Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: 90JGWcTp8G0S3UALdHL4mmCvkbg9jSd2c+ovWRkMBmI=
Subject key identifier: 42:34:69:2D:DF:48:02:00:4D:41:FE:DD:E7:72:D1:1E:AC:CB:0A:C3
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 01976C2B49E31CB9944A76D7570C04C85587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 08BB
Signing time: Sat 14 Jun 2025 02:01:05 +0000
Manifest this update: Sat 14 Jun 2025 02:01:05 +0000
Manifest next update: Sun 15 Jun 2025 02:01:05 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: RVMkHaTclVjYD0GCggL4xTFtRMojKMnol8aZ2QWnGIY=)
2: eTuN91J09OBNoZtxEtruVhH4DbY.roa (hash: F1iOkNAfZrkXFWgz/sdsk9Ul6Wkc9BDyHiaUC1recQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:49:e3:1c:b9:94:4a:76:d7:57:0c:04:c8:55:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Jun 14 02:01:05 2025 GMT
Not After : Jun 15 02:01:05 2025 GMT
Subject: CN=4234692ddf4802004d41fedde772d11eaccb0ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:33:f2:45:43:2c:f1:48:0d:2b:31:58:53:
b9:4c:68:e5:d8:4f:46:d4:2f:14:89:1d:07:4c:a2:
93:a2:fe:46:11:9f:07:21:33:42:20:a4:fc:f6:94:
d2:ae:e3:5f:bf:69:64:ea:2e:fc:b3:83:ad:6f:22:
b0:ef:48:d6:7d:9c:c0:ca:9b:3a:84:03:eb:04:d5:
18:4e:d9:a7:3a:01:25:95:4f:4a:56:95:fd:d7:d1:
75:b2:93:b2:aa:11:d4:9f:0c:b3:9c:cc:7f:0e:3a:
53:73:f5:99:09:a8:dd:18:f7:a0:f8:09:e8:48:07:
15:60:c9:c1:a9:9b:3c:78:e4:11:22:c0:ad:10:5d:
e2:b7:e2:30:76:85:b4:ed:14:49:ec:ea:f9:f0:d7:
d2:f7:59:0f:b8:b8:7d:16:35:b5:65:70:d3:ae:21:
37:9d:a7:60:11:67:83:f3:7f:a1:97:59:1d:1c:4f:
b7:a2:12:96:7c:e4:73:57:f6:d6:f5:29:22:5f:1e:
f3:be:43:08:eb:1a:bf:55:9b:5f:d3:a1:c0:97:94:
4c:60:49:76:c4:61:eb:1c:ac:c1:5b:fe:9d:92:94:
a1:08:04:80:8c:e3:24:0c:1a:5d:74:be:93:0d:52:
bd:dd:0b:71:b8:fa:98:db:de:3c:53:52:36:bc:b8:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:69:2D:DF:48:02:00:4D:41:FE:DD:E7:72:D1:1E:AC:CB:0A:C3
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:00:a7:e7:cc:8f:63:11:d3:ee:94:c1:82:29:63:e7:20:49:
fe:aa:10:69:3e:74:5c:61:83:ba:c8:85:6d:c5:c3:c7:a5:14:
1c:66:49:7f:12:04:ed:dc:ea:6a:bb:70:36:4b:e7:d3:d2:7f:
5a:9c:aa:10:bb:52:39:1a:77:19:8e:0e:44:de:2a:ec:31:68:
12:ea:c2:9b:3d:1b:5a:89:10:fb:8d:6c:31:1a:32:b2:4f:a9:
7d:47:37:f1:9b:85:ba:11:d7:18:41:13:2b:b9:c9:ce:53:b8:
2b:9c:16:4f:f6:4b:ba:24:1c:b4:32:6d:e5:48:40:34:41:dd:
0f:91:5c:84:f1:e8:86:3d:9e:4a:c7:0c:36:49:8c:06:e3:56:
d6:19:f8:94:ad:6c:c3:36:dc:dd:2b:47:4b:54:89:aa:2f:ed:
84:73:06:2c:cf:7a:64:7d:fa:7a:db:1e:57:73:82:b0:bd:52:
f6:7a:0f:46:12:2e:55:95:91:8e:0e:33:52:f1:59:a6:45:93:
97:93:9d:b1:65:d2:c0:c0:e2:e2:0d:11:2b:e8:56:40:20:a9:
aa:43:8a:0d:7f:5d:31:df:95:43:82:27:ca:0b:05:b6:f8:d5:
25:87:e7:ef:a8:b5:fd:b3:ef:40:4c:47:ef:8f:27:24:6d:ea:
43:e5:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:34 2025 by rpki-client