Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: rHvyIy7HD9u34SdfdJEo3YS5XBXsfiKq/CpLrlpj2D8=
Subject key identifier: 9A:DA:92:E1:73:0A:34:7E:7F:14:09:D6:FC:75:60:97:27:3B:18:05
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 01976D3DD6B87A2241814AA6D01FBE1688E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 12A0
Signing time: Sat 14 Jun 2025 07:00:58 +0000
Manifest this update: Sat 14 Jun 2025 07:00:58 +0000
Manifest next update: Sun 15 Jun 2025 07:00:58 +0000
Files and hashes: 1: 26OroNSilLDsLnRmS90OawnRg8M.roa (hash: 2vZiL1ss373Q0TX+B8Q8SMDZKCr1m9fpyjjeqgVg0rI=)
2: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: 0wwmPxBkwC4SanQIn8s322Kv+pJwFAu6TEG36aMOc0o=)
3: yFq0JfOaNjdhRiNZMahKgBz5pBs.roa (hash: HLvs21UJM8ndMu/vC6YjvpshtGffGUPV1RHDv0ERCAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:d6:b8:7a:22:41:81:4a:a6:d0:1f:be:16:88:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jun 14 07:00:58 2025 GMT
Not After : Jun 15 07:00:58 2025 GMT
Subject: CN=9ada92e1730a347e7f1409d6fc756097273b1805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:4c:1f:7d:1c:68:ef:ef:8b:8a:20:c7:76:
92:2a:7f:92:9d:21:a5:b3:fa:34:43:f3:3a:78:48:
82:cf:44:8f:8f:f5:69:8f:8a:f1:ff:bb:65:39:9d:
e6:4f:dc:1d:41:92:d6:a6:a0:1a:66:ca:3a:69:6f:
05:6d:5a:01:a4:d2:84:38:79:b2:82:28:1e:ee:ad:
dc:49:62:ad:07:88:d5:3f:de:82:bd:e9:a7:bb:e0:
11:09:b5:79:81:3d:75:fc:05:00:81:a4:fc:6b:64:
ad:aa:09:28:cd:3c:f6:7e:ef:df:ee:84:c2:23:3a:
7d:ec:a0:c1:ad:af:fe:51:cd:1f:2c:87:58:0a:95:
3a:b7:56:cf:ab:3a:bf:6e:84:cc:ce:08:c9:3b:c8:
62:53:3e:92:d7:bd:09:34:b0:53:a1:20:74:0e:c9:
9e:ca:c6:ff:8f:6d:ad:31:78:ea:e4:e8:60:9d:f1:
1b:52:c9:14:97:c0:4b:a0:47:b9:34:62:46:7e:d6:
03:e8:c7:49:95:2d:2d:18:d3:2f:e1:43:c4:b0:10:
ac:bf:01:fe:ab:eb:52:c8:eb:58:88:d2:84:f8:c5:
02:90:52:33:35:86:0d:17:e2:40:17:6c:b3:18:9a:
1f:8e:0e:c7:6a:ff:6c:f6:b9:5b:45:20:65:d7:70:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DA:92:E1:73:0A:34:7E:7F:14:09:D6:FC:75:60:97:27:3B:18:05
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e6:f9:06:e7:d5:1c:ff:c0:b9:b9:2d:8f:be:76:42:f7:17:
c8:e0:c6:19:1f:8a:53:97:4b:ba:a6:49:8f:19:b6:1f:09:00:
39:4e:f1:8b:8c:c5:c8:49:2b:3d:d7:55:f0:fc:e6:28:11:c3:
b1:6e:37:e3:51:bc:4f:9e:35:fe:a3:56:fc:28:d5:16:bc:9c:
a8:66:59:98:84:60:7d:4c:7e:13:16:38:ac:ff:02:9a:4e:69:
8b:d9:8c:75:a8:03:7c:20:a8:8e:11:ad:66:5b:2d:5c:74:10:
01:70:17:bb:53:08:07:23:8e:74:5d:51:e5:d8:6c:c3:83:e5:
60:d8:ac:34:1a:01:73:60:e9:67:10:40:be:3b:3c:44:8e:3d:
12:4c:7f:6b:6f:68:f4:a6:21:b0:dd:5b:ba:cc:9d:dc:d7:7c:
68:1e:f4:16:23:9e:57:2e:10:c7:61:94:f9:3e:91:98:84:0e:
7a:76:de:9a:25:3f:2f:72:fb:77:b6:97:24:fb:08:f0:37:74:
e0:29:57:53:6b:1e:f6:98:c9:c8:10:50:e5:5c:01:34:33:2d:
88:c3:6b:3e:a7:a9:c3:31:fb:f0:d7:c3:59:f6:0b:cc:fa:29:
59:67:35:3f:68:22:56:99:02:1d:af:44:40:0d:ec:fe:92:9a:
c0:4e:73:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:32:51 2025 by rpki-client