Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: TL0+wi5wHByOCM4/N514LBcPGUj1fSeigE//jLFMICU=
Subject key identifier: B6:FD:96:4A:4E:A3:C9:F8:0D:A2:0B:7E:61:37:93:BD:65:D0:C8:8C
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 0197B6A1FBD919C2FDCF5BC07499A7B8E130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 1379
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: Q/FU9RUf3iIh6Ri2KuOZt2/BUyD+nfLFlwTkVP9o1ok=)
2: o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa (hash: ju/o7BILnihNNjEqI90onU7QdzoVAl2fjP/NUv+3xWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fb:d9:19:c2:fd:cf:5b:c0:74:99:a7:b8:e1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=b6fd964a4ea3c9f80da20b7e613793bd65d0c88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:d7:f2:09:1b:5a:aa:6f:0c:83:53:6c:da:
12:a2:0e:4a:9c:ff:36:b1:20:9a:24:db:b8:5e:51:
b4:21:df:35:be:7d:2f:e0:87:a4:47:52:19:6f:ca:
6c:12:2e:c8:ce:1d:7f:66:fc:c2:cb:3b:da:bf:e2:
54:bc:26:06:09:a5:44:86:03:c3:69:b4:32:00:82:
4b:72:5e:ef:b6:dd:26:37:80:01:43:0e:1d:90:a9:
38:a1:02:25:f4:73:a5:8d:77:78:55:b4:fc:3c:32:
15:1d:b6:3f:fe:21:9b:64:7e:db:0c:10:15:04:da:
5b:99:9f:ba:e5:c1:93:36:59:f3:63:ed:28:f5:1d:
0c:56:ef:d7:0c:80:9b:ed:1a:66:d6:84:08:18:ed:
fd:e8:8c:48:a2:ed:93:43:fe:0a:26:19:2d:70:48:
0c:94:7a:d1:bf:de:1e:20:71:b1:84:64:ec:3e:94:
62:8b:0e:99:3d:96:66:59:8f:be:6d:7e:4b:25:c7:
24:f1:b1:8a:57:c7:0a:1a:90:0c:d0:e8:93:ec:81:
dc:c2:e2:76:b2:1e:ad:d0:c7:36:e0:49:df:bd:58:
bc:d9:f8:3f:30:c3:0e:e3:80:7e:19:17:fd:d3:71:
85:e7:42:43:4a:43:fb:87:93:d6:f6:63:d0:4b:90:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:96:4A:4E:A3:C9:F8:0D:A2:0B:7E:61:37:93:BD:65:D0:C8:8C
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3c:01:c3:78:b6:a6:53:40:64:3d:4a:44:9a:a0:2a:bd:5d:
d5:c8:0e:42:91:dd:81:9d:fd:ca:7a:e7:53:d7:20:00:c0:5b:
d7:b9:a0:92:63:53:71:3d:47:ee:6e:80:73:86:a5:55:a0:66:
e7:2b:97:49:81:27:47:4e:14:a1:37:0c:06:5d:50:3d:d9:36:
7d:52:1f:e3:74:0a:20:d7:24:b0:da:4a:3f:c7:7e:a0:b9:03:
a0:7e:7b:7f:8e:68:1b:6f:78:ac:26:e4:9e:dc:4b:01:8a:c1:
46:7e:25:7d:af:26:99:f7:07:49:21:88:9f:72:5d:e2:d5:6c:
cc:62:f7:de:c6:23:ec:b7:bc:62:95:ff:a0:4b:46:5f:db:aa:
7d:a7:f2:0e:11:03:f5:92:f2:97:f3:f0:88:db:cf:a4:93:0c:
20:67:bb:55:65:73:1e:11:d5:28:13:d3:a0:ef:0f:ca:d9:ae:
c0:bb:36:bc:47:a2:a5:5f:04:64:bc:a8:a5:0c:83:6a:c4:0f:
24:e8:a9:35:2b:52:5e:db:a3:03:09:da:73:c1:49:e1:3a:00:
05:ea:3c:53:76:d0:9c:dd:b9:7a:14:bd:05:c6:f6:3f:70:0e:
a3:aa:80:da:85:9a:3f:c0:f2:7e:74:fe:11:00:b3:7a:dc:dc:
ca:13:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:23 2025 by rpki-client