c7:54:75:61:c2:ef:fd:d7:a5:
63:15:1b:ca:16:37:9d:fa:b8:f9:37:19:c3:46:98:
b6:ce:d6:d0:c3:81:25:81:0d:4d:6e:39:f3:63:5f:
50:27:92:97:f0:6e:c8:37:0d:cd:7b:5a:11:19:03:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:7C:26:FE:0D:C5:29:DA:F6:37:F3:F5:1B:09:EC:1A:38:75:97
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2e:2e:3d:d7:a7:09:0a:1d:f6:e1:b6:8a:26:cd:5f:1f:ce:
d0:24:62:e1:92:d6:d8:41:d3:36:1c:c3:7c:20:18:3f:9d:82:
9d:67:25:e2:18:55:2e:4f:0b:da:fe:f8:26:7b:6a:58:eb:78:
5c:fd:ba:05:c3:2b:82:cc:95:82:a2:56:b9:2c:71:66:06:88:
50:b7:38:c7:c9:86:79:64:0a:64:51:55:58:13:4d:0a:56:10:
8d:df:22:e6:c7:93:b7:92:fd:b4:4a:25:48:66:12:46:d1:af:
7a:69:3c:f7:c6:de:38:27:0a:c7:05:a1:59:01:83:3e:ca:39:
ad:5e:be:4e:da:1d:8d:c8:84:fe:f2:8b:c7:ec:07:d9:6d:2e:
1e:b8:fb:31:2b:f4:fc:aa:89:1c:73:60:45:ba:04:b7:85:aa:
8e:c2:84:b5:a9:dd:69:cd:96:40:e4:15:5e:3d:2f:be:0a:57:
a8:6c:15:f1:31:42:1c:ac:62:8b:20:5c:2e:0c:5b:a4:09:0b:
65:df:3d:fe:59:ec:94:87:8f:33:ce:44:64:ea:b6:cf:6c:a8:
98:3b:29:42:e5:66:59:bd:c5:3b:19:dc:92:b6:ee:2e:50:ca:
d2:35:57:1c:32:9e:67:d5:f9:30:2a:2e:c1:d5:05:76:c8:3c:
0b:00:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:46 2025 by rpki-client