Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: /3NagIRPcxIiFP3T7YNg3dEkBO3U7vnqcdYZYyxE7JI=
Subject key identifier: 1C:BA:20:33:7D:B7:49:97:B8:52:F1:7F:35:76:E3:F8:9D:4D:26:E0
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 01987450621CF3F9CD24C55CA58838202341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 061D
Signing time: Mon 04 Aug 2025 09:01:21 +0000
Manifest this update: Mon 04 Aug 2025 09:01:21 +0000
Manifest next update: Tue 05 Aug 2025 09:01:21 +0000
Files and hashes: 1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: 87bEOR7u6kzc2B6ElL92petdBJxyf1mqOytkj2+Qi+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:62:1c:f3:f9:cd:24:c5:5c:a5:88:38:20:23:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Aug 4 09:01:21 2025 GMT
Not After : Aug 5 09:01:21 2025 GMT
Subject: CN=1cba20337db74997b852f17f3576e3f89d4d26e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:75:77:8e:16:e7:37:5d:c6:25:ef:ab:ce:
3e:e5:cd:3b:0e:b5:8d:dc:30:27:0b:8d:49:d8:8b:
2c:c4:85:ec:c6:06:1a:ff:d5:ad:78:81:75:fe:30:
ea:34:43:63:ed:dc:60:d4:c3:bd:f6:5b:9a:5d:ec:
57:86:1b:e3:6c:c2:b1:c7:5e:79:68:d1:38:cc:20:
b0:e7:3d:0f:cf:c9:af:5e:fa:c2:cb:83:31:a2:4e:
c5:09:b1:02:3d:6c:15:90:bf:d3:c2:77:14:a5:63:
08:b5:76:ea:2d:83:a6:47:93:8b:5a:4d:36:fd:e3:
cf:38:e8:5f:1f:a4:49:43:78:85:d6:7f:01:2d:96:
40:89:30:5f:5e:9e:95:dc:63:e6:9d:14:6c:76:7e:
9b:cd:95:77:56:34:aa:b2:1e:24:c6:17:15:db:cc:
8b:4a:23:d2:f2:7b:aa:f3:35:75:7b:a9:4c:49:b3:
73:10:b8:25:c0:18:fe:c5:a7:fb:b9:3e:c9:2c:a2:
d8:fe:e8:83:2b:2e:37:c8:59:fd:66:44:7a:7a:b7:
60:aa:28:48:5e:a5:cc:8b:e4:a0:e6:02:0e:ed:db:
cb:39:ab:12:f3:93:2d:c2:df:39:85:1e:70:51:8b:
75:3e:51:13:18:81:64:54:44:2b:c8:6b:d7:29:71:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:20:33:7D:B7:49:97:B8:52:F1:7F:35:76:E3:F8:9D:4D:26:E0
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:09:b0:76:9a:12:8a:08:5e:fe:42:03:a0:a5:d5:a3:f0:de:
23:b5:75:d2:dc:4a:80:e0:52:0b:28:c9:da:5f:54:d2:1f:cd:
31:93:b8:b9:dc:06:e5:f3:8c:24:83:f6:32:fd:cf:97:10:54:
65:d3:69:24:e7:4c:af:a2:11:a5:01:e7:3f:92:4b:2f:19:aa:
91:02:3a:58:55:82:2a:6d:63:9f:a6:d5:29:d2:48:c5:2e:e4:
62:85:6e:4b:5b:d1:d3:87:96:6f:5b:37:d1:9d:34:c0:60:2a:
3d:3f:62:20:01:01:d3:2b:56:93:56:cb:ba:da:00:43:08:f1:
51:30:a9:b7:92:26:c8:64:a4:55:1f:9f:cd:db:29:ec:38:b9:
a1:69:46:e5:5a:9a:f2:b8:83:2f:73:d7:bc:09:82:0f:f5:2d:
f4:1b:0c:41:b9:98:06:19:71:be:95:ac:2f:2d:3d:58:0a:dc:
08:b4:95:c7:de:d8:a6:e3:90:e9:ad:aa:70:52:9b:8f:16:4d:
71:f9:06:63:f6:b4:d8:b4:e9:91:00:a6:ca:05:25:ac:1b:35:
fb:e4:c4:ec:08:92:26:96:44:15:93:03:fe:4e:ef:31:6c:dc:
6d:4a:38:72:c6:e0:46:76:d5:49:c0:cd:47:43:2e:80:f2:bf:
e9:a0:10:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:13 2025 by rpki-client