Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: WgxLpSC6MjP25ZbQe0hchgL0l4vVHk4fGkI0nRVzsu4=
Subject key identifier: CB:65:FF:8D:0A:9F:7A:48:7D:44:F7:84:64:7F:73:DD:EC:5B:44:CF
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 0197722CFB35CD5526F83D1D20C884750F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 0E18
Signing time: Sun 15 Jun 2025 06:00:39 +0000
Manifest this update: Sun 15 Jun 2025 06:00:39 +0000
Manifest next update: Mon 16 Jun 2025 06:00:39 +0000
Files and hashes: 1: Y4BycvpgIPFrj5lhsii_AUvYAWw.roa (hash: brKO8LRrExe011Bv/UP5eEIq/IhdQ+O1vYEiLB6elCE=)
2: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: fr2vJ4E/gXbpalHCAJ6pMBFhOiRpIkKTZ6Yf+92iDLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:fb:35:cd:55:26:f8:3d:1d:20:c8:84:75:0f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Jun 15 06:00:39 2025 GMT
Not After : Jun 16 06:00:39 2025 GMT
Subject: CN=cb65ff8d0a9f7a487d44f784647f73ddec5b44cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:f7:90:e7:da:bd:02:d1:0f:fa:4a:5a:11:
24:36:d2:94:31:e4:bf:77:77:e0:7d:25:8b:96:be:
5a:fc:6a:a8:4b:ea:c8:02:30:90:a1:03:46:d0:5f:
f9:42:a3:5e:94:0d:78:38:de:f6:b2:6e:b4:15:40:
49:d0:9e:8f:33:4c:93:27:66:2e:c6:0f:8c:bc:bc:
44:e1:b7:69:82:ab:01:26:d3:38:ee:3e:a6:0f:9d:
2a:82:d8:b5:76:10:3b:31:95:6e:04:82:02:b7:37:
93:d8:55:fc:77:a6:98:0b:d2:da:8b:97:12:b6:4a:
b7:d7:ee:23:ee:92:7f:f5:14:32:a2:f2:55:a0:39:
33:ee:79:fb:a3:b4:06:c7:1b:39:d2:68:8c:8f:9f:
4b:b7:bc:c1:8a:10:35:8d:6f:47:16:3f:b4:e3:e6:
f9:00:13:e7:ee:fa:61:dc:46:03:35:9d:c9:6f:54:
aa:a0:ef:a3:90:0d:c5:a2:8b:31:32:7e:4f:46:f9:
63:e5:52:0b:4e:a4:9f:a8:b8:97:cb:4a:54:85:61:
10:e5:70:be:e6:19:c0:68:4d:43:73:d6:2d:11:55:
46:9e:ee:2a:04:e9:28:fa:6a:17:95:b9:c9:72:03:
e6:72:4d:9b:9a:79:46:d7:ff:42:17:cc:88:4e:cd:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:65:FF:8D:0A:9F:7A:48:7D:44:F7:84:64:7F:73:DD:EC:5B:44:CF
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6c:ad:f6:03:00:42:53:6e:18:90:1c:8b:52:e0:1b:9e:fe:
27:cf:30:68:c1:e7:17:b6:eb:83:df:2a:22:4d:ae:ad:af:56:
e4:99:c6:32:97:a0:27:8d:62:07:6d:78:84:cc:f0:28:1c:72:
c3:d1:4a:e4:89:ba:29:ba:7a:97:24:49:7b:80:56:0b:ca:84:
14:bb:7a:27:55:0e:37:9d:68:22:97:c4:9f:29:33:68:26:ec:
e6:eb:45:8d:7f:54:d9:8e:ca:23:eb:1c:74:9d:e9:55:59:a4:
6e:86:1b:6e:32:1e:d6:bb:ce:f7:8c:02:48:9e:b0:ad:93:c8:
6e:9e:ed:c4:d2:b2:f4:1d:80:71:36:a3:5b:ed:a3:fa:0a:b6:
2b:5b:ac:f0:f5:46:e2:8f:5e:bb:97:8e:2a:58:58:33:e8:51:
89:89:b2:06:67:5a:2e:81:49:c0:ab:49:f1:d8:28:99:b7:89:
87:60:e8:f5:ae:fd:93:ef:46:7c:ad:a7:28:4f:d2:4c:9e:c7:
de:15:bb:6e:5e:cc:04:ad:08:cd:f9:b8:51:26:81:ad:69:5c:
ab:d7:48:9a:45:bb:c4:15:71:2c:05:20:d5:1a:0d:af:89:43:
80:48:9d:3b:1d:63:55:82:96:ad:0d:c3:dd:28:89:24:df:4c:
14:eb:78:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:34:19 2025 by rpki-client