Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: tB5vdkQuLoIk40ZA98wErYSe3Pxt3+hM6CUrjFYncvQ=
Subject key identifier: C3:EF:AB:AE:53:52:6F:51:5D:E9:78:CB:44:75:30:05:67:D9:8C:E6
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 0197B70E7037BC9418DECDA3E2573E115DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: zAXFTGn5/a/EViF/ymfqvY1BD4Vtoz3YwuN69rKDmw0=)
2: TWeGvhRSmnN9ba3aLN_PX9mER2s.roa (hash: 6BkkLF5ZMW9w4BTie7IiuTOLhKMimv1AW7aDs2REbaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:70:37:bc:94:18:de:cd:a3:e2:57:3e:11:5d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=c3efabae53526f515de978cb4475300567d98ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:52:fb:f6:73:d0:7b:fe:4d:99:ed:60:4a:
e3:25:ab:76:96:d4:dd:3c:dc:bc:45:7b:08:94:36:
cd:32:0c:b1:df:3d:04:29:70:a2:82:4f:a2:5f:34:
3e:aa:32:5e:96:0e:d1:92:d3:af:2f:20:a0:c3:8e:
b2:fc:33:b6:b9:85:2a:7f:4f:f0:c9:aa:c0:dc:c7:
5a:ce:9f:60:e1:2a:b7:55:93:b4:20:51:7e:d5:53:
e5:91:dc:19:f5:87:0e:db:1c:e5:9b:09:ee:92:bd:
50:64:21:5b:92:bc:3a:38:67:5f:c7:cc:c2:06:bb:
ae:58:b6:65:9b:95:e5:bd:be:34:5b:0e:0f:2f:11:
16:e5:d0:ae:a4:96:5c:f2:a3:71:cd:7c:1b:0e:29:
02:8c:2b:97:40:93:48:fc:30:c6:40:5d:1a:4e:5b:
9c:8e:94:94:1c:ba:c3:db:c9:72:f9:8d:7f:3d:a5:
a7:8c:58:34:ee:55:1d:e2:bc:df:fe:ab:19:e0:3e:
61:09:d3:38:ba:46:71:75:2c:6a:dc:a8:f1:77:4b:
6e:a4:6d:fb:b6:7d:9d:e9:81:97:fa:ee:d9:eb:1b:
43:a3:57:ae:c9:84:1e:07:f3:3f:1e:e0:21:c2:5b:
0a:10:69:68:7b:5c:48:aa:ee:59:8c:c4:10:64:8d:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EF:AB:AE:53:52:6F:51:5D:E9:78:CB:44:75:30:05:67:D9:8C:E6
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:21:4f:fd:d6:0f:6a:ce:f5:af:ff:28:be:37:c4:29:8f:7e:
9c:dd:0e:42:ef:4b:5e:90:63:3a:6e:95:12:8c:0c:aa:85:a7:
09:19:3b:1b:ee:5e:15:08:6a:ca:dd:26:c0:2b:19:11:19:fd:
ba:f6:59:f7:62:76:17:1b:65:51:d2:c6:f4:c4:1d:1a:db:ad:
96:36:e1:b9:29:4e:7b:6a:8d:8f:a4:66:b8:13:80:d4:7a:b3:
22:ce:0c:86:e5:5e:a6:d6:a4:2c:76:ec:2a:b3:00:17:a4:86:
f6:9b:f5:ba:c7:b4:1a:e7:e2:e3:44:46:30:9e:2b:08:b1:3d:
54:44:2e:fb:fa:6b:13:63:5a:28:a5:3f:67:71:69:22:cf:2a:
77:de:4c:60:49:a3:93:14:9d:fe:e4:8d:96:fd:d1:72:6b:b5:
e3:72:7b:93:00:b0:22:9f:f6:7b:f4:4a:cd:34:93:88:e4:71:
e0:31:3c:27:bb:a1:3e:52:13:55:88:f3:24:ce:29:29:6e:b3:
e8:29:5b:cd:ad:d5:b9:bb:2b:0c:dd:c9:7a:22:b6:e8:f1:3c:
d4:aa:7a:be:5e:11:b5:14:e6:7d:ac:35:3f:61:d9:39:a0:0c:
20:b2:16:7b:0c:e5:40:be:7b:18:46:ba:8f:61:5c:86:a2:3c:
26:f2:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:28 2025 by rpki-client