Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: ZZ1hqi/YCetpJ2d2+gRh0jjJc1YjukzUL9O1LuHuSDk=
Subject key identifier: 63:1D:C6:12:65:8A:F8:7A:AB:EE:B2:85:2D:90:B1:12:FD:A1:A9:5E
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 01976BF4272D5D5A103E80866A43AACF4BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 1070
Signing time: Sat 14 Jun 2025 01:00:52 +0000
Manifest this update: Sat 14 Jun 2025 01:00:52 +0000
Manifest next update: Sun 15 Jun 2025 01:00:52 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: 74YasbIpz4RihZ20qogLVOww2r/mLvNKF9I4pua6Au8=)
2: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (hash: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=)
3: iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (hash: cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:27:2d:5d:5a:10:3e:80:86:6a:43:aa:cf:4b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Jun 14 01:00:52 2025 GMT
Not After : Jun 15 01:00:52 2025 GMT
Subject: CN=631dc612658af87aabeeb2852d90b112fda1a95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:cd:ff:4e:79:9e:de:f3:31:f0:a9:11:37:
d1:03:6f:83:04:0c:bf:f9:41:f5:36:27:89:23:05:
14:07:3f:3f:a5:b8:01:38:de:23:80:a2:13:1b:21:
47:dd:ca:51:9a:e4:7d:71:f8:72:1e:cd:9e:86:3b:
3a:fe:6e:c9:a8:76:f2:e8:29:5e:f5:78:84:30:50:
a2:aa:ef:7e:0b:58:bb:5e:fa:27:09:3c:72:4e:60:
7d:ce:32:46:3c:ef:8d:c3:55:e8:39:8f:3e:41:ec:
2c:16:8e:34:b7:a5:9f:5f:7d:5a:af:32:d7:32:13:
b9:cb:84:36:f1:a8:f2:79:f1:0d:1e:6d:27:b6:7e:
33:5e:ac:59:47:e4:61:d1:eb:76:fa:c5:b1:73:b4:
0b:ad:18:b3:df:e3:b3:1d:26:43:60:95:05:26:c4:
d5:3d:ee:c6:20:cb:40:65:2f:89:3e:40:75:2e:3e:
e1:5d:34:fd:a5:23:ee:8d:cc:80:a6:60:81:88:c1:
10:da:ea:d3:db:d1:d6:8c:15:49:03:0e:cc:96:b9:
c9:f1:28:f8:21:4d:23:23:95:5f:40:c4:79:5a:a7:
eb:f4:12:ee:13:1e:8c:e5:ea:d7:20:f9:a4:3d:18:
b0:0d:ac:d3:b4:5b:6f:f8:e5:4b:92:0a:ae:a5:e1:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:C6:12:65:8A:F8:7A:AB:EE:B2:85:2D:90:B1:12:FD:A1:A9:5E
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4b:db:95:77:c3:cf:ca:4a:9e:e6:ce:9a:4c:cd:fa:78:d6:
b5:83:6d:c9:ca:f0:ab:94:84:24:b7:41:fa:d4:23:e5:35:bb:
6c:fa:2f:93:7a:15:90:a4:ac:a9:0a:cd:56:80:a9:2d:7d:58:
38:8a:84:8b:8d:8f:56:7e:d5:f1:eb:f3:98:bd:f8:8e:34:63:
d5:0f:45:08:94:5e:68:ce:8b:92:65:5a:33:ef:fe:37:1e:cc:
86:78:02:49:f4:bc:e6:07:36:d7:a1:0c:e1:43:d6:60:97:cf:
33:9b:73:10:f2:f1:89:44:1e:69:10:3b:77:71:57:19:e2:b7:
6e:5e:47:b7:08:ab:ca:7b:40:d9:43:2e:ec:fc:7c:cb:b9:88:
6b:fa:57:3e:30:64:f5:1c:52:bf:f5:fd:55:97:40:d2:da:0f:
40:da:9d:b8:ee:ec:1e:91:a6:3c:b3:ee:f3:b7:51:d4:75:14:
d5:5c:ba:ce:aa:f8:ba:4a:19:7d:59:fb:4a:90:32:17:c9:fc:
1f:d1:a9:7a:c2:99:9e:9c:a6:7c:30:7e:8e:2a:48:3c:2c:9d:
a4:71:7f:b8:96:1a:03:53:b3:45:df:9c:58:ac:b4:73:35:d5:
da:06:1a:e4:58:af:52:cd:65:16:80:f5:05:5f:70:d5:29:8e:
3b:98:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:05 2025 by rpki-client