Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: zOohjNGp086iqf+rErm75tKBAW/+o/7QfnTold/igO4=
Subject key identifier: C3:63:4D:C8:CA:43:B5:AD:52:07:AC:3E:28:B1:62:78:17:15:F5:3D
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 0197BA0F66801187A1CDE91ED1753E8F2421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 12EE
Signing time: Sun 29 Jun 2025 05:01:00 +0000
Manifest this update: Sun 29 Jun 2025 05:01:00 +0000
Manifest next update: Mon 30 Jun 2025 05:01:00 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: g7h4iZxYz2IYXHF5KyBzlGX3uOPhTEvHzfgDP+M6z3U=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:66:80:11:87:a1:cd:e9:1e:d1:75:3e:8f:24:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Jun 29 05:01:00 2025 GMT
Not After : Jun 30 05:01:00 2025 GMT
Subject: CN=c3634dc8ca43b5ad5207ac3e28b162781715f53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:20:17:45:91:62:4d:01:93:e2:29:05:87:
ad:e4:19:7a:17:d3:fa:bd:0f:87:7c:d1:62:6b:76:
08:b6:66:8e:81:10:99:ae:36:c9:c6:75:3e:43:8b:
36:50:80:aa:a1:05:be:66:c8:d0:4d:5a:cd:ba:a6:
6f:ca:db:9f:a4:8e:26:f5:99:66:ff:6f:00:64:db:
3f:30:5c:4d:9e:0f:ea:8c:ae:f6:fb:dc:3d:79:72:
19:55:53:34:1e:60:63:7f:d9:dc:5d:a3:3f:ce:a7:
bc:b9:54:93:f7:e1:48:43:37:e6:fe:92:be:fa:51:
f8:d1:07:60:bf:ec:17:1b:cd:8a:61:c8:be:ef:44:
e8:b7:e7:17:8e:29:11:40:13:53:2e:24:76:5b:70:
31:d9:9c:90:dd:d9:66:2c:33:38:8f:ba:90:a7:40:
dc:3d:47:b2:c1:28:6a:8e:b3:28:67:b6:2e:15:78:
4e:bb:2a:d1:40:95:a2:97:a3:a0:93:b4:d9:04:96:
68:71:fb:08:fd:f6:4d:6a:e6:05:a1:26:ff:e3:5c:
a6:a7:7d:a6:de:43:b3:29:34:7a:dd:a2:f2:8b:1a:
de:1a:ee:a3:35:16:23:c0:73:f0:87:41:f7:fb:62:
f5:76:8b:fd:f9:a9:a0:57:6b:b8:74:0c:59:2d:cd:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:63:4D:C8:CA:43:B5:AD:52:07:AC:3E:28:B1:62:78:17:15:F5:3D
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:55:fa:40:66:c5:75:52:55:7e:4c:c0:43:1b:00:c3:96:37:
6a:d8:60:54:d0:fd:da:df:71:f0:dd:d0:a4:5e:cf:05:72:c5:
5b:dd:3a:04:c7:b0:57:23:f3:6e:83:31:1e:d5:18:af:19:e6:
33:c8:ba:99:ae:90:02:0c:88:6f:3a:91:d2:8a:49:fe:b2:a0:
fe:d5:52:76:99:6e:eb:f5:8b:75:27:b9:0c:c1:04:63:02:d2:
cc:03:ef:dd:5f:21:97:9d:78:12:0b:4a:ea:24:f2:e3:cb:e1:
0f:d0:bf:bb:c1:18:b9:cd:14:d7:40:90:ec:83:12:b6:8b:b2:
db:8b:cf:98:07:d6:f4:01:88:8e:8d:2d:15:93:0e:44:a8:d1:
bf:ba:88:9f:8b:8d:17:66:0a:9b:08:5f:8e:9e:f4:06:ad:73:
1e:24:1f:81:d9:8d:f7:c3:8f:90:8e:96:a1:29:d4:27:7b:6f:
68:00:05:ef:37:65:a0:b9:f6:91:ff:29:55:7f:2b:ad:2c:d6:
8f:91:d5:e5:c1:f5:b1:aa:4f:46:c8:d9:44:a7:24:7b:ad:7f:
0b:de:7c:56:3a:97:7a:4d:5c:7e:48:1e:d3:77:52:35:2f:0a:
aa:46:03:14:19:c3:ff:77:46:fa:50:d1:4a:ed:b6:1d:21:c6:
e7:14:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:46:52 2025 by rpki-client