Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: 81V/eZuF5yxrB6WBZkHoNtoaOoTNwNfc0JLgluC7I98=
Subject key identifier: F1:28:81:6E:46:80:F3:C6:B8:52:BE:BF:11:AC:C6:63:11:19:7A:B3
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 0197B6A0F069F9F46FC7D435D3A7FB0ADC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 09F7
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: 3Ov/uTLExvbIKXVw5EMr60U9UJhc30KNzwXvKsgKES4=)
2: kJep7a3FRkNs3KQgMS6kDueqf3w.roa (hash: dBpCegRmmKMPJmbKSXlcIE1LjID2HAF4dE0zWcCDOWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f0:69:f9:f4:6f:c7:d4:35:d3:a7:fb:0a:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=f128816e4680f3c6b852bebf11acc66311197ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:65:b8:73:c1:64:d5:f0:d1:57:f9:03:89:
ec:c6:47:9b:33:a6:fa:72:75:03:6a:77:a5:7d:62:
23:5e:97:95:f7:79:b9:ff:8d:83:75:6b:c4:81:45:
34:c1:7b:b1:0c:b5:b5:c0:10:90:04:e2:9a:3e:bf:
05:fd:f0:86:72:83:63:3b:95:80:b6:d0:74:5f:a3:
b5:9c:57:50:77:41:e8:39:ec:6f:e4:33:be:d3:57:
17:e5:9d:7c:d8:be:3f:d9:a7:81:95:25:fa:20:89:
1f:ed:38:48:12:82:ed:b1:10:f2:0e:fe:a5:e6:35:
2a:a3:98:5c:46:3c:50:db:59:8a:3f:f9:cd:56:6e:
64:e8:ef:ec:82:d0:56:b1:2e:60:38:4c:8a:3f:5a:
56:3b:34:36:53:4b:39:4a:31:b7:24:a9:1b:3f:ce:
cc:2f:db:e9:e4:4b:d4:bd:e7:5e:c4:c8:56:90:2b:
2f:af:68:b8:5f:e6:01:cd:29:48:ba:94:ef:e2:10:
fd:11:d5:9d:08:0b:60:8b:97:96:77:a6:0e:45:ae:
f5:0d:4e:17:d9:22:6d:b8:7e:61:46:4a:f7:f7:f7:
3a:35:24:cd:a9:9e:e7:49:91:25:61:c9:0e:3a:9c:
5f:03:6c:9f:b6:09:41:c1:4a:a6:3b:bb:a2:7b:3e:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:81:6E:46:80:F3:C6:B8:52:BE:BF:11:AC:C6:63:11:19:7A:B3
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ea:56:bc:3c:b3:7a:dd:99:44:7e:70:e4:4f:20:f5:98:18:
8f:b7:30:24:ab:00:c8:cc:a2:cd:15:3d:f6:99:d8:9b:cd:e6:
f5:90:8d:cd:41:ad:4b:71:a4:27:c3:0a:29:c4:17:46:6e:0e:
41:9c:fc:b1:b5:03:e0:ec:1e:cf:6b:be:39:4d:4c:ab:80:6f:
5a:04:83:24:7c:88:ca:bd:84:1c:ee:3c:da:4b:8b:66:0a:c8:
b8:39:6e:6f:9c:ce:b5:90:37:41:71:f6:3c:05:04:c2:18:5e:
f1:50:09:e7:a8:ac:d3:c4:21:57:67:17:37:fa:37:6f:81:af:
d3:48:ac:ec:2c:56:7b:f1:d1:1a:9b:78:5b:3a:5f:9d:d5:63:
12:a9:2d:28:f4:22:d6:b6:c9:18:71:e2:21:4a:0f:0e:be:eb:
d5:80:dc:4d:87:b4:81:2e:52:09:6c:f4:84:fa:29:d3:5b:3f:
a9:eb:a6:15:a0:b6:85:6e:65:53:6e:2b:cd:f5:42:1f:05:bf:
39:a2:14:cd:cf:d9:ff:10:13:b3:ea:0d:6b:b2:6b:d8:53:c9:
91:81:3c:5a:25:32:b0:1e:72:98:16:fa:44:9c:6b:a7:45:6b:
31:66:8f:c3:e4:34:1d:2f:5b:f2:71:43:65:e5:01:af:58:6e:
60:87:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:17 2025 by rpki-client