Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File: cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier: K43xpCdj+NXkuig74GBNEVME8xho7CRrDWBVzOG1sUE=
Subject key identifier: A3:DF:7B:05:AF:52:28:97:7A:28:F2:51:CD:6D:39:1B:F9:AC:50:DB
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer: /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial: 0197722CF9A3CF23F8ABCE240FCA307783BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number: 4A
Signing time: Sun 15 Jun 2025 06:00:39 +0000
Manifest this update: Sun 15 Jun 2025 06:00:39 +0000
Manifest next update: Mon 16 Jun 2025 06:00:39 +0000
Files and hashes: 1: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: nhJNpx1Mdx7vLUHJEjobHv1g+3N8OnyVaxsKdHtMDaQ=)
2: xhxuKJYrPBlCKVgSSZLbkArXr9M.roa (hash: eBW3Gn9+jBJu0tA7uYFfIKZTT8p/0XeRa4Z67cWs8N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:f9:a3:cf:23:f8:ab:ce:24:0f:ca:30:77:83:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Validity
Not Before: Jun 15 06:00:39 2025 GMT
Not After : Jun 16 06:00:39 2025 GMT
Subject: CN=a3df7b05af5228977a28f251cd6d391bf9ac50db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:90:39:9a:b8:9b:d4:89:52:49:de:0a:59:
0f:bd:f9:3c:26:14:b9:ab:37:93:9c:66:b9:75:5f:
a3:f0:62:e7:5e:21:b4:11:c9:b4:9d:0f:81:99:0b:
ef:f9:13:32:27:36:7b:4b:37:19:5c:8d:8b:76:6f:
9d:81:81:bc:a6:47:69:e6:d8:b2:c0:2c:b8:01:17:
de:12:2f:03:dd:11:19:dc:50:81:6b:cc:a9:58:59:
28:c4:4f:d2:e6:b3:ed:00:db:9d:9f:c6:b1:ec:86:
cc:44:2a:43:bb:b6:1a:b1:fd:e7:8e:53:58:1a:41:
f3:c9:0f:27:46:67:c6:b4:1a:14:97:e2:38:b0:ce:
4e:84:60:e0:11:7f:13:e8:34:09:15:71:fd:af:1a:
aa:38:68:3e:a7:b8:95:c3:75:55:57:71:3d:01:0f:
f7:01:34:cb:04:5f:a7:64:96:14:cf:46:eb:6a:17:
fa:d0:73:8a:4b:03:93:71:5b:87:59:81:c3:6d:e6:
ed:79:66:ca:54:65:bb:25:15:f5:4f:74:80:88:a3:
eb:d7:a2:3d:e8:e2:bb:8c:5c:d6:69:a9:c1:1e:bd:
ea:af:6b:a1:75:8f:1c:a3:a2:82:1f:38:18:4a:d8:
35:c0:3f:5a:2d:3c:07:70:47:07:a0:41:45:ba:cc:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:7B:05:AF:52:28:97:7A:28:F2:51:CD:6D:39:1B:F9:AC:50:DB
X509v3 Authority Key Identifier:
keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:d7:9e:d9:d9:ba:dd:7e:55:2d:71:18:db:b1:14:fe:3e:08:
de:a5:3f:2b:7d:36:f6:f2:87:78:b5:18:77:ce:d4:37:fc:a4:
bf:2b:98:ad:ee:f9:8b:6a:8c:45:8c:e1:df:9d:b7:ce:98:34:
5a:40:32:02:a3:4d:ca:29:03:2a:13:4e:cc:5c:83:ef:db:2e:
b3:5f:97:5d:c1:c4:fe:42:b8:ce:86:53:5d:c0:e1:e6:67:84:
d5:3c:e3:7b:cc:5b:8b:d2:fa:1c:e1:93:1f:cb:b5:af:7e:6b:
cd:df:35:ad:90:8a:d1:1e:13:41:22:a4:56:25:f5:34:82:2a:
33:c6:4c:ad:15:18:6c:7e:af:44:1d:7c:39:9c:2b:38:a5:01:
cb:ae:1c:25:43:57:58:74:df:50:c3:b3:c5:9b:7e:b5:86:50:
68:51:a4:4f:01:1c:65:23:5c:b9:20:2e:46:c3:82:e2:d6:75:
21:bb:d1:49:6b:05:c1:29:ce:6d:ff:c4:28:f4:5d:65:92:de:
8e:6e:bb:67:45:d9:d6:59:6c:1b:94:dd:f7:94:c0:1d:fa:1a:
e1:41:06:23:d9:44:82:55:eb:9f:76:5a:15:2d:d3:51:73:e9:
fa:ed:cc:84:af:d4:e0:98:0e:11:fb:46:d6:8c:97:3e:1a:12:
50:4f:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:30:38 2025 by rpki-client