Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: MHxEVBVZsYrNbIXuOfKbpY1Rb8C2QSQnD8H9lP0Fq7g=
Subject key identifier: 6F:F9:84:5C:DF:44:8C:76:52:CE:23:C2:A1:88:F3:67:55:26:4A:F8
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 0198748747D94D889CBE70AFAE8093EA3B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 10:01:19 +0000
Manifest this update: Mon 04 Aug 2025 10:01:19 +0000
Manifest next update: Tue 05 Aug 2025 10:01:19 +0000
Files and hashes: 1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: 9WnkeGmxtP4iEd0nzHcP2WgMimWoz5VlRmuIhLdJoEs=)
2: w22fMY9NDCCcG4e2_IUcNQ_Kq9Q.roa (hash: pqPEuP/XkZYkW0RjNxblrG+NfoIqGAgVKY/Jqk/oP3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:47:d9:4d:88:9c:be:70:af:ae:80:93:ea:3b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Aug 4 10:01:19 2025 GMT
Not After : Aug 5 10:01:19 2025 GMT
Subject: CN=6ff9845cdf448c7652ce23c2a188f36755264af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:55:11:16:03:42:17:02:67:d2:76:9b:c3:
11:48:c8:5d:e8:fd:c2:3b:11:ed:4b:59:0d:0b:6f:
6c:3e:51:2e:2a:ab:4b:86:77:5b:f7:1d:c9:20:0a:
66:0e:a1:d7:e7:05:57:60:4b:81:c7:4e:e1:81:c0:
bf:89:e3:15:3a:72:d5:da:a5:ae:88:8f:28:f7:1a:
3d:5b:12:b8:51:25:e8:e0:0b:c5:8b:7c:b0:d7:01:
35:d9:6b:69:31:8a:c1:15:35:71:7b:15:83:01:9b:
04:cb:4b:44:1d:3c:2c:d2:6a:67:40:db:c9:4b:3a:
ad:9e:f2:7a:d9:15:ac:6b:5e:07:52:9a:97:c8:9c:
2a:8e:8d:19:26:22:61:3b:f8:53:92:53:36:05:1c:
4c:e8:e6:8a:79:84:b2:23:88:16:d2:ba:79:05:2e:
cc:fd:02:0a:72:30:8f:56:ea:96:80:85:9a:0f:2e:
83:16:9b:e6:66:0b:f2:fa:84:7c:e0:08:16:20:8d:
4f:d9:50:86:4c:86:68:db:a3:c1:71:e9:0d:25:b7:
14:1c:56:d4:6f:77:d9:c7:da:29:b3:8b:b7:a7:7f:
11:a5:72:2a:c7:8d:c4:48:04:4c:16:6c:ae:55:7b:
e5:e9:ce:d4:17:a8:73:12:07:14:46:5c:e8:e6:9e:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F9:84:5C:DF:44:8C:76:52:CE:23:C2:A1:88:F3:67:55:26:4A:F8
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:68:f3:12:c0:f6:71:b4:47:a1:2c:d0:1a:d9:58:25:ea:9e:
64:7b:9b:d0:f4:35:ef:53:2d:ee:6a:ff:0f:cc:40:75:b3:75:
fe:43:7e:d0:18:11:42:ab:b1:7a:73:b6:e7:cd:d9:cd:ea:28:
d4:46:01:d5:76:7e:16:f5:17:c4:b0:19:7c:8b:66:83:2a:a0:
17:8f:1d:3b:5a:83:77:d7:68:c8:7d:71:b9:eb:26:73:53:53:
d5:44:28:c6:21:31:d5:7c:f1:ca:61:6a:cb:24:1b:23:f0:81:
8f:80:b8:79:32:e6:02:9a:54:cb:e7:ff:eb:6e:16:fd:26:55:
04:90:02:a0:01:85:92:7f:70:68:d9:ff:db:70:fb:85:19:c3:
b6:7e:1a:1c:a3:52:0a:dc:f5:32:d7:4a:fc:b4:a8:e6:1c:f3:
3f:ec:36:fc:d6:28:10:e1:7c:a0:a4:55:3c:2b:46:ce:e8:f2:
10:53:10:14:38:d2:0b:0e:31:d5:0d:1f:e9:9c:83:fd:fa:da:
65:39:ad:f6:db:cf:61:85:8d:df:89:b7:b7:42:cb:19:c2:8a:
65:01:66:51:8c:29:03:c6:19:36:61:dd:ee:b1:0f:36:de:5d:
a0:f1:4b:0d:e7:a4:e4:aa:66:81:e2:e6:59:34:ac:1e:e6:7c:
28:83:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:45 2025 by rpki-client