Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: dShITV/MJCOIXusYw8D5AUuHE/7VGZwuo9HDHqThReA=
Subject key identifier: 79:FF:A8:16:AD:55:50:EE:56:9C:CA:C6:FF:08:63:EB:44:4C:6A:75
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 0197B7459EE2E53517167A6ECE8BF65A1E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 11B9
Signing time: Sat 28 Jun 2025 16:01:22 +0000
Manifest this update: Sat 28 Jun 2025 16:01:22 +0000
Manifest next update: Sun 29 Jun 2025 16:01:22 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: evw34fVcQB6wvlMZv2M8liH5rnFsAhPXukuSAkhO7Mw=)
2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9e:e2:e5:35:17:16:7a:6e:ce:8b:f6:5a:1e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Jun 28 16:01:22 2025 GMT
Not After : Jun 29 16:01:22 2025 GMT
Subject: CN=79ffa816ad5550ee569ccac6ff0863eb444c6a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:3c:5e:e4:96:54:62:7d:f0:3b:69:6a:e2:
7f:04:f1:1e:ce:3d:0c:e9:12:0c:13:2c:2c:2e:07:
82:99:2a:65:81:b3:81:f8:f2:e3:b3:93:8f:a4:51:
e3:a0:69:38:7b:29:6a:b0:d5:29:98:5a:3b:77:d5:
e7:ba:d1:30:71:a0:58:4e:60:84:49:d4:5c:40:29:
ff:0d:83:0d:bb:c0:ba:13:3f:3b:b4:bc:78:1e:98:
0a:60:f0:5c:25:b2:8c:f1:f4:77:06:4c:0b:34:c0:
56:b5:40:08:bd:95:f4:17:c7:db:e3:85:d2:05:a5:
ce:25:0a:d8:d3:d3:26:41:0c:ca:e2:78:4b:2a:0d:
8d:a9:8b:af:f4:a6:16:1b:aa:60:84:65:91:75:9e:
16:81:63:92:53:0a:f2:88:ed:89:eb:27:01:0d:4b:
b6:42:c2:b6:a5:f5:7f:08:b0:05:a2:f7:21:75:bf:
5e:d3:b9:bf:e1:43:ae:fc:31:80:6d:8d:93:0a:d1:
5d:9f:d3:50:42:d7:e4:e1:cd:c2:b3:ff:d5:5f:49:
16:da:ed:01:0f:39:67:8f:28:d7:a6:13:de:64:c6:
33:09:a3:5a:c0:db:89:63:d5:87:02:af:38:ed:a7:
d3:aa:38:72:d0:c1:c9:ad:3d:cb:d8:f3:fc:ac:35:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FF:A8:16:AD:55:50:EE:56:9C:CA:C6:FF:08:63:EB:44:4C:6A:75
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:67:3e:4d:a3:b8:9d:97:7e:86:72:26:06:e6:db:4a:18:78:
08:6e:77:ab:11:ba:19:b6:a1:ba:56:dd:4e:02:fb:08:6b:64:
e0:db:63:25:2d:aa:53:e1:11:d6:b2:73:4b:48:2b:ca:19:17:
7d:2e:3b:27:ed:b5:b1:84:95:b1:72:ec:75:d0:dd:83:bd:11:
f3:76:cb:a2:9f:3f:73:f0:9b:80:c4:d4:d5:0b:0b:d0:d6:b3:
47:c3:ea:0e:7d:0c:9e:db:23:38:64:09:7b:5d:c4:9e:9d:59:
3f:d5:ec:a8:72:bb:b5:b5:15:93:35:45:04:6f:bb:81:bd:5b:
c0:fd:f2:f7:7d:5c:6a:8a:49:9b:a0:8e:b6:a3:d0:b0:a5:ca:
cd:47:0d:b4:d7:3c:93:1d:99:82:c6:87:ad:e4:fe:02:13:79:
82:60:c6:79:de:8b:b6:aa:0a:40:96:40:67:62:ba:fb:88:c8:
a4:e2:0d:52:8d:39:9b:b7:00:e5:13:35:a8:96:1e:24:af:51:
a3:f7:94:e4:84:bf:1b:bf:77:b3:99:91:2c:d1:a6:b0:89:ec:
11:60:c5:fc:34:de:a0:48:df:87:c8:c8:50:2b:87:f4:01:8a:
6d:8f:b0:09:61:e1:ae:dc:9b:ed:ff:22:2c:54:42:ae:6d:72:
31:f1:5d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:31 2025 by rpki-client