Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json)
Hash identifier: 0P3/9TjHEDNBvYhkmT2MohYesp+eev3mdF9kZzeFMYA=
Subject key identifier: 3C:B0:22:4A:12:77:1E:D9:95:46:68:25:CA:5D:DE:60:23:99:1C:A6
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 0197B6D7AD6CB757A01ACEF4BE2E7340EB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
Manifest number: 1019
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: 3vAI5qAvkXeY9lMu18Kna/1C2x/WUUixz0WvUaQHtC4=)
2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ad:6c:b7:57:a0:1a:ce:f4:be:2e:73:40:eb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=3cb0224a12771ed995466825ca5dde6023991ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:18:22:e9:a7:ae:52:29:fd:ef:23:e1:12:af:
be:b1:b3:1b:86:d2:78:22:c9:34:fa:62:e7:e9:fb:
4e:a7:2f:a6:c4:18:a7:d2:e4:3f:55:79:f9:34:78:
b0:aa:33:8f:b6:e9:aa:1d:7e:52:b1:b2:fe:e9:31:
19:c4:fa:87:2e:ad:a2:c4:87:19:b3:ff:ad:a5:d9:
10:04:94:be:61:a3:06:59:80:bc:c0:28:14:ff:9d:
5f:22:5f:bb:26:cb:03:7e:b9:30:6a:58:c5:ef:dd:
8f:4a:4d:83:88:d8:d0:45:5f:09:9f:56:de:72:3e:
56:61:e7:61:c9:b3:0d:d9:26:a1:ae:66:ff:c9:f8:
68:c4:b7:76:e6:53:8b:eb:ec:76:a7:37:aa:37:06:
a8:eb:0f:f6:95:01:87:ce:5c:9e:8c:58:1e:e6:a4:
27:63:83:8c:9e:93:06:6a:43:0c:57:6b:ba:9d:0c:
90:04:63:fd:76:55:84:ad:83:62:2f:96:e1:b7:d6:
d7:70:55:65:b7:89:aa:25:f6:87:73:2f:98:63:70:
ca:1f:a3:e1:9d:e0:13:1b:62:9a:45:fd:17:24:a5:
da:f5:73:f2:03:b4:ca:7e:aa:86:64:c1:29:d3:e3:
b4:27:34:62:d7:ba:f5:d5:4a:11:70:5b:51:97:83:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:22:4A:12:77:1E:D9:95:46:68:25:CA:5D:DE:60:23:99:1C:A6
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:02:93:4e:21:f7:81:08:0a:ee:13:9c:68:af:28:29:36:f5:
ac:cd:53:ca:cd:bd:df:06:cb:f3:8a:6f:65:4f:57:b2:31:be:
90:b8:2c:5d:68:b3:41:66:d0:69:13:5f:5b:a4:ac:1a:9d:33:
19:ba:ba:4e:77:25:94:51:26:44:6c:e0:1c:3e:63:d9:d1:64:
21:2a:70:c4:46:28:d6:41:56:19:57:61:53:7e:78:79:f0:1d:
fe:3c:2c:93:40:10:4f:aa:c5:8c:a1:39:d9:c2:e0:dd:61:39:
f8:1a:36:a7:da:72:48:cf:be:72:b1:c0:e1:55:37:51:27:81:
de:fb:87:e9:3a:13:b0:16:f5:a2:67:fb:b2:ba:a7:8f:01:86:
ba:14:75:13:dd:91:a7:05:f7:26:98:2b:58:2d:66:6d:ab:2f:
f9:8e:77:cf:48:c6:11:6b:6f:8f:e6:6d:1d:16:d6:b4:3d:af:
a1:de:cd:ca:cd:f0:64:1f:15:04:be:c9:0f:fc:7f:de:84:77:
f1:64:66:e8:6f:af:24:29:22:69:89:a9:76:7c:ab:f3:32:61:
42:48:4a:91:f3:7a:a8:e6:87:19:7c:5f:3f:20:bd:4a:f9:00:
03:50:eb:af:06:05:4a:67:22:67:0b:86:f9:cc:8a:8e:7d:8b:
a9:72:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:55 2025 by rpki-client