Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: z4coxSdzctZw0nSLNc3kkADpP2o+VcXAvWmykelMDhI=
Subject key identifier: BA:2C:2C:8B:1A:15:E4:A9:0B:3F:15:31:D8:D1:AA:D7:8E:F4:44:55
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019873745A35B39C27BBFE4F281D70A552F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 05:01:01 +0000
Manifest this update: Mon 04 Aug 2025 05:01:01 +0000
Manifest next update: Tue 05 Aug 2025 05:01:01 +0000
Files and hashes: 1: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: sFLsA0upnDVJZrMZ8cVNNNnXOq76HF1YzQBxxsnBQi0=)
2: jWNgVTvc3owe3kF91r8d7uRQV_o.roa (hash: uQLZ/d2z4o+33Z42D6wrDoH9q/yv6pAWgOV+vjfJeYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:5a:35:b3:9c:27:bb:fe:4f:28:1d:70:a5:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Aug 4 05:01:01 2025 GMT
Not After : Aug 5 05:01:01 2025 GMT
Subject: CN=ba2c2c8b1a15e4a90b3f1531d8d1aad78ef44455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:02:ca:b5:38:1b:ae:5d:c8:e8:77:6e:27:
f6:5d:0a:4d:87:89:a8:63:09:57:c3:66:63:73:bc:
d4:3a:2b:39:20:01:be:c8:06:8a:5a:bf:bd:34:c8:
79:93:c1:2a:b7:b3:db:e2:dc:cf:1f:34:6f:8d:5e:
97:59:be:3e:58:3c:8d:02:a6:f4:9e:98:a0:67:fa:
f7:68:39:17:28:25:bb:17:c1:a0:f0:30:e2:3b:85:
11:c1:f2:54:f5:b9:e8:9d:cb:fb:b1:01:1b:e6:62:
0b:f3:8d:01:e6:9f:ee:12:65:5b:9b:a6:e1:1c:2a:
4d:55:ea:65:87:8b:95:f6:bf:af:12:39:18:3b:ef:
e6:1b:9e:21:3c:f5:15:7b:6d:93:59:28:7d:d1:4a:
43:29:41:2f:1b:70:4b:34:23:96:e2:18:77:76:12:
58:7e:43:db:2a:f4:99:18:51:6e:ee:1a:43:fd:ba:
07:42:1d:f5:c6:65:24:75:1a:07:25:c8:52:cd:37:
e2:b3:f5:14:2b:14:57:2d:95:a4:29:ae:3a:74:75:
b2:20:26:44:a4:fd:18:5e:95:6f:fc:29:57:1d:1d:
23:09:56:0a:6f:13:62:27:65:d9:3f:1b:2e:25:f2:
da:2d:de:83:7d:c7:64:d8:de:f2:fa:29:a4:61:5f:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:2C:8B:1A:15:E4:A9:0B:3F:15:31:D8:D1:AA:D7:8E:F4:44:55
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dd:06:19:9a:22:74:f0:8b:cd:ed:55:4b:46:98:93:97:94:
4c:21:5a:75:cb:e6:6d:98:97:51:25:59:80:5f:66:fc:31:69:
10:e9:69:2b:6c:18:e8:7e:a8:52:d4:6f:d8:c7:98:35:cf:14:
76:8f:24:08:d8:bd:56:c9:6f:5b:a8:71:04:32:a9:0a:73:be:
88:cc:95:33:b4:f6:90:c5:bf:d4:ce:eb:85:91:98:e7:0d:ef:
01:bc:e9:08:07:11:c2:ff:e0:c1:d9:15:54:23:94:2a:59:0b:
04:07:e8:2b:3f:88:00:2b:30:81:97:6d:1d:98:fd:a6:ba:cb:
3d:c6:f8:2f:47:7b:d5:1d:ce:39:b4:28:d1:46:17:6b:8f:fb:
fd:ff:fe:63:70:c7:12:57:7d:32:99:19:66:d4:f6:e2:b7:ae:
61:6a:d3:e3:f2:0a:19:6a:26:d5:70:52:9c:74:b0:cd:6b:b7:
25:46:48:b9:cf:bb:8d:aa:9c:7d:11:05:95:61:76:88:b3:e1:
8e:c1:10:7d:20:41:ec:10:65:ea:6b:f9:c2:0c:0e:29:da:c0:
24:3a:2b:3b:a7:f4:65:49:1e:20:d1:f0:dc:f0:0a:65:52:07:
3f:ef:b8:a0:cc:21:fa:74:19:b4:6d:e7:34:f0:c7:a1:9e:63:
cc:11:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:46 2025 by rpki-client