Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: +4thSpWFiRKBo3GtVb2axJrx1SRSMai5OcRY200LNI8=
Subject key identifier: 70:1E:56:89:1A:D1:8A:E2:F7:3E:2E:B5:F3:34:3F:AC:4C:49:72:CF
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 0197B70ED9160F8E5B6D22FA074B07F9A469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: pFlu8rZNBKiz3ySB9word90TxMGmLWSEcNF15o7hyQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d9:16:0f:8e:5b:6d:22:fa:07:4b:07:f9:a4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=701e56891ad18ae2f73e2eb5f3343fac4c4972cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:2e:de:86:a6:36:1a:ae:15:0c:d9:b5:73:
d7:fa:d1:56:93:fc:ab:33:60:42:2c:dc:ce:53:54:
7d:00:12:8b:e2:c5:49:2f:62:0e:27:62:9f:34:71:
7c:93:03:b2:b9:6b:19:14:21:62:ba:44:10:27:09:
79:a1:d8:41:f3:73:db:ac:66:84:6c:ed:17:c8:b5:
de:40:7a:7a:8a:ee:e7:bd:c1:31:68:51:47:b6:cd:
2d:48:51:26:bb:ef:e8:51:11:88:7a:06:91:89:c0:
ed:f1:21:ea:9f:0e:75:e5:c7:c8:49:91:60:8b:b4:
77:37:30:61:f5:4b:3c:01:fb:14:5d:d7:f2:54:f6:
37:fb:b4:10:41:d2:e8:f7:f7:c1:98:a6:27:b8:43:
7f:a0:fe:3e:6f:d4:92:a7:71:f2:47:f8:01:ed:10:
ca:07:69:2c:59:f0:4f:15:97:85:c1:7b:3c:aa:76:
67:9a:f7:eb:d0:71:f2:b2:83:8f:82:8c:51:52:ca:
bd:b7:fe:ec:6b:ed:af:6d:18:d0:a5:ca:4e:60:67:
d5:6c:03:6a:79:2d:4b:ef:10:25:a9:87:00:8b:db:
d3:24:85:3c:51:b8:41:44:9f:4c:b6:03:59:f4:8e:
5c:f2:2f:a8:d7:6e:94:8e:79:42:b2:d8:ef:9f:48:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1E:56:89:1A:D1:8A:E2:F7:3E:2E:B5:F3:34:3F:AC:4C:49:72:CF
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3d:74:be:29:b2:b2:f6:69:76:0b:cd:c0:d3:92:fb:41:25:
57:82:fa:49:40:51:ce:38:84:6e:04:54:28:5d:14:63:11:c7:
c1:a3:d0:ff:41:3a:89:95:75:01:fc:6b:f9:a0:e1:26:d5:1c:
db:b2:2b:fd:a0:84:fd:f7:9c:1f:f6:c3:95:92:1f:52:b0:2a:
cf:00:d9:33:46:c4:d5:72:02:c3:d3:f1:3e:0c:7a:f4:ad:da:
d6:f5:ce:9a:a8:ae:09:76:29:d4:00:df:61:93:b4:5e:29:23:
58:ed:0f:d5:3f:b1:90:86:d6:7e:56:cf:22:3a:05:8b:6e:5c:
40:b0:60:08:f5:ca:17:1d:52:9c:82:d4:59:a3:1b:55:f7:54:
a1:51:03:2d:bf:be:b7:cf:7f:1a:b7:69:6a:8f:23:23:e5:71:
06:ed:35:3a:4d:00:ca:06:62:0e:82:94:10:2c:3d:00:d5:1f:
31:09:b1:3d:94:2c:98:94:7c:eb:74:a9:41:5d:27:fa:ee:32:
ad:94:7d:8d:6d:bd:ad:64:12:21:8f:98:9e:19:de:33:3f:9e:
55:35:b5:40:1b:99:8e:b1:4b:94:d5:c1:fb:cc:86:81:18:73:
76:da:8e:c0:63:5c:e6:7d:4e:b6:c3:94:e6:a5:89:ae:4b:43:
3e:c3:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:33 2025 by rpki-client