Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: cH2PH1jlRqSctZ9cQ7faQOGluQqzR6DiUCZ6iFP3ddo=
Subject key identifier: 45:CF:0D:8B:DF:97:FD:4E:D0:9F:F1:A8:13:52:47:22:57:A7:AB:5F
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 0197B77C7972ABB14E0B8C91CFFC30A3DBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: 42WLS8McTTfF6qYaM5TNk+SCQBpzHtgc4WbyAMTVEiE=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:79:72:ab:b1:4e:0b:8c:91:cf:fc:30:a3:db:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=45cf0d8bdf97fd4ed09ff1a81352472257a7ab5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:96:21:45:38:bd:fb:99:35:5b:4a:d8:aa:3e:
75:27:63:5e:85:c4:a7:57:22:24:a9:5e:b8:12:9a:
7a:a6:46:8d:70:ad:cf:0c:2c:9d:4d:33:3d:47:e2:
eb:cf:2c:5f:7e:57:7e:26:1a:7f:e5:57:99:6b:bc:
23:25:14:29:cd:26:12:d2:9c:d7:4f:d3:e7:c5:43:
34:32:69:90:fa:2c:f0:8d:95:e7:d2:fd:27:63:b2:
6f:b3:8e:7a:2f:33:d8:fe:ef:3e:f8:7a:52:53:10:
72:75:8e:1c:fb:2e:68:c5:ad:db:cc:ea:dd:7a:55:
a8:3e:38:e9:2f:14:f4:12:a7:f0:8f:5b:95:06:ea:
91:d6:60:e6:04:0f:3c:18:92:21:cd:37:bd:f4:9c:
5b:f4:84:bc:1d:ba:08:e4:65:1e:e5:1c:51:14:2f:
cc:06:34:b4:2b:26:17:ec:db:8f:8e:2e:08:27:8f:
4a:96:da:e0:c8:d1:8e:50:b4:a9:e7:e5:40:9e:07:
b4:cd:da:10:a2:ff:d5:c1:a7:f5:39:74:28:91:f8:
bc:d9:9d:49:88:5f:63:c7:9f:3d:fc:b0:6a:c1:3c:
49:dc:34:6e:d8:c8:ef:e2:cb:7d:91:05:1c:e8:77:
d5:ab:b1:c9:82:fd:9f:dd:ab:58:73:27:a2:31:1e:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CF:0D:8B:DF:97:FD:4E:D0:9F:F1:A8:13:52:47:22:57:A7:AB:5F
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d7:d9:d7:a7:f5:9f:11:04:73:a8:3d:94:88:8d:59:e0:95:
8d:61:1e:19:6f:78:71:82:83:f7:33:11:05:e0:25:4f:2b:03:
3a:4f:ed:32:a9:1d:00:5e:61:2e:f7:b5:74:1c:26:46:46:c7:
cc:c1:8e:cf:8b:0f:26:40:7c:54:0a:da:31:e9:e3:c1:85:d7:
c4:5f:46:4e:13:ee:ff:c7:c4:83:71:bb:f6:65:57:c5:59:13:
93:98:df:d1:1b:05:27:3c:57:e2:47:37:69:13:2c:ed:89:07:
fa:34:c4:8b:07:d4:04:fb:11:10:7e:86:64:9c:af:8f:c1:18:
2d:77:ac:5b:bd:b0:92:47:da:af:47:72:7d:d8:66:84:0e:06:
34:6c:18:a6:11:eb:c6:3f:f0:a2:af:41:12:97:c2:44:fe:f0:
1c:cb:1c:4b:42:a4:ae:00:26:89:59:8b:f5:2e:92:b1:96:7f:
93:10:16:e3:00:f6:22:d1:22:9b:77:c9:48:78:fd:27:ba:78:
e7:b5:d0:37:a5:c5:c6:e8:56:8d:9d:2f:27:7f:75:bd:b8:a2:
0c:6e:94:44:45:0d:65:09:9b:e5:aa:89:c5:5b:a0:fe:95:e4:
f7:6c:ec:ac:b4:fa:8e:f2:31:ce:bd:5a:69:e7:e5:e0:b1:1e:
6f:f6:cc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:53 2025 by rpki-client