Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json)
Hash identifier: 7amvCGvaMdNu6xsnrmor/WpBknr+3LpFyiryVlPYcv4=
Subject key identifier: 13:E2:78:7B:62:B0:AA:47:9A:09:B0:82:BE:37:CD:D4:6E:93:D3:9F
Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490
Certificate serial: 0197B8C5F9F164380DDBD0C8CF5C73295537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
Manifest number: 0779
Signing time: Sat 28 Jun 2025 23:01:11 +0000
Manifest this update: Sat 28 Jun 2025 23:01:11 +0000
Manifest next update: Sun 29 Jun 2025 23:01:11 +0000
Files and hashes: 1: 4NykHTKnfSIJ0q7_RZtsAwpsqKA.roa (hash: w55fxLVLcagKRRaTKAUle3eBEN7JDI5LPLVo9zNJXVU=)
2: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: 0RkFoT1BfIp3rr169mRmN+bfjsUpAcJi1MCW5jxNfA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:f9:f1:64:38:0d:db:d0:c8:cf:5c:73:29:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490
Validity
Not Before: Jun 28 23:01:11 2025 GMT
Not After : Jun 29 23:01:11 2025 GMT
Subject: CN=13e2787b62b0aa479a09b082be37cdd46e93d39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:81:f8:7d:39:d4:d6:51:e6:67:b3:10:11:
2f:90:8c:15:61:e3:ac:d7:10:78:63:e5:cd:0f:e2:
e9:4c:33:8a:a9:e7:e9:7b:e7:16:25:77:21:48:0a:
5f:f9:c8:f4:ba:46:02:98:05:5d:51:74:e5:6d:1e:
e5:e2:6a:f1:a2:b0:fc:26:ef:ec:1b:00:55:2c:7a:
ba:61:e9:96:6c:c4:47:ec:f2:f8:89:5e:d0:4e:cf:
41:e5:9c:21:34:43:4d:11:5e:4f:b5:69:53:0c:de:
b8:53:54:a3:cf:9d:09:01:09:ee:76:e4:8d:85:32:
d8:29:95:b3:2d:f1:aa:c6:a6:0a:12:dc:d8:b3:47:
a2:39:5a:cd:a9:95:0e:83:3e:55:34:28:04:04:5c:
86:28:4e:dc:08:29:28:53:b4:80:10:af:14:47:67:
25:e0:e7:f8:1b:1a:72:9f:c0:57:d4:30:a6:11:e5:
b2:4c:ca:23:3c:e3:ca:d6:01:3a:01:5a:7d:03:8f:
ff:a8:08:3f:68:a9:2e:c8:fe:e9:a0:83:33:0d:34:
cb:d2:4c:71:5d:68:af:e9:ef:d6:8f:fd:8c:19:bc:
bd:ef:26:fb:db:ea:98:0b:4a:2d:41:09:98:28:6e:
c2:7c:c4:a9:fc:46:85:3c:24:2c:2b:2b:66:80:75:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E2:78:7B:62:B0:AA:47:9A:09:B0:82:BE:37:CD:D4:6E:93:D3:9F
X509v3 Authority Key Identifier:
keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:70:3e:cd:36:b3:98:90:6e:dd:a4:ef:00:74:15:c0:63:
56:2c:74:c1:d1:e6:55:9d:7c:61:3c:15:ad:51:1b:9a:ee:dc:
19:d3:d5:11:e7:1e:20:c9:56:44:cd:b8:42:c8:64:25:e8:f7:
74:97:84:b5:ee:c8:25:87:88:5c:3e:44:33:38:26:6c:24:41:
9d:8c:a2:62:39:05:a1:9e:ed:dc:e9:e4:8b:54:51:7a:b3:8d:
29:8b:0d:f6:98:c0:c8:0d:02:33:95:e9:a6:0f:00:cc:6f:05:
ae:cc:fc:c5:34:ac:1b:7a:2b:f5:ce:e9:e4:1b:b8:29:ee:bb:
9c:a6:65:4d:74:0b:6a:de:71:19:d6:9f:d4:fb:c9:fb:68:f1:
a2:6f:49:fc:5c:9e:fb:1c:55:a2:1f:5a:54:d2:1f:8b:62:e3:
9e:53:7e:78:7e:37:b7:24:1f:c3:9d:e1:c7:49:e1:37:89:28:
85:82:50:d3:a4:9c:27:5f:ca:80:eb:be:52:59:49:36:2b:fb:
2e:d0:54:40:af:46:1f:25:0f:bd:57:c9:9e:be:03:17:fa:d0:
41:8f:b8:bd:82:19:55:8a:ef:15:45:47:68:2f:8b:c9:fb:f8:
af:00:41:c1:cd:9f:7c:d1:0f:77:21:51:e1:ba:91:20:e6:32:
e5:8a:d7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:38 2025 by rpki-client