Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: bbq0ULQQAt9sL6ZbMv8GTR53PU236z50rRcyQSzMv1E=
Subject key identifier: E5:E2:4D:26:56:62:5A:28:58:83:5D:A3:C7:7D:4D:89:82:A9:1A:7D
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 019768BC3C95D09F8A52824085FFEC69DFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0EA1
Signing time: Fri 13 Jun 2025 10:00:55 +0000
Manifest this update: Fri 13 Jun 2025 10:00:55 +0000
Manifest next update: Sat 14 Jun 2025 10:00:55 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: RZP+/CivU0OTIHBjiV3I7TtkWBBVBTgTiU8YcBZAv3Q=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:3c:95:d0:9f:8a:52:82:40:85:ff:ec:69:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Jun 13 10:00:55 2025 GMT
Not After : Jun 14 10:00:55 2025 GMT
Subject: CN=e5e24d2656625a2858835da3c77d4d8982a91a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e2:e4:68:35:4e:62:af:e7:60:62:c1:32:8c:
6d:38:c7:1d:10:c1:d1:09:6c:20:a5:7a:93:8f:ea:
a9:82:e6:59:9c:08:6e:68:91:82:98:4d:cc:67:7c:
8c:5e:5a:77:7c:76:4c:fd:bb:25:4c:33:3f:da:21:
16:70:a7:05:6d:04:12:a2:5e:2f:3c:e4:65:f6:12:
1f:0e:5f:e9:c7:c8:5b:9a:b2:79:44:7b:93:f3:35:
97:34:d5:a3:f3:06:c0:35:81:bb:8b:72:5c:c9:f0:
bc:2a:2f:60:36:a3:52:ec:69:52:43:74:a0:92:b2:
30:77:60:5c:4b:0b:0b:e5:72:24:9a:a2:c0:9d:50:
c5:90:2d:a8:b1:f8:35:c3:79:55:b3:02:9e:34:d8:
dd:8c:c2:fd:31:22:6e:00:6f:f0:cd:4e:f2:e5:b0:
cf:83:19:7d:cf:04:1f:ac:f4:2a:88:19:70:93:d6:
a1:2d:d7:01:16:10:9d:91:0b:9d:4a:00:be:11:60:
e0:59:4e:a9:fb:fd:8f:bb:5c:44:8c:42:1c:78:44:
c9:37:31:a7:88:8d:63:46:00:68:2f:a9:63:bd:14:
22:d6:62:64:38:6c:7a:f3:e5:f4:01:22:63:00:32:
2c:51:9a:ac:8b:c4:c3:5f:64:f5:83:c3:39:f7:1b:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:4D:26:56:62:5A:28:58:83:5D:A3:C7:7D:4D:89:82:A9:1A:7D
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:28:fe:29:f7:95:da:83:43:09:72:ef:1d:3e:d2:81:01:a2:
7d:2b:33:19:ef:b4:eb:c8:53:24:a8:0c:d4:fd:51:2a:71:24:
6b:d1:0a:19:c3:10:a3:fc:cd:95:ad:2c:42:d8:a1:6d:99:38:
5f:9a:da:ad:aa:48:17:a0:ac:20:60:77:00:b0:8b:7f:00:5e:
6b:52:58:e0:f4:4f:b3:5b:0d:ba:6d:e5:36:ce:fe:95:50:4e:
20:40:20:7b:e2:18:b2:07:92:48:f7:9c:df:d6:88:cd:2e:11:
75:2d:ab:59:71:00:3b:9a:7d:c4:03:b5:c9:fa:dc:5b:45:4b:
57:c3:cb:52:e6:3a:54:67:35:d8:08:98:ea:13:65:32:e3:44:
3c:3e:45:64:b1:bb:b6:4d:5a:f9:cc:ac:66:77:d9:59:07:2d:
7c:2e:b5:34:d1:13:80:66:f9:ac:a8:0f:58:f4:8d:b7:ee:a6:
e2:ec:47:63:96:b8:f8:96:72:8c:66:1e:b0:37:3b:f9:03:f3:
58:3d:33:54:1f:c2:09:1a:3b:b1:83:ac:b8:fd:dd:49:82:62:
9e:70:87:1c:25:1b:ab:5a:e7:02:81:04:24:e9:b0:01:77:60:
4d:f6:a5:a8:27:1e:92:df:62:71:92:64:95:2f:e3:c7:5f:70:
21:56:cd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:50:49 2025 by rpki-client