Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: WMEG0poBNtUw9scdzBzuoI66VBUGOEkLQAz/zV8cvy0=
Subject key identifier: BA:35:82:F7:C5:22:4B:2D:14:1A:4B:E9:07:E4:DD:56:A8:13:F8:0C
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 0197B8FCBEE54A4E48EBF7C618C752EB14B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 00:01:00 +0000
Manifest this update: Sun 29 Jun 2025 00:01:00 +0000
Manifest next update: Mon 30 Jun 2025 00:01:00 +0000
Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: Jb0CufVKcr8QgNrjELmtPBlPn1+Ymy3XvufafiHx/nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:be:e5:4a:4e:48:eb:f7:c6:18:c7:52:eb:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Jun 29 00:01:00 2025 GMT
Not After : Jun 30 00:01:00 2025 GMT
Subject: CN=ba3582f7c5224b2d141a4be907e4dd56a813f80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:11:1d:d5:d4:f4:eb:ce:db:da:2c:e5:ef:
48:59:d8:c8:9d:2a:00:4f:cc:41:30:9f:08:24:0a:
75:67:11:a4:85:18:51:b0:3e:3c:2f:69:a4:e5:63:
79:2f:20:25:78:08:79:d9:e0:61:87:f1:6d:f3:8d:
1e:44:91:2e:7c:aa:16:4b:cb:bc:10:2f:a4:16:04:
06:95:9a:3b:38:bb:bb:23:fd:1c:3f:6e:0b:4e:65:
42:cf:b4:3f:93:2f:1d:df:e0:0b:95:07:25:e4:31:
aa:b4:39:af:23:81:f1:ef:54:4d:4a:a0:0d:8f:ac:
18:53:20:70:69:f4:c8:af:86:de:5c:e6:93:85:09:
4d:73:2f:fc:83:d5:63:84:e0:8e:0b:10:30:9a:ea:
c5:ea:50:e1:24:a6:87:15:76:39:36:f4:8d:9a:de:
82:86:f8:a7:5d:75:fd:20:ea:a0:66:44:cf:0f:b9:
e3:98:48:c5:6e:09:87:df:4f:37:8d:76:9d:e3:ff:
5a:75:5d:f7:37:60:ab:f3:54:21:e9:1b:fd:10:50:
73:43:0a:93:32:5e:7f:7b:30:e1:d4:fd:0f:38:29:
b1:b6:a7:7b:02:80:60:bf:44:9d:f0:76:9d:df:c1:
97:fb:a3:73:ed:e3:5b:ee:01:f9:9f:f1:f4:7a:ec:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:35:82:F7:C5:22:4B:2D:14:1A:4B:E9:07:E4:DD:56:A8:13:F8:0C
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6a:d7:93:86:ef:73:ee:f1:90:1a:e4:78:4a:ac:c5:43:5b:
af:68:f7:44:96:a5:6a:67:ed:35:8d:ac:f8:bf:1b:87:8d:7c:
10:12:42:29:f8:ff:df:02:97:f7:9c:90:6e:81:b5:6c:fe:78:
01:df:b9:8c:2d:78:52:45:96:32:94:59:09:33:b7:a3:cd:07:
f2:48:e6:c9:de:14:d6:fb:dd:c8:ce:ec:e8:92:b0:ed:12:40:
c8:14:20:f4:67:2c:b6:72:a6:49:90:32:99:74:0e:50:34:2a:
49:8d:35:fd:d1:f2:ba:f0:54:cb:43:3a:60:5b:b3:af:be:17:
3a:21:56:41:70:85:74:c1:c1:a4:c1:a2:06:4d:6a:6e:2e:82:
b6:bc:9b:94:e9:40:b9:aa:5c:84:19:7a:eb:2e:6c:f8:be:a3:
28:0f:47:36:9b:fb:96:42:b8:bc:b1:f9:ef:d6:f3:14:bc:c4:
cf:b2:66:6d:0d:15:57:99:b5:ab:b9:6d:b6:d8:72:f6:91:34:
8e:3e:8c:73:a2:51:08:20:0c:54:c9:53:07:89:a2:f1:cf:b9:
60:b2:0b:06:56:94:6c:91:26:5d:0f:3f:13:fc:c1:5f:e9:c3:
d4:80:71:4f:3b:8f:e4:a3:35:3f:fa:ac:c6:1a:c1:b4:bb:b9:
57:f2:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:28 2025 by rpki-client