Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
File: cIEc4M5zU_A-3py3ylEWJV-_t70.mft (raw, json)
Hash identifier: jjxCwpkbMJgOvVRgXiO2hgxSxRiTTHGSjPWjqTeI1dE=
Subject key identifier: 22:FC:F2:AE:02:57:30:62:39:5A:7F:A4:83:AD:CE:ED:3F:0C:AB:DF
Authority key identifier: 70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
Certificate issuer: /CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Certificate serial: 0197B6A0D291C7A346E6E6550BF8899261D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
Manifest number: 0A6E
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: 1-VdOr1FUP7HNxfqfhOHB4LyOJ2Y.roa (hash: QB9LyYahw6voR06UwItPSAyVLMKgN6beiVidIvS+Rxs=)
2: cIEc4M5zU_A-3py3ylEWJV-_t70.crl (hash: lGQvenC6umFKixWwIgrXpECvtjAbfBbzJfXLEgNWgiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d2:91:c7:a3:46:e6:e6:55:0b:f8:89:92:61:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=22fcf2ae02573062395a7fa483adceed3f0cabdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:67:ed:e7:3d:17:12:4b:87:dd:39:91:02:
f3:32:8e:27:3c:ec:00:ea:bb:2a:4a:05:1c:46:ea:
a0:4f:9b:8a:9a:26:8b:5a:b4:73:14:b5:fa:b9:ce:
95:2f:8c:56:d6:1f:0b:75:07:29:63:13:d8:4e:85:
c7:70:fe:fc:28:24:74:c5:b1:da:8a:15:5d:d1:02:
1d:14:28:f8:30:21:41:9a:9d:52:31:d0:2e:34:cd:
40:5d:83:f5:30:a7:83:20:25:4e:e4:a9:34:03:02:
07:ec:5e:5c:0c:f3:c9:0a:67:b0:69:63:76:70:b6:
d9:2a:b9:fb:bf:b9:7f:f2:14:1a:0b:6b:a3:3a:bc:
23:54:5d:45:32:b9:fb:e9:85:89:c0:17:53:2e:7c:
f8:f0:7f:cb:e2:49:0a:9d:7d:b4:d5:a6:9b:ed:94:
f3:90:8b:ea:ff:35:72:07:ab:c6:2b:dc:84:8b:e7:
d7:df:49:1c:84:af:53:e1:5e:7a:88:b2:2c:43:88:
b7:5e:93:8e:6e:26:f8:1b:13:0a:65:f0:8b:61:d4:
64:f0:a8:99:c1:c1:cf:d9:ec:03:15:ba:fe:1c:68:
d2:14:17:e4:c4:62:06:b2:cc:a1:9a:f4:99:68:e1:
06:0f:91:64:bf:7e:78:9e:98:e5:da:f0:b5:e3:24:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FC:F2:AE:02:57:30:62:39:5A:7F:A4:83:AD:CE:ED:3F:0C:AB:DF
X509v3 Authority Key Identifier:
keyid:70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:06:2a:21:ca:60:21:5e:13:6a:fe:7c:c7:92:85:48:12:34:
f1:8e:9c:df:9c:df:d4:89:bc:56:cc:1c:78:94:ee:ee:cf:cf:
e5:c9:f5:19:c5:01:e1:b4:de:c7:97:80:56:86:23:ab:14:bf:
f4:40:70:33:b6:99:45:94:15:88:9b:57:5b:ba:d0:9c:89:6e:
7d:40:59:05:70:8a:77:b1:bd:ef:50:f2:03:1b:ca:35:d7:7b:
ba:7c:25:ef:57:1d:c3:7f:60:b4:fe:3a:84:88:eb:3d:b4:2d:
fc:94:67:e1:17:bd:97:b0:6c:a0:19:21:f2:06:f8:51:d9:82:
94:e0:1c:a8:b9:79:8c:4e:1c:2f:c4:d9:9e:6e:86:79:4d:00:
3d:6e:82:c7:62:3f:70:8f:a9:40:f2:7a:d4:b2:fa:76:5b:fe:
09:ea:9e:83:9c:e6:9f:76:55:f1:6f:dd:b4:ae:90:fa:3d:91:
fe:fe:d0:c3:c6:83:8c:8a:58:96:f5:04:f1:33:90:02:54:9c:
b9:11:82:22:cc:6c:e2:c0:df:3e:96:6f:28:31:0a:5d:4d:a3:
2f:8e:03:be:3d:2d:77:5c:cf:cf:0c:86:c6:08:d3:3b:fb:d1:
2e:e4:9d:82:08:a7:01:79:83:23:79:cb:6d:e1:3a:a6:94:d2:
04:8b:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:57 2025 by rpki-client