Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: /tVydv0tIHBtdMDZxlO0ZTRbqFkoM+RC9wbN3r3o/5Q=
Subject key identifier: CE:C4:F4:BD:96:C4:57:CD:61:DF:F0:E9:EA:8D:C9:7D:2E:AF:D5:75
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 0197B745A00C61B153ACD86E6BC5D4A47E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:22 +0000
Manifest this update: Sat 28 Jun 2025 16:01:22 +0000
Manifest next update: Sun 29 Jun 2025 16:01:22 +0000
Files and hashes: 1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: RaAjnZ5E03PYeutZ6M/c0rt3p9mNSFKi9oxZG6/V+Zg=)
2: w22fMY9NDCCcG4e2_IUcNQ_Kq9Q.roa (hash: pqPEuP/XkZYkW0RjNxblrG+NfoIqGAgVKY/Jqk/oP3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a0:0c:61:b1:53:ac:d8:6e:6b:c5:d4:a4:7e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Jun 28 16:01:22 2025 GMT
Not After : Jun 29 16:01:22 2025 GMT
Subject: CN=cec4f4bd96c457cd61dff0e9ea8dc97d2eafd575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:03:91:f8:b8:0b:0b:c4:4f:9c:df:70:ae:
7a:d4:91:97:33:4a:c1:94:10:a3:cc:9b:6f:9d:ee:
aa:ee:d0:10:bd:d8:16:cd:88:34:24:71:eb:42:87:
39:1f:33:af:04:7a:db:61:52:5c:64:b8:af:88:ea:
22:49:43:d2:5a:e0:ba:36:98:e5:16:47:fb:59:b6:
d1:04:a4:ee:f9:0e:f9:84:e1:3b:76:55:db:10:d2:
e4:60:44:bb:b9:37:77:3a:61:b0:8d:4b:a3:b9:2d:
dc:36:78:ee:51:62:7a:66:c2:47:97:95:f2:b4:71:
6f:58:43:f5:86:05:24:c9:49:fc:b3:6a:90:4d:ba:
6a:86:68:1d:44:3b:84:b3:ff:52:62:be:70:45:7e:
c5:6e:b5:87:58:76:8b:19:90:52:8e:63:e4:01:06:
93:6e:8a:6b:8c:79:11:0b:14:39:f6:ac:48:fe:45:
d3:b8:6b:e3:f2:0a:9b:f6:46:bd:18:35:89:28:6d:
40:01:f5:c8:6d:c7:f6:64:66:19:e5:a8:c5:31:e9:
68:7a:44:e5:54:f7:39:17:13:c1:03:88:07:41:dd:
0e:08:e7:34:85:ff:62:5a:ac:45:b1:4f:7b:cd:ad:
90:d3:dc:58:31:aa:f9:f0:2c:97:f1:aa:03:75:d2:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:F4:BD:96:C4:57:CD:61:DF:F0:E9:EA:8D:C9:7D:2E:AF:D5:75
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2e:18:d1:c7:35:d1:fd:d0:f7:0f:7a:50:b8:83:e0:d1:b6:
51:ca:e7:4b:01:95:6a:24:8b:ba:ae:82:20:a0:9d:b3:cd:05:
0f:c1:07:10:c4:a1:6f:e5:78:48:bc:71:5b:df:9f:06:75:76:
b9:ab:5e:2c:9f:c9:20:a7:9d:50:42:bf:a8:30:ab:be:ca:9c:
db:39:15:b9:6d:34:18:5f:69:f5:a9:e0:82:41:0b:d1:d5:a8:
ab:75:fb:10:1f:86:69:e7:20:71:dd:cb:c8:e7:41:fc:95:85:
22:ce:6f:b7:cc:87:2f:a5:f7:99:00:c5:b1:6f:87:98:9d:1b:
0f:7f:5d:db:6b:0f:17:7e:16:ca:8e:80:55:d6:4d:91:cd:9d:
7a:74:4f:59:67:86:ee:ab:e5:23:03:b9:07:d7:5d:a3:8a:06:
48:5e:7b:d0:d7:2a:26:86:eb:f4:f8:13:2f:23:b0:4a:9a:e4:
9f:f6:cb:0c:58:13:9f:4d:29:59:28:57:4a:00:8d:20:57:a3:
bc:b4:2c:fe:5d:35:3b:f9:91:5a:5f:22:9c:5a:99:1d:9e:ed:
c8:07:c8:f9:0c:fc:15:ec:a3:8a:f7:c3:71:7d:36:77:e6:ce:
30:61:a5:8e:0a:1e:53:08:f3:a7:f4:2d:6b:b9:b3:5e:1e:1b:
f6:ba:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:32 2025 by rpki-client