Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: w/UYIu8syYjAK4xIVZgnGCqsbA3iQTbmV9EAQhiS/Ko=
Subject key identifier: 9E:0C:49:8A:A1:88:04:A6:4E:85:00:28:0F:74:34:3C:0F:D3:B8:4D
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 0197B9A1E79EDCD6C6C62E378F18F4828159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 03:01:24 +0000
Manifest this update: Sun 29 Jun 2025 03:01:24 +0000
Manifest next update: Mon 30 Jun 2025 03:01:24 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: aZmkDQZtPsiJvDgPWzpQFbnQPUJdKpS3vKzG/eLTRVY=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:e7:9e:dc:d6:c6:c6:2e:37:8f:18:f4:82:81:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Jun 29 03:01:24 2025 GMT
Not After : Jun 30 03:01:24 2025 GMT
Subject: CN=9e0c498aa18804a64e8500280f74343c0fd3b84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:3e:f4:0a:61:41:39:42:1d:96:8d:28:7c:
dd:6a:22:c2:26:d9:c5:bb:40:ce:ad:1b:a5:53:92:
93:fe:bb:ff:d2:6d:78:75:84:09:02:f3:d3:b0:5d:
99:c4:17:78:d2:f2:a8:58:73:f5:7c:9d:50:1a:bf:
1c:2b:8c:17:34:6e:6b:43:9a:50:83:c7:4f:8c:d6:
22:32:43:28:2d:e5:f4:b1:9e:ad:28:f9:70:59:0a:
8e:65:41:ef:e8:0d:1f:bc:c3:36:9d:f4:46:e1:81:
7b:e2:2a:dd:b8:fe:59:a3:ec:a7:41:c3:ed:07:f6:
f1:f2:02:d6:7e:90:9a:61:91:b1:cb:84:37:03:14:
31:b4:75:72:e5:3d:71:a8:5b:31:19:8f:88:94:bd:
f3:af:8a:7e:6b:77:36:68:77:9c:a5:a9:23:ba:7e:
50:23:a9:3a:bd:c0:d0:56:2f:2d:b8:76:9b:90:88:
2a:f4:36:b0:e1:0a:25:2a:59:8d:b7:85:0f:96:da:
8a:4f:d0:02:af:09:52:e5:b7:0b:cf:aa:27:97:e6:
c9:5c:ce:8e:9b:ba:78:9d:bd:d2:ed:b0:a2:3e:00:
21:67:cd:86:fb:c3:77:36:29:a5:40:47:7b:71:a2:
5a:56:bc:fd:99:5f:61:9b:9f:c6:d6:53:5d:9d:c8:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0C:49:8A:A1:88:04:A6:4E:85:00:28:0F:74:34:3C:0F:D3:B8:4D
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:93:26:76:26:de:da:6f:68:f3:17:e2:51:5b:11:c1:7d:af:
4a:95:29:6c:e3:60:ec:be:96:52:96:04:be:02:07:85:36:0d:
87:24:19:c3:5b:b5:74:4f:e6:c4:f8:93:d6:bd:65:0b:19:6e:
62:4f:86:19:95:48:2d:c9:c4:d3:73:59:67:bc:20:4e:9d:f4:
8a:6e:73:00:88:dc:9e:35:e7:b1:79:df:f7:92:4a:d4:96:c3:
8a:61:3d:4b:74:8c:10:33:47:67:aa:20:b5:fd:ca:f3:33:d5:
a7:46:6a:83:f5:e9:7d:44:e1:cc:73:06:34:2d:7f:35:f1:f9:
de:b2:b2:a8:c3:92:31:30:d3:2d:e4:57:b4:62:5d:2b:04:47:
86:c9:73:f7:bd:fd:eb:a6:42:bd:1f:2f:53:c5:73:c3:1e:a5:
42:a8:e7:50:86:f1:3f:77:3d:56:fe:1f:b9:3a:0a:9d:d6:f3:
33:d5:66:d7:ff:16:5c:7c:a0:ef:9a:41:5c:3a:b9:c6:cc:85:
ee:f0:29:64:69:09:49:90:58:07:62:52:54:67:26:3a:18:8b:
69:34:93:c7:e5:6b:83:8c:c8:ee:5b:69:7d:c5:5d:c9:fa:80:
6f:26:9a:bb:c1:75:01:35:ca:66:5c:bf:fa:bd:85:79:ac:b7:
b3:ec:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:16:25 2025 by rpki-client