Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier: jJuYLv2tC+F7XK4MHwYaR9IfZPNJL+kgo/ZmE+zkAfk=
Subject key identifier: 74:41:FB:8C:BE:47:16:4B:34:C0:2B:CF:67:C5:26:75:FA:14:87:3B
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 0197B6A0A1EDADC6B813C5FC4388EC06534F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number: 04A5
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: 8AfCRPqORHE8NcqVDQ202ySyw2RfhXrOmgqcau3yvTg=)
2: x22xk2A-Apb8dLpmSadyKyJCkDo.roa (hash: gu74rPveiHXJ2A/NDXg+xf+4EJriNsSl+5m/7KHQAxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a1:ed:ad:c6:b8:13:c5:fc:43:88:ec:06:53:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=7441fb8cbe47164b34c02bcf67c52675fa14873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c3:f9:1b:32:89:9b:43:a3:ce:2d:b2:20:7d:
70:6a:1f:11:9d:13:f0:c2:33:8b:8d:80:48:bd:53:
d6:90:5b:74:3b:93:42:78:e7:75:61:4b:52:02:00:
46:e0:c6:fd:02:c1:55:e9:fa:e4:af:f4:5a:92:31:
fb:0b:3e:6a:18:d2:9d:6e:a7:39:ca:20:28:81:6f:
a8:f2:58:fa:ff:ff:2e:2e:62:f3:ea:6e:21:77:68:
b6:59:7a:20:a2:77:bf:58:da:99:6a:bc:1a:16:6d:
3f:13:5a:a8:2c:34:9e:08:18:6b:ae:65:36:c0:8f:
26:55:97:97:ae:06:82:f3:3f:a1:e5:94:16:50:86:
46:63:0a:d8:36:93:b2:26:7b:45:63:49:e6:4b:e4:
3e:e1:6d:75:5c:8c:53:90:70:e5:b1:f3:0d:bd:19:
d7:3d:db:ea:45:12:a1:ba:24:23:df:fa:30:51:17:
f6:4e:ec:5e:69:c0:e8:8e:5d:32:bf:65:21:3b:2a:
6d:c7:6b:c9:72:f7:71:4a:99:32:19:e4:71:db:b1:
7e:eb:36:ad:a0:6c:06:c0:9b:1f:18:d5:cb:2c:50:
06:32:7f:1b:5d:50:cc:63:0c:6d:a0:a9:1a:46:cd:
a1:b1:c0:9b:76:1e:81:b7:ef:6a:a1:c1:04:1e:64:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:41:FB:8C:BE:47:16:4B:34:C0:2B:CF:67:C5:26:75:FA:14:87:3B
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fe:24:3b:ab:fb:3d:c6:6f:56:96:bf:f9:3c:c1:25:69:f3:
9d:cd:73:08:40:5e:74:98:ab:4b:0a:22:15:c5:ca:f8:8a:03:
4b:75:e6:8a:c8:a3:18:d3:0f:90:ed:1f:0c:d5:8a:7d:d2:a1:
26:6d:9a:d7:66:96:ef:c1:25:a8:83:e5:ce:da:35:57:c2:31:
86:4e:26:f9:9a:e6:b5:e1:71:1b:e9:2a:f8:48:52:78:cd:35:
10:72:7e:11:95:28:5e:48:ec:a4:f2:62:a5:f5:4b:47:f7:39:
22:14:27:44:89:2e:59:2c:6f:ad:60:63:39:aa:e2:d0:e4:31:
f2:ab:04:df:ea:31:ee:a5:9e:9c:dc:61:47:c7:33:b1:79:01:
28:ea:fb:56:65:ef:f4:03:8d:6f:14:47:14:31:92:7e:26:5d:
52:b5:89:6e:32:31:e3:e7:8c:68:b0:fd:34:6e:e2:ce:db:96:
d2:1d:58:b9:6b:ff:d0:c9:fc:3b:10:10:44:fa:d3:65:cd:9f:
99:a0:65:62:d0:3f:75:89:53:c2:a6:be:c5:d2:77:db:cd:af:
07:ef:64:07:2f:1f:b9:ff:75:1a:0f:85:25:0e:49:d1:7e:21:
38:7d:1f:f2:d3:57:19:59:7f:39:6d:61:cb:0e:da:9c:74:e7:
8f:f3:d4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:20 2025 by rpki-client