Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: 5s+6lSvjM/C3lWVpdw+ZefeWmq9+ll87QBjmNmvu4eE=
Subject key identifier: E8:E8:2E:23:98:40:A9:84:E4:39:02:BA:ED:FF:A2:0A:27:52:85:41
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 0197B7457091B9829783F9D545D2E5FE7246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 032B
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=)
2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: RN6yGO6mmSD2gnnNmaCvluElBU/J+9hadBK3jIEIrAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:70:91:b9:82:97:83:f9:d5:45:d2:e5:fe:72:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=e8e82e239840a984e43902baedffa20a27528541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:fd:73:cc:36:0e:d8:48:29:aa:c0:01:3c:
1c:2e:04:96:bb:28:a0:84:0a:a6:d8:fb:78:6e:d8:
8e:c5:8b:c1:3a:93:5d:31:f8:5a:f5:fe:25:67:99:
1a:e4:49:1e:bb:1c:97:44:4b:a2:9a:d7:39:01:bd:
1a:cc:f1:02:ac:77:61:f5:73:69:23:3a:97:75:3d:
e8:93:78:af:e1:b9:ec:80:de:b6:2b:9b:65:82:a4:
d7:c4:2c:f0:da:e1:9c:da:44:60:f8:f2:a6:5f:31:
df:fe:2a:62:b8:ec:a3:90:55:a6:11:f7:41:f7:8d:
30:77:40:32:d1:8f:63:f7:f1:80:42:6c:f2:b2:45:
c8:a2:66:a3:a0:f0:52:48:75:71:16:8c:83:57:f2:
1d:50:e7:bd:b5:64:2e:4d:85:3b:20:51:ba:02:84:
17:da:c5:0d:69:5b:f9:89:23:03:f1:2f:e4:fe:02:
f4:ed:6a:c8:6c:12:10:b6:fa:37:5b:6c:fc:8a:c2:
65:00:24:ea:fa:4a:81:0d:57:fe:46:0a:36:6f:7f:
21:f1:83:ed:b1:dd:f3:21:d8:72:95:3f:e7:1d:17:
c9:dd:b1:fa:8e:a2:ae:cf:82:6c:8b:79:aa:51:9b:
a8:b5:61:b4:a7:fa:18:91:73:6b:68:bb:7e:85:d9:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E8:2E:23:98:40:A9:84:E4:39:02:BA:ED:FF:A2:0A:27:52:85:41
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:57:06:04:2e:20:35:9b:36:03:35:d2:7b:69:60:a0:34:ec:
ea:2e:d1:0f:94:de:1f:6d:13:c4:74:b0:4b:01:06:2d:c9:38:
9a:79:06:7b:49:e7:5d:9e:b5:a3:e0:7e:62:e2:dc:48:e1:c8:
9e:36:ee:57:ac:dd:55:6e:10:94:b4:34:f9:1e:f6:7a:21:04:
30:32:0a:7f:7a:3e:af:48:dc:2f:8a:48:0c:22:47:a3:6c:13:
e0:79:d7:84:96:d8:10:2d:ad:73:cb:ae:56:aa:14:74:da:e4:
aa:98:54:19:9f:67:4f:8c:ae:11:d0:12:1e:08:d8:31:15:39:
6f:ee:d7:d9:5a:a4:a1:ac:6d:1b:42:6a:17:9c:c2:48:59:c2:
08:3b:e0:e0:e7:eb:70:4d:42:e2:87:ce:ec:fa:75:4b:83:b8:
8e:06:de:76:43:75:10:15:44:cf:9f:a3:02:4c:26:00:16:0c:
05:13:10:ed:b5:0b:ae:d7:1d:b8:da:a2:27:b7:96:ba:7a:93:
7a:d4:06:f6:02:2a:23:af:37:ac:37:08:c2:47:80:5a:14:3d:
25:bb:d5:f9:20:96:54:f1:7f:6c:cf:e6:f1:5e:e8:bd:9a:09:
16:03:df:59:53:af:86:64:75:a8:2b:95:84:f0:39:1e:e4:fd:
e9:bc:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:34 2025 by rpki-client