Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File: Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier: So24RT4IAQ8vD9oZ2cD+XlOt3dKMoOWcH9E+Aa98NEk=
Subject key identifier: B3:58:E8:7C:81:91:DD:6A:3D:2F:DF:5F:8F:D3:3D:3E:C7:17:BE:88
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer: /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial: 0197B6A1E5E95D51D9F7F65D417F5D3A2879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number: 05CC
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: SI38a8deezl0yjNxs20760XZ+EjbNBJmKYELDyCkwxE=)
2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e5:e9:5d:51:d9:f7:f6:5d:41:7f:5d:3a:28:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=b358e87c8191dd6a3d2fdf5f8fd33d3ec717be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:75:aa:6e:e8:78:a5:c5:09:e3:2b:e1:d2:
6f:ab:18:e8:11:9e:cd:00:8d:77:4c:96:b2:b6:2e:
20:6b:9a:e0:92:de:58:dd:70:e7:75:93:26:08:19:
69:e3:be:6c:6d:87:50:5a:54:4c:db:5c:12:a8:2c:
62:45:68:49:bc:1f:e6:cc:0b:80:ae:d1:77:f2:eb:
f6:47:fc:1b:e4:4f:5a:46:ea:08:82:fd:74:84:cb:
c3:ee:5b:c7:a2:a4:93:ad:aa:59:d9:e0:65:36:2e:
3b:0b:e8:35:59:39:00:b7:e9:70:7f:8f:a4:67:95:
d8:f6:89:10:c1:92:80:58:3f:b1:f7:a6:5f:16:bd:
c5:b0:9c:ab:33:22:e9:22:8c:01:64:7a:5f:d2:b7:
9a:b3:f7:a7:95:c4:af:ed:bf:f8:7a:31:0e:5a:8f:
10:de:ec:af:45:c6:a4:11:05:76:ec:12:ed:46:c8:
a9:9f:97:53:ef:65:55:d1:da:df:91:b3:92:f3:d4:
f8:2a:c3:d7:65:7e:d2:b2:ee:cc:a2:11:65:7a:4a:
4d:d6:a2:26:4e:c4:86:d4:2d:84:79:d6:c0:b5:70:
f5:25:58:47:09:26:cb:b6:bc:22:b1:47:ee:10:9b:
eb:df:22:f1:6e:70:ab:e3:1f:fb:c8:04:a8:da:8a:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:58:E8:7C:81:91:DD:6A:3D:2F:DF:5F:8F:D3:3D:3E:C7:17:BE:88
X509v3 Authority Key Identifier:
keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e4:94:fd:26:ec:37:e5:cd:74:4e:aa:7a:2e:6e:05:a8:d9:
25:5e:5d:89:66:5a:63:c3:24:27:9c:f1:8a:2a:fe:89:6d:20:
cc:19:47:c1:a6:a6:9b:b6:d9:ea:65:f4:4f:35:34:d1:c2:1a:
6c:bc:7f:07:13:38:ce:c6:47:78:2a:96:eb:1f:d0:f5:ae:0b:
64:28:0d:fd:ee:2d:8f:cd:3a:29:84:8b:70:8d:32:fe:a1:3c:
61:9e:a1:71:73:fb:d6:1e:58:e7:5d:72:28:d2:47:0b:75:6b:
c1:59:68:15:a0:81:c0:49:90:5b:37:0b:58:4a:c4:56:80:58:
58:e8:3a:4a:5b:22:32:95:38:09:6a:61:ce:0e:56:f9:fd:1c:
3c:eb:40:13:74:21:ae:ed:51:f3:a5:57:0d:00:f9:34:2e:9e:
0d:d8:06:24:6c:4c:89:83:60:b6:9f:c1:d7:96:1b:f5:af:96:
0b:a5:78:7c:b1:24:53:2c:fd:7d:62:7d:32:e7:81:86:ef:9e:
a0:c7:81:76:59:e7:31:f9:ad:48:48:5b:9d:2b:25:eb:e8:f8:
2c:58:7a:da:02:da:3c:3c:6d:3d:9f:06:f8:78:8b:38:f1:03:
29:8b:ce:ad:ee:d7:1f:1b:9b:2b:d5:59:68:21:53:be:8b:87:
e6:be:66:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:17 2025 by rpki-client