Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: UvxCce4XOm5ET01+P/aECEZkXniIbZLDHaQIrOX0XgQ=
Subject key identifier: B9:44:BD:C8:53:0D:5D:F1:74:88:AF:74:0C:59:BB:24:11:91:78:36
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 0197B6A1AA8F3031E5DFEA6B0D1DAAC662C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=)
2: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: vdgR7vwpsptSsEFhCJwwN5xVDkVx8qwrA0Eu2wKqbGU=)
3: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=)
4: a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa (hash: 9QeK1R+lwAXK6vSpE67n1ijYEIdp5QQxcwabJABYuQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:aa:8f:30:31:e5:df:ea:6b:0d:1d:aa:c6:62:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=b944bdc8530d5df17488af740c59bb2411917836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:22:2f:df:cd:89:42:95:6f:ed:4b:f1:4a:
ae:8c:90:db:24:33:cb:53:1d:2a:51:8b:e9:d6:ff:
97:41:75:75:71:be:48:b8:f4:40:b5:0d:93:b5:15:
65:94:4e:d4:08:19:f9:21:79:23:3f:59:29:71:ab:
62:dc:44:35:4f:e1:4d:5a:2e:76:e6:76:5e:27:9c:
c8:58:39:73:43:dd:d4:4b:c4:b6:f8:08:99:70:9e:
1f:36:f3:16:2f:ec:8d:76:ab:81:3c:b2:ca:d9:60:
d0:56:28:4e:de:66:35:05:62:80:94:ae:44:9f:15:
f1:dd:5c:35:df:8c:0e:3f:f2:bd:37:12:9e:82:a4:
9c:c6:f7:05:97:c3:7a:63:9d:f8:64:e6:40:65:bf:
3c:3b:e4:6b:f1:3d:b3:99:02:31:36:0a:28:84:8f:
2a:48:6c:61:b5:33:8f:c1:95:86:e0:ae:10:2b:4a:
43:dd:92:36:f1:af:db:23:6f:86:dc:9e:7f:13:e8:
81:7a:16:ee:da:6d:8a:ea:34:07:0a:7a:08:ea:a3:
e8:d7:97:20:94:69:82:79:99:94:9f:54:20:e8:9a:
d7:ee:d1:6e:02:cd:b1:db:38:3c:04:fa:ee:1c:19:
84:5f:e7:9a:91:ef:65:d4:08:4d:f7:d6:62:73:6c:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:BD:C8:53:0D:5D:F1:74:88:AF:74:0C:59:BB:24:11:91:78:36
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:98:9c:21:df:4a:36:2d:6a:04:af:c5:4e:55:a8:f0:5d:5a:
f5:ee:be:49:b2:0c:da:d3:fd:49:e6:a6:e4:63:03:56:4d:05:
b0:3c:0f:65:3e:9a:c0:a3:76:67:df:f0:53:01:b0:97:8d:22:
ce:52:d5:92:86:b9:05:67:04:d2:b4:24:9f:28:fc:0b:0c:7b:
dd:98:74:1e:76:2b:41:a1:df:0c:75:08:f4:01:2a:22:72:e4:
41:60:23:42:97:05:8e:85:01:f5:4a:47:88:37:79:5c:8f:bc:
94:ee:57:db:99:07:af:40:c2:56:55:a0:dd:56:ce:5f:52:6c:
7e:53:6b:8e:3b:2b:30:08:1f:bd:0e:6d:1b:b4:d2:29:20:ce:
e7:7c:48:63:fe:ee:2c:fe:00:f4:37:80:55:8c:09:bb:a9:d2:
9e:30:0a:95:0a:3b:9b:f0:6c:c9:09:35:f3:39:8e:2d:01:28:
d6:3a:ae:3e:8e:69:de:34:91:fe:89:c7:cc:41:e9:f3:48:e1:
cd:26:65:34:12:12:61:ab:2b:24:30:f7:01:53:9d:71:1e:95:
83:90:a7:a7:f9:ed:2b:cc:3d:e2:5f:d3:4a:46:2a:42:33:a7:
82:21:24:20:6a:d1:f2:ac:4a:be:33:0b:68:ac:6f:cc:a8:08:
5d:98:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:24 2025 by rpki-client