Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
File: cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json)
Hash identifier: zs8IMQfXDncw4Ge4rZ3IkO6nQjkfg8/GNd+rBLx5UW8=
Subject key identifier: 30:1A:5F:06:2B:23:F6:67:5A:D3:3D:7F:F8:ED:51:0E:C9:19:3B:E7
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Certificate issuer: /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial: 01977D8C2DA2A9B55D93F61913D4CCECF952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 11:00:27 +0000
Manifest this update: Tue 17 Jun 2025 11:00:27 +0000
Manifest next update: Wed 18 Jun 2025 11:00:27 +0000
Files and hashes: 1: ZMvF8N06VsuZ5tNxMMczzsSTe5w.roa (hash: D7vN+YdR9s6oznh1bq9p5ngAxVIRYXDWMiWld/VomNA=)
2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: nd0o5gyhcHs73vOmALTEilDMSZpHj4yyjRKcf7ywbT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:2d:a2:a9:b5:5d:93:f6:19:13:d4:cc:ec:f9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Validity
Not Before: Jun 17 11:00:27 2025 GMT
Not After : Jun 18 11:00:27 2025 GMT
Subject: CN=301a5f062b23f6675ad33d7ff8ed510ec9193be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:47:f4:68:86:34:21:e5:89:c9:03:42:d4:
3c:9e:40:75:bc:d7:a4:d2:ce:be:63:b7:cc:39:3d:
fb:f9:8e:e5:41:c4:d7:ce:e9:f2:d0:8b:3d:31:3c:
aa:62:5e:83:0f:f3:bd:d8:ec:fc:10:09:9d:ef:7a:
3f:3f:01:6e:0b:82:bd:a8:4f:f6:87:b0:c7:b7:ba:
83:aa:a0:e3:b7:f7:d7:0b:e3:c3:19:75:08:7d:28:
e5:f3:04:16:ea:57:16:84:ab:bb:22:31:83:35:8f:
b3:5c:6e:50:a2:e1:0e:f7:2e:de:b5:ff:22:2e:bc:
56:d7:b9:21:d8:85:90:c8:cf:5f:ed:b0:92:d3:16:
43:7e:d1:1a:f0:ee:0c:62:38:6e:39:15:93:3b:f4:
f8:38:a6:d8:c4:dc:48:5a:5e:ca:0a:5f:8a:85:95:
ae:9b:da:f1:40:90:ca:b3:c3:c1:0d:cf:ab:85:ea:
59:e1:fa:ee:3a:58:25:62:33:a8:17:95:79:d6:34:
58:e5:ce:b9:a1:47:a3:70:31:1d:45:78:8b:d8:ea:
87:01:b4:32:3c:b9:f3:6b:3d:f5:3e:03:f7:3c:ae:
2d:a8:ac:b5:23:99:99:87:05:e8:d2:0b:1d:86:2f:
99:ff:a6:82:25:92:b1:8a:b3:b1:d1:4b:b8:d0:11:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1A:5F:06:2B:23:F6:67:5A:D3:3D:7F:F8:ED:51:0E:C9:19:3B:E7
X509v3 Authority Key Identifier:
keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:28:28:8a:c9:6f:3f:10:d1:40:21:23:64:2f:d7:44:4a:c2:
f8:90:65:3e:90:14:3b:22:d6:0d:66:91:97:97:74:0f:91:bb:
09:48:7d:c4:4b:72:a6:4f:fe:f3:5b:b9:69:d2:d3:0c:98:5c:
16:13:bb:11:87:d5:2f:9c:eb:3c:a2:49:bd:d0:7e:19:20:da:
11:84:d4:6d:c1:3f:d8:91:82:d0:28:f2:a4:95:c5:48:6d:c9:
4b:31:ac:9b:53:af:d5:9c:2b:60:04:b7:a2:1b:00:fb:d9:7c:
10:03:e7:d1:c4:1e:ea:6a:51:9c:e7:bd:1c:0e:56:81:e5:f5:
98:fc:b5:4b:8b:cc:2c:ad:8d:90:2d:6d:c2:f3:ef:f2:05:ea:
d4:a7:3f:b1:06:50:f6:99:a3:70:53:12:3d:0e:b8:b6:6c:fd:
34:df:5b:d5:c2:bb:fd:2e:af:7b:e9:9a:3f:a6:09:3b:ee:b9:
95:99:46:e7:2b:9e:06:a6:dd:7f:4d:3e:50:d1:bd:f5:de:2f:
ee:76:ea:3b:09:75:31:ee:40:78:c4:3c:c0:16:d7:46:10:2b:
3e:9e:00:6e:ec:1e:1c:52:5a:85:6f:02:b9:b3:b7:d5:5b:2b:
1c:87:8f:36:d5:a7:4e:02:42:69:20:0b:5c:b3:e4:47:65:69:
6b:e9:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:25:35 2025 by rpki-client