Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json)
Hash identifier: XDUeJBu19aY8j5yj7Dci75z15dzCnh93nfrESoqSsMk=
Subject key identifier: 30:F1:3B:1B:DB:F7:ED:6C:7D:71:E5:74:6F:9D:07:D2:F7:13:21:9F
Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Certificate serial: 0197B9A19A03E757DF9E3D175E11071167C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
Manifest number: 0156
Signing time: Sun 29 Jun 2025 03:01:04 +0000
Manifest this update: Sun 29 Jun 2025 03:01:04 +0000
Manifest next update: Mon 30 Jun 2025 03:01:04 +0000
Files and hashes: 1: 5gtuF__7I-RTiMG2ukg-OsX2MbQ.roa (hash: Ba0mjq3pimajTCvvrrrZyoHBHvgCNhQury7Kq+n9Wpw=)
2: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: KTi3XBCg2oA2V3HHeDePOcQBSQHpN102lmEalc/DEgo=)
3: ejCYeubtEX2rMSmkNAwpyfa0Enw.roa (hash: 4hn9ccLxIO+b+OCd227Erjt+kM9+/9+bRDsSA2RYfoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:9a:03:e7:57:df:9e:3d:17:5e:11:07:11:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9
Validity
Not Before: Jun 29 03:01:04 2025 GMT
Not After : Jun 30 03:01:04 2025 GMT
Subject: CN=30f13b1bdbf7ed6c7d71e5746f9d07d2f713219f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:56:a9:63:e4:65:6b:7b:a0:ef:74:a9:6c:1f:
80:85:ae:30:29:81:02:95:ad:4d:5d:79:37:99:6e:
70:2f:63:1f:39:b8:66:d2:09:25:aa:07:69:a8:ae:
ac:aa:4b:4d:42:f9:de:38:b1:71:5c:ca:aa:b7:af:
7b:88:e2:40:54:de:22:5a:e6:3f:e2:21:e1:c0:00:
f7:d4:18:ca:5c:1b:a6:92:ae:42:a1:67:45:07:ec:
4d:e6:ad:bd:06:0e:60:2a:39:26:cc:0a:1a:90:bb:
22:eb:c3:75:29:ef:e4:44:7e:c2:24:dd:ae:f8:c6:
89:3c:6e:d2:99:1f:a6:fa:21:9e:1a:e7:4b:17:57:
6e:8e:b5:e2:df:6b:4b:b1:0f:a1:56:50:99:81:8a:
e8:32:58:3e:9a:fc:de:cf:b3:e8:f4:8d:d9:a5:96:
6e:69:97:e1:3b:06:bf:bc:40:57:9a:bb:34:19:63:
1e:69:f0:ab:fa:3e:f8:dc:f5:1e:c5:26:21:aa:a4:
22:43:83:fc:78:94:f9:4b:4b:24:b5:d4:bf:ef:98:
13:e2:c2:4f:63:ff:0c:d0:87:21:c1:d2:4b:98:fe:
16:cf:8b:1f:fc:aa:46:b7:34:d8:cf:62:81:80:a6:
35:b8:0a:3e:31:6d:1e:e8:ff:86:5d:90:1c:2e:be:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F1:3B:1B:DB:F7:ED:6C:7D:71:E5:74:6F:9D:07:D2:F7:13:21:9F
X509v3 Authority Key Identifier:
keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:00:c5:19:68:89:bf:bc:4a:ee:24:e5:5a:4a:5e:28:e1:6f:
cd:85:d9:40:db:5d:59:fe:2e:e5:09:3c:bd:b8:30:7f:a3:29:
5c:85:c2:48:b6:8c:4f:85:0a:f2:f8:04:43:78:70:cb:ea:39:
20:73:57:bd:44:54:a6:9d:13:10:c0:80:1e:fb:9e:af:08:d2:
9e:8c:2c:ca:d3:37:5d:bf:57:ff:3b:8b:54:06:4b:f3:a6:af:
81:33:35:e8:27:8c:9b:60:f9:24:8d:8e:1d:21:79:45:ff:b5:
a7:d4:55:7d:1c:93:e0:27:85:ff:da:4e:ab:41:74:16:4e:76:
22:aa:c0:8f:5c:ff:38:6a:9b:ac:71:b0:24:70:d0:84:82:ce:
e2:44:e4:ec:84:bf:f8:19:20:ff:66:ca:b6:8d:9a:8d:a6:69:
07:ce:05:71:7e:bf:9b:f0:f9:40:60:5e:6b:68:cb:cc:f2:54:
88:f7:02:8e:81:90:fb:f7:19:9a:12:01:9b:3a:d2:be:80:34:
e2:6b:92:86:3c:eb:4f:31:42:22:46:d1:7b:7b:21:2d:65:85:
5c:2e:68:b1:cc:56:3d:b7:c9:a7:eb:9a:b9:06:48:85:81:fa:
16:9f:a4:41:11:e2:10:b8:21:48:4a:9a:f9:4a:8e:4a:d9:2f:
0e:7a:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:04:38 2025 by rpki-client