Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: yRoT+Xm9M7D45anFj/cK6Pnu5VaWB+SDZlpnVJ6xHLk=
Subject key identifier: C9:83:09:BE:0D:37:91:7E:59:45:1F:47:5A:44:90:8C:A5:65:51:C9
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 01978ADA7022E9D2F95D89BD5471B6ADEDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 034C
Signing time: Fri 20 Jun 2025 01:01:00 +0000
Manifest this update: Fri 20 Jun 2025 01:01:00 +0000
Manifest next update: Sat 21 Jun 2025 01:01:00 +0000
Files and hashes: 1: XrDua1zQDMJqH5iHPu8EHl3EkL4.roa (hash: aKzITCv/TlQWw5VPQA7t2SoPcL6SaZJgOSPmbHxDp7w=)
2: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: o2LptA9whITaYJIoHCjZ5YRVic3KZTmbf9dcdqdvrTw=)
3: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:da:70:22:e9:d2:f9:5d:89:bd:54:71:b6:ad:ed:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Jun 20 01:01:00 2025 GMT
Not After : Jun 21 01:01:00 2025 GMT
Subject: CN=c98309be0d37917e59451f475a44908ca56551c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:12:7e:b3:a0:ce:6e:5f:05:57:e3:14:5c:
7c:97:bc:48:a1:51:68:a9:0a:52:fe:da:2c:2e:6d:
11:1b:e4:c4:54:a9:f3:59:df:df:c2:80:0d:71:48:
e1:fe:d8:48:04:7b:d8:04:5b:d1:3e:f9:0d:80:b6:
69:43:21:a3:7e:90:c0:ea:35:0a:ad:cc:57:a9:6f:
c4:3c:68:4d:7d:d1:78:a6:e9:ee:2b:3f:49:8a:0f:
0a:dd:b6:7b:d6:ca:e1:dc:07:67:40:92:95:6d:60:
d9:b4:ba:13:36:86:da:60:59:b0:b9:5b:c2:8e:d2:
22:79:37:83:f7:98:0d:ae:e2:c5:2c:e8:20:ae:8c:
77:48:ab:2c:84:d8:ac:35:0c:ed:e2:90:42:5c:d0:
f2:4c:1d:8f:24:72:f8:3b:bc:50:44:8b:c6:08:04:
d6:ff:ff:b1:04:65:7e:4d:21:59:bd:37:de:78:73:
2f:60:21:5c:4f:51:c7:7c:3b:57:b8:89:3b:45:51:
b0:55:1a:31:c1:a8:6e:81:0c:e8:cb:5e:7a:14:8a:
80:01:dd:7c:84:5b:34:2c:be:73:f3:e4:97:c5:76:
22:79:f2:da:20:25:e3:9e:c3:d0:3a:93:1b:18:c5:
4d:b0:cc:ad:a9:59:2f:5b:5d:b9:41:18:55:0f:e1:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:09:BE:0D:37:91:7E:59:45:1F:47:5A:44:90:8C:A5:65:51:C9
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2a:d5:37:f8:a7:2c:48:f7:1b:5b:d2:f5:70:7b:0c:7f:90:
62:7b:27:2f:7a:da:05:0d:a6:cd:31:f7:9b:16:e2:7d:22:04:
ba:7b:c0:9b:97:5f:b1:f7:d9:b8:e8:13:dc:e5:34:f7:79:12:
32:6c:72:c1:46:8a:91:80:9b:63:72:d6:46:ac:55:a3:d0:32:
12:31:30:ce:80:dc:d2:a9:d4:aa:85:cb:11:b4:af:71:07:3c:
f6:92:04:7d:6d:c5:fd:c1:6e:96:46:54:04:0e:7d:f2:d8:88:
35:c3:7f:6d:98:1f:fc:2d:fb:3b:fd:1e:c6:db:28:85:12:bb:
a1:52:5a:4c:e7:7c:83:44:a0:c0:2b:91:c9:0b:3a:e2:bb:c7:
c7:ad:32:1c:2d:a1:23:50:03:fb:8e:ca:e2:f2:e7:ad:e5:e5:
6f:e9:1b:f8:b3:b1:c8:d0:51:99:79:c1:71:f6:e3:e8:d4:ea:
b9:8e:8a:34:c4:44:e7:05:c1:37:82:0e:3a:61:89:da:43:96:
14:cb:22:38:cf:61:77:5d:80:ec:45:65:13:f9:02:32:59:83:
59:da:df:0a:0b:16:8c:3c:d8:c7:d4:3e:ca:a6:9e:8b:dc:d4:
b4:6c:16:9b:e0:28:a7:a8:81:0b:2d:d9:42:f0:5c:b4:a4:04:
14:57:00:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:14:48 2025 by rpki-client