Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: EpZLbfaBD8IdoZXIh4z4RN57T+BM8nNJ29wvyeeckms=
Subject key identifier: 3E:6C:05:D7:A4:22:6F:27:E9:35:01:F4:EE:E5:64:47:C6:B4:8B:E1
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 0197722CBEE88C4366962605256F9753983A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 06:00:24 +0000
Manifest this update: Sun 15 Jun 2025 06:00:24 +0000
Manifest next update: Mon 16 Jun 2025 06:00:24 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: GjjRXSYiROBjecy7+IZNXSzbeNbQDVagiuwNtE+i/mI=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:be:e8:8c:43:66:96:26:05:25:6f:97:53:98:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Jun 15 06:00:24 2025 GMT
Not After : Jun 16 06:00:24 2025 GMT
Subject: CN=3e6c05d7a4226f27e93501f4eee56447c6b48be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:40:44:d8:d7:0e:bc:24:90:fe:1e:a9:3a:
60:84:93:63:57:a5:75:18:f3:a5:1b:ca:fe:2f:86:
29:8f:85:16:92:e8:71:24:73:77:7b:00:6f:80:1a:
9e:28:17:c1:69:5c:e3:92:3d:dc:ee:bb:6e:e8:ee:
3f:33:15:1f:67:4b:8a:32:cc:29:85:dd:2d:e9:96:
ca:05:0e:f7:f5:1a:04:6c:42:31:ca:1b:7c:9b:59:
8d:27:c6:2f:1a:fe:c7:aa:ef:e6:45:ef:f9:cf:ab:
50:83:76:ba:41:81:70:93:ab:af:ff:89:0b:1b:5e:
51:1f:3a:03:b3:62:a3:de:4a:54:e0:40:af:fe:2a:
f6:0f:e6:01:0c:39:40:02:3e:75:81:75:7a:f9:f2:
8b:47:d3:f2:6e:22:ea:10:a6:7a:30:2d:22:d1:71:
f8:08:19:39:9e:1d:c4:01:9b:48:12:10:51:d8:cf:
0f:6a:b7:2b:ff:2b:dd:63:01:7b:26:28:d0:72:83:
8f:6b:84:f8:ae:2f:47:5b:78:62:ef:eb:37:36:59:
ac:ea:53:2e:e0:79:1a:42:f7:63:89:be:c2:98:e0:
16:37:95:18:59:76:08:1f:05:d6:c8:6c:e8:8e:31:
32:9b:11:95:58:dc:ba:88:a5:14:4a:96:16:1e:b0:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6C:05:D7:A4:22:6F:27:E9:35:01:F4:EE:E5:64:47:C6:B4:8B:E1
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6c:9b:63:4d:1c:db:71:3c:f9:c6:36:49:cb:37:8a:29:b4:
61:3d:5d:8d:0e:99:6d:bf:19:df:0d:c9:b6:d9:54:72:82:82:
b3:98:76:e2:85:f1:d0:a9:f3:84:9a:d0:90:1e:29:ad:cf:44:
67:78:e5:a1:35:f5:b8:53:e5:6b:82:34:13:59:73:c5:fe:32:
f1:dc:ba:b9:ba:79:36:4a:6a:d6:e3:06:83:4c:5a:af:38:9d:
af:15:25:f0:fb:5f:b2:d3:d0:b1:be:75:91:13:fd:1e:4c:2c:
57:f2:34:7d:76:6c:85:73:2c:3c:67:26:e3:af:e0:ff:d5:0b:
c7:34:d4:3a:d1:84:78:7a:ac:a4:55:92:ad:18:f8:06:08:93:
d2:24:3c:42:9f:5d:e5:f9:6b:c5:f9:03:74:e2:58:7f:4c:26:
b0:07:43:ee:f7:bd:e0:4c:25:e6:a5:81:50:62:f3:b1:80:d6:
bd:28:bb:38:6b:9e:71:ab:61:21:6a:9a:92:9b:cf:cd:72:4c:
9d:ba:8d:5a:87:b8:b7:4b:17:84:d7:4e:81:8d:5e:cb:e4:db:
c7:5f:a9:de:4e:b0:38:a2:9d:33:e4:08:12:28:49:2f:5d:71:
65:1c:a9:de:01:1b:a1:ed:3a:2e:04:fe:18:72:df:65:d3:3d:
bf:65:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:04 2025 by rpki-client