Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: yYzvsxGzBdsHJAZwDO/l2FIuIcpx078Vs2wFrAxXOuE=
Subject key identifier: 30:1D:7A:AA:A3:03:AC:6A:3D:9A:B2:21:60:00:02:EA:AC:70:84:27
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 01976BBD4FDDE7676731681FA4708C707074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:00:58 +0000
Manifest this update: Sat 14 Jun 2025 00:00:58 +0000
Manifest next update: Sun 15 Jun 2025 00:00:58 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: jBWEYIvz0FQoBFRfIbuGA4mzyc4ipWmLSZQ3aq9oK4o=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:4f:dd:e7:67:67:31:68:1f:a4:70:8c:70:70:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Jun 14 00:00:58 2025 GMT
Not After : Jun 15 00:00:58 2025 GMT
Subject: CN=301d7aaaa303ac6a3d9ab221600002eaac708427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:4a:0f:bf:0a:03:40:56:1c:aa:1e:10:18:
53:51:94:ed:fe:ce:b4:03:9d:e7:76:cb:c5:f3:d5:
5e:7a:88:cf:47:01:3d:8d:4f:d1:4e:93:da:c2:be:
f6:14:a3:8f:5d:d9:59:88:87:a3:b2:7b:81:89:9f:
c3:c9:6d:62:1b:a7:31:e2:de:94:ca:70:f0:57:fb:
12:0b:e9:9c:c0:b7:5c:a9:95:f9:74:17:d5:70:03:
6a:ed:ff:df:35:24:98:38:d2:4e:ea:8e:8a:c8:ee:
eb:8e:d4:b9:d6:8e:c0:90:80:60:78:e7:13:b4:11:
a7:60:78:1e:93:be:88:be:7e:e3:70:96:c3:9c:e4:
69:02:c0:be:b3:22:e8:8b:f4:16:53:fa:59:44:61:
02:00:b3:f4:37:78:d1:dd:61:da:8f:e4:9f:17:a6:
5a:cc:ac:44:d0:25:84:ae:18:c7:83:c8:fe:09:4e:
91:ef:85:f4:fd:d7:cd:e4:c2:4a:28:bd:5a:22:ae:
c0:c1:5c:5f:71:72:94:f8:9c:06:59:17:b7:5a:ce:
b1:cd:81:5b:5f:c4:84:d1:7f:d8:5a:4a:02:6d:b9:
a7:3b:cd:22:75:3b:db:fd:8d:f4:19:6b:24:3d:71:
b6:b9:ef:7c:ea:71:e3:4f:e8:61:a4:bc:fc:06:cb:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1D:7A:AA:A3:03:AC:6A:3D:9A:B2:21:60:00:02:EA:AC:70:84:27
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9f:4d:20:44:21:30:0d:4c:30:e9:60:64:74:5d:d2:5d:41:
cb:ee:cb:da:b0:81:59:b6:59:b5:15:29:2c:53:3b:ed:7b:eb:
8f:1c:2a:ce:e3:e6:f1:9e:1f:26:50:b5:dc:56:0c:c6:62:28:
61:e5:b6:2b:85:36:f3:31:88:e6:fa:ce:0e:ea:6f:db:af:ce:
8f:a1:2b:01:20:fd:b5:cd:61:72:b9:46:9a:68:8c:06:03:a0:
e2:dd:76:a3:c6:fb:dd:d8:db:40:96:c1:89:af:e1:2d:70:6b:
23:15:3e:49:66:0d:95:0e:21:44:3b:c3:7d:c3:3f:17:d0:41:
3d:b3:d4:18:c6:4e:89:85:a4:53:e9:ed:d6:fc:09:9c:8d:ce:
cb:cb:83:b8:05:62:60:2e:6b:1f:09:74:3a:61:0a:3b:39:ff:
03:2d:69:9a:7a:ea:65:ee:9b:1d:d6:1e:ce:93:37:5f:1d:26:
96:27:85:f8:b2:86:a5:f4:3e:08:b0:b1:0f:fb:d4:ab:c6:ca:
87:93:31:0d:c4:16:56:10:42:89:dc:2f:b2:ff:e6:8a:39:84:
09:8d:12:11:a9:54:ed:d7:37:67:98:1a:65:74:de:31:0c:ee:
12:2a:39:ad:ff:f5:b6:75:13:3d:18:b2:93:f3:4c:a9:62:52:
34:4f:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:54 2025 by rpki-client