Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: nQPrGHynVcjgYMDRq/lSpTRaIH/0yCqZoSHXohDlJ0g=
Subject key identifier: 8C:D6:2F:65:D8:41:9C:7D:26:2F:77:E8:CB:6D:72:BD:79:23:C8:64
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 0197C3132357640D6450CE2C4E9631EA55AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 15BA
Signing time: Mon 30 Jun 2025 23:01:40 +0000
Manifest this update: Mon 30 Jun 2025 23:01:40 +0000
Manifest next update: Tue 01 Jul 2025 23:01:40 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: MO3aJhAp9NOv3i4/rdJBJxX8LQ2mnInNzs53TSczlC0=)
2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:13:23:57:64:0d:64:50:ce:2c:4e:96:31:ea:55:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Jun 30 23:01:40 2025 GMT
Not After : Jul 1 23:01:40 2025 GMT
Subject: CN=8cd62f65d8419c7d262f77e8cb6d72bd7923c864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:c6:e3:00:88:90:e5:4f:bd:c8:6b:5c:f3:
01:03:2e:4a:91:b5:73:19:f7:ec:5e:2e:cc:94:c0:
c5:fb:e7:f2:70:dd:d4:66:98:6c:55:41:97:83:61:
ad:91:1d:a6:03:12:08:7e:1b:00:71:07:41:56:79:
12:d2:34:8d:33:17:04:fa:2c:aa:ed:33:68:4d:c0:
36:11:38:75:5a:26:8b:2d:04:e7:94:d2:37:cb:09:
23:a2:07:fe:bb:51:cb:a5:a3:56:3c:40:d6:4f:51:
1c:7b:e7:46:1c:62:11:36:95:d2:08:8f:b1:b8:a2:
b0:a0:08:24:5b:01:cc:00:09:96:e2:c9:cb:d8:09:
c6:1e:d1:e8:15:6d:36:6a:2e:81:23:a7:b0:5d:b9:
2a:d1:5b:e4:76:e4:aa:a9:73:28:1d:b2:ab:54:7f:
5e:15:7c:ff:d0:84:95:13:10:9c:e8:8d:7a:a0:61:
c8:1e:0c:bd:a8:9b:6b:66:e0:6b:98:55:7d:40:e8:
fe:ee:ad:ef:fd:a3:0f:90:d4:b4:f7:6a:00:fc:cb:
ea:23:cb:aa:01:4c:a4:5e:dc:03:7e:34:13:ec:54:
6c:a6:d5:2b:40:37:0f:58:87:c8:77:c6:55:69:70:
db:9f:93:d1:cf:1a:80:dd:d0:1b:34:89:e0:00:fc:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D6:2F:65:D8:41:9C:7D:26:2F:77:E8:CB:6D:72:BD:79:23:C8:64
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9e:7a:a9:9f:bf:a8:b0:29:72:11:48:64:65:6e:69:0f:e2:
b8:18:34:7c:cc:14:6a:0b:77:4d:23:a6:40:8a:99:d1:09:e2:
a3:9f:48:b2:aa:51:2a:9e:95:e6:82:4e:ed:9f:ad:4f:63:60:
d8:25:5e:81:ab:c9:a5:91:d1:93:1b:84:cf:32:1e:b5:46:a4:
72:c5:e1:fc:35:74:d6:0e:28:bb:04:52:2b:5f:35:99:8e:5e:
7e:39:6c:43:14:69:85:2a:f4:0f:70:94:38:9b:9f:d2:0d:ca:
c2:5e:00:c1:47:ef:70:2d:93:8a:c5:e1:16:0c:52:c6:fd:76:
99:7b:27:d5:d4:1d:d1:3c:94:a0:97:5b:fc:fc:1a:40:41:7a:
02:41:63:97:9b:c4:b3:86:b7:53:14:b7:6c:d4:2d:ed:17:f0:
db:e4:2d:1e:36:7d:4d:33:78:01:ae:53:31:ef:c1:67:6b:27:
1d:2a:fc:84:b8:53:0d:6f:cd:a8:44:71:7c:b0:79:24:b0:06:
7b:3a:bd:c0:d8:e4:ab:27:6e:f1:14:a2:33:7b:e6:3f:57:ee:
4a:cc:81:cb:9a:2c:cb:8a:a1:b0:fe:b3:cf:34:30:8d:bb:59:
d2:d1:f4:15:6d:e6:15:01:e4:d0:33:a3:64:76:8c:e8:46:b7:
ee:d7:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:15:03 2025 by rpki-client