Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: 2VXwli/Dml4Jvr6xuMtAfuNweB67zb/5maV8eOi2WvM=
Subject key identifier: A6:18:CC:4B:D0:86:96:B3:D4:1B:3A:52:59:84:72:43:03:33:C9:91
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 0197B820E5AA1BF14070EF96A298213C5035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 0FEC
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: UjqfCu7By5xq2fFy4xmhrSaV+jEaWn83I69DSS+EKNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e5:aa:1b:f1:40:70:ef:96:a2:98:21:3c:50:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=a618cc4bd08696b3d41b3a52598472430333c991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:44:c7:d1:70:5c:c6:46:9e:aa:c4:47:de:
55:fd:ad:ee:46:3e:cb:48:20:0f:2c:81:85:a4:43:
2b:89:b4:a0:84:fa:ad:99:52:f4:99:ca:93:31:50:
51:18:4b:32:0e:fd:fe:77:af:b5:30:15:73:a4:b5:
b9:05:08:77:e8:3f:ca:52:ef:8a:bf:e6:52:a3:67:
91:76:f6:dd:4d:b2:dc:35:32:55:f5:88:ec:f5:49:
02:0c:27:f2:8c:49:4b:a7:fd:0a:4e:ad:73:74:1a:
6a:fa:00:f2:4b:03:54:ad:40:97:b6:0d:1c:0c:e8:
6b:50:b6:ae:5a:77:b2:40:48:55:9e:cc:2d:f4:2a:
1f:c4:9f:74:59:62:35:59:4d:0f:fb:9f:f9:e1:f0:
d2:df:2c:85:a5:f6:fe:cc:5d:7e:e1:09:32:55:e4:
99:0e:77:e2:53:c2:6e:18:a4:bd:0e:26:e2:44:a3:
7f:e8:f1:30:5b:9c:63:ab:55:6a:f0:a2:79:34:55:
24:9b:11:9e:05:03:a1:9f:87:08:fc:25:7a:3c:d9:
70:cf:88:a1:8c:ae:5c:f9:6c:1f:fb:0f:10:0c:90:
55:49:65:dd:a5:9e:4c:08:bc:e6:f5:af:c6:ff:c5:
c8:7f:1c:3a:a2:e5:92:4b:f5:5f:af:ed:d6:0f:e5:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:18:CC:4B:D0:86:96:B3:D4:1B:3A:52:59:84:72:43:03:33:C9:91
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b9:2c:85:6d:7d:88:51:e3:12:ae:b1:2a:ed:2e:d9:47:aa:
62:a8:9d:d9:1e:d8:25:fa:33:f0:14:18:78:3f:82:7d:e0:e5:
65:c7:4b:f7:63:14:86:8a:b2:d8:9c:b2:46:f4:41:14:64:ba:
ff:ba:7d:57:a8:1a:12:ee:5d:54:92:5d:6d:3c:0b:8f:40:e8:
74:0e:ef:0e:b3:b6:50:76:68:57:09:81:3a:9c:33:cb:d6:cb:
fd:5f:5f:9e:5f:c6:8b:c0:67:4b:a0:8e:8a:97:fe:8a:a6:b6:
82:50:f3:a7:65:7f:f3:5b:af:8b:27:80:13:58:87:1c:86:62:
30:58:38:bb:40:96:9c:01:30:a5:fb:70:8b:a2:de:22:88:93:
03:c0:cd:60:fd:e6:87:d0:b7:85:13:3a:e1:d3:4f:80:03:9f:
2a:cc:57:73:3d:cb:0c:f8:7d:cf:44:cb:7f:1a:c4:99:98:16:
89:0a:7d:4e:09:e3:33:1a:09:4d:78:18:c7:84:e7:3c:61:76:
fe:94:8a:8e:2b:a6:e4:33:21:b8:6e:f0:1c:2e:dd:2e:4f:83:
d3:f8:c3:66:22:7c:ee:82:a9:d2:50:7a:37:a5:55:a7:32:35:
be:b0:a8:90:90:a9:c1:f5:fa:47:cf:9e:65:89:e8:c1:24:b2:
36:d6:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:25 2025 by rpki-client