Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: tbU63aB1zTdYLHKWntxlJpsTmV57m1VT9sSOK5oCEGE=
Subject key identifier: A6:2A:16:C4:EB:29:86:3A:47:D7:95:31:0C:BB:01:1F:15:D9:35:4B
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019873AAD6AFC726F6B908F5CA1BBB362420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 0587
Signing time: Mon 04 Aug 2025 06:00:32 +0000
Manifest this update: Mon 04 Aug 2025 06:00:32 +0000
Manifest next update: Tue 05 Aug 2025 06:00:32 +0000
Files and hashes: 1: ADwJyFTnSoqJo76cybY4gze7w-A.roa (hash: ywnZb2Gs7P4sK9InqI7FaEEZlSRwjtQHnM1qlayDDgw=)
2: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: 5BTwPtI1sWtPbaGnCAXFNWykdDWpTSB2O2v0d9iyVng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:aa:d6:af:c7:26:f6:b9:08:f5:ca:1b:bb:36:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Aug 4 06:00:32 2025 GMT
Not After : Aug 5 06:00:32 2025 GMT
Subject: CN=a62a16c4eb29863a47d795310cbb011f15d9354b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:78:dc:f3:4f:86:a1:4a:00:bb:3b:70:ec:
47:fb:37:ba:3a:ac:ae:e5:b8:eb:11:bf:60:fa:81:
f4:63:96:ea:08:4c:b3:27:17:db:27:3a:ce:74:93:
c2:ce:de:3b:02:4b:9e:f5:c6:60:28:31:de:58:0e:
70:86:5d:02:46:eb:73:47:a9:80:a2:28:64:15:42:
c7:6f:44:82:50:60:ad:4b:c5:05:fc:b9:dc:67:04:
5b:ec:ae:25:2b:c5:88:c4:2d:a7:bd:80:9f:7b:35:
e5:3b:71:f6:98:ab:c2:a9:38:2f:db:15:6f:00:98:
d3:8f:f4:6b:cf:0c:37:fe:48:8e:3a:b8:3e:a3:16:
25:db:fa:09:1e:b0:5f:fd:44:ae:66:18:4f:f1:e4:
be:be:7c:bb:05:1c:63:9c:d1:ee:8b:6e:66:84:21:
89:d7:7a:29:10:21:0a:7c:49:fc:6c:7e:51:00:5d:
67:3d:41:d5:12:15:9b:50:57:27:36:b5:ad:7e:8c:
c8:48:8c:e2:3d:32:e3:66:99:67:69:d7:d0:7a:d6:
2a:32:79:93:8b:ce:42:93:11:aa:08:fa:e4:44:be:
11:25:a9:04:dd:83:f8:42:a7:dc:07:b9:55:95:97:
de:7c:96:d3:5c:57:b5:fd:0d:b6:b7:64:72:a6:c4:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2A:16:C4:EB:29:86:3A:47:D7:95:31:0C:BB:01:1F:15:D9:35:4B
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b2:6a:4a:7c:80:f6:b4:a8:a5:91:a8:fc:7b:77:14:4e:85:
a9:f2:07:a3:f5:a9:f1:05:5e:dc:62:5e:72:ce:35:38:4f:82:
8f:69:6f:4b:02:7f:a4:39:9a:3e:6e:c1:be:7f:c9:2d:69:87:
5a:4f:f2:87:50:8c:a3:19:17:d6:2b:b5:19:60:01:d3:e9:4d:
0a:78:54:0a:50:45:29:30:42:5e:ab:11:da:b1:bd:53:c2:ee:
65:78:9b:85:73:ee:ce:fd:be:6c:70:59:14:db:94:7b:3b:6f:
a4:0f:13:01:a1:5d:88:78:8a:88:ca:38:ca:5a:62:d4:f0:fa:
ec:22:ee:23:79:31:98:ef:08:cf:cf:a1:5a:31:4f:9b:df:57:
55:cc:9c:17:55:0c:cd:f7:ce:94:0e:d0:e7:71:3b:a9:64:da:
2c:5b:35:de:0e:92:26:b9:b4:bf:c0:5d:18:66:56:a0:a6:20:
8b:34:f5:fd:47:eb:55:42:6d:ef:bf:4c:4e:af:55:d3:0f:09:
a4:2c:4c:92:a1:08:fd:60:18:b7:c7:7e:02:61:d8:75:2d:4e:
74:7a:06:33:87:fd:ce:97:ee:3b:bf:a6:95:88:4f:08:65:ca:
1f:2f:d4:02:6e:44:72:48:3e:e1:7e:55:2a:13:8e:42:71:de:
69:10:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:24 2025 by rpki-client