Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: 5askXKbbKhs/suAmzjyZZuSUIcvhzsHmgYiLCtMMC4s=
Subject key identifier: C1:FD:32:7B:C2:3A:20:1F:D0:89:F9:48:C7:DB:F7:3C:08:E7:52:4D
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 01976EBDBE2DD6BA49A0B8E38272078BB878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 1597
Signing time: Sat 14 Jun 2025 14:00:18 +0000
Manifest this update: Sat 14 Jun 2025 14:00:18 +0000
Manifest next update: Sun 15 Jun 2025 14:00:18 +0000
Files and hashes: 1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: aRIIZ+4rs6Bh0vSJnkxiSSX2Q46oKTKoRtoEyjJ13Uk=)
3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:be:2d:d6:ba:49:a0:b8:e3:82:72:07:8b:b8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Jun 14 14:00:18 2025 GMT
Not After : Jun 15 14:00:18 2025 GMT
Subject: CN=c1fd327bc23a201fd089f948c7dbf73c08e7524d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:b7:1c:15:25:5b:d7:24:df:63:b5:7e:0d:
bd:b9:92:17:17:2f:0b:8f:3d:d1:35:4f:cc:a9:31:
8f:56:7f:15:ca:34:c2:c3:c6:a5:5f:75:5e:96:7d:
bb:31:a3:6b:7e:b9:2b:b1:4f:95:38:3d:4d:5e:e1:
f9:24:50:6e:f4:f5:38:41:ce:75:b2:7e:ed:63:29:
78:da:f5:6c:08:e1:16:3b:e5:53:3e:bd:40:90:44:
b0:51:57:c1:e9:d2:71:aa:ff:fc:da:a0:9b:fc:3a:
46:25:c4:3e:fe:3a:d2:5f:fd:26:91:26:5e:93:4a:
26:e2:01:2f:df:c7:4d:a1:35:ee:6e:94:b2:99:15:
65:12:5a:3e:75:20:11:22:76:17:f9:cb:ed:39:e5:
6c:a5:60:99:4f:4f:63:a5:4a:06:71:91:11:75:12:
6f:bd:fc:b7:4e:e5:63:b7:78:ac:6b:dd:17:7e:82:
dc:e7:dc:5f:0f:a0:79:cc:31:52:f7:d8:3a:66:9a:
89:d0:2f:e0:a0:6a:53:82:cf:a8:13:1c:7c:81:0c:
b4:e1:89:b8:61:7d:35:40:be:f9:46:7e:23:c9:7e:
d7:b0:32:eb:c2:9a:be:80:e2:93:34:de:c1:2d:c8:
21:b6:81:41:dc:2d:e9:56:e2:b6:87:42:f8:ea:02:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:32:7B:C2:3A:20:1F:D0:89:F9:48:C7:DB:F7:3C:08:E7:52:4D
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5d:89:02:1d:21:ae:51:6a:62:93:55:c7:fa:7c:04:91:d1:
44:1c:3d:f3:6f:33:ce:ca:61:1b:e5:c1:34:a8:ec:ad:ba:92:
24:2f:06:0d:2b:55:a6:3c:af:38:1b:33:d7:f9:af:dc:9d:c4:
da:6b:e4:a9:d3:81:48:48:8a:0b:b8:bd:4a:16:78:0d:bd:d4:
c3:b5:8f:5f:c2:76:ca:4e:eb:eb:ec:55:b9:de:65:7d:83:2c:
3b:d2:bd:57:ec:28:07:72:58:db:5f:33:ed:d9:cd:03:0b:59:
ea:ba:0e:71:ba:ee:a2:6e:bb:7b:16:4c:84:26:5d:19:ca:07:
ba:d8:6a:b0:00:2b:1e:27:7f:00:5b:39:d1:30:eb:52:20:60:
e4:7d:5e:ba:1b:1b:ef:2b:20:e1:aa:20:0f:66:4f:bf:0e:76:
29:cf:b2:65:cd:ea:65:17:df:a3:24:bd:36:e0:71:71:98:b3:
d2:5e:26:c7:c7:34:6c:2d:8b:71:9e:0d:17:17:b5:c6:a8:10:
5c:c8:7e:47:00:e6:00:6e:71:1e:bf:5f:fc:20:b5:ef:a8:40:
d2:03:ff:22:a6:0a:23:c1:ee:6a:41:47:c8:b4:68:ab:27:60:
8a:b1:86:b5:33:7e:eb:c6:9d:c7:f5:04:48:68:aa:e6:2b:48:
b9:15:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:36:28 2025 by rpki-client