Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
File: cdm6oCIZQu3-SzqaVwgpXARBboA.mft (raw, json)
Hash identifier: REgFLQ+zpIFJSgUmx2BDld5qTTmZoRIN8BDh1yJsKaI=
Subject key identifier: AA:CA:A2:44:E7:CB:93:9C:7F:7B:F7:E5:DA:96:CF:FA:B7:C8:29:BD
Authority key identifier: 71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
Certificate issuer: /CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Certificate serial: 019873E3A2B1B1FDF85AFBE39DA1221981D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:34 +0000
Manifest this update: Mon 04 Aug 2025 07:02:34 +0000
Manifest next update: Tue 05 Aug 2025 07:02:34 +0000
Files and hashes: 1: Uqk6ZpOTGE36LT5fcwe3jUUK8bs.roa (hash: 3ocr9qZ6ri2OW2BEWPNTcZs9jR00BhDPO+YzVSk3MLY=)
2: cdm6oCIZQu3-SzqaVwgpXARBboA.crl (hash: VUUxDrhsaBGk5nSgLza1b+/9DNeBG0n09OhHnnbohdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:a2:b1:b1:fd:f8:5a:fb:e3:9d:a1:22:19:81:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Validity
Not Before: Aug 4 07:02:34 2025 GMT
Not After : Aug 5 07:02:34 2025 GMT
Subject: CN=aacaa244e7cb939c7f7bf7e5da96cffab7c829bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:1e:ef:60:67:d6:d9:00:b3:68:06:7d:96:
25:61:7e:79:8c:ce:fa:9c:7e:34:35:f0:9a:6d:6d:
20:45:5f:bb:3b:34:f2:b9:be:ba:5a:49:2e:bc:9b:
c8:6c:59:97:e6:1c:4c:4f:2b:8e:49:7d:19:cd:c8:
58:63:3f:3a:1c:db:6a:78:1d:6e:5a:b1:40:87:0c:
38:39:50:b5:7a:f2:87:ad:1a:3a:1c:be:19:02:a6:
8a:43:3b:91:6b:c5:d9:ee:58:30:60:35:7c:8b:46:
f7:26:73:d4:29:ff:7e:98:6f:ee:93:aa:83:26:50:
c4:12:66:5a:ce:c7:54:e1:14:62:56:a1:b2:00:d5:
27:2d:f7:15:9a:95:aa:0d:0e:ab:fe:8d:b8:d5:08:
eb:0b:ce:3f:d0:e1:d0:0c:e4:c6:97:31:a7:12:b5:
c5:eb:81:d9:61:9a:5a:52:08:a0:5d:bd:b9:58:e7:
fd:bf:29:3f:66:67:94:5e:d6:55:4e:17:5a:60:c4:
97:2b:61:02:14:ff:c3:8a:9d:31:82:d9:13:94:43:
84:cf:22:7f:9e:fd:a9:6c:7b:a5:cd:31:2a:1f:14:
d5:24:82:02:e3:02:6c:c2:16:a9:d6:75:59:4e:e0:
94:f0:43:73:e9:0c:b6:4e:37:ae:dc:c0:16:d2:65:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:A2:44:E7:CB:93:9C:7F:7B:F7:E5:DA:96:CF:FA:B7:C8:29:BD
X509v3 Authority Key Identifier:
keyid:71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e4:09:41:d5:7a:b2:65:4e:5a:d0:09:9d:5c:02:a6:2a:4b:
df:bb:ea:f2:27:92:77:d0:28:91:7d:83:3e:9f:8f:3d:b2:02:
ce:db:5a:d1:f3:8b:6c:2b:b3:e5:a2:db:be:ee:ba:1c:9a:8c:
2e:17:74:26:1f:5b:6f:fa:2c:44:55:05:c7:08:95:32:3f:97:
9c:ef:a4:49:33:f1:1c:30:b2:0e:dd:41:8e:0c:b2:0c:4d:70:
a8:20:ec:60:b3:24:ef:67:d4:21:a0:7b:08:40:6e:12:8d:e5:
61:eb:a7:8c:fd:1b:19:a6:88:70:13:b3:5b:b1:e6:92:26:0e:
18:b9:42:2c:30:a3:68:38:3f:e3:5e:65:24:3b:d9:ce:e3:02:
13:80:93:9e:df:16:63:89:c1:40:7d:77:d8:bc:06:8f:07:28:
8f:bd:7d:2e:93:7f:1c:bf:98:75:ce:ab:0f:bf:6b:c6:6a:6b:
ec:97:95:4d:b4:08:75:b7:20:4c:10:60:45:e8:35:93:c6:41:
3a:18:9b:a0:7d:d3:61:d9:ca:7f:05:e8:45:0e:3a:c1:37:e7:
f2:3a:56:a3:ed:d4:28:6f:56:54:bc:a8:ec:d7:75:fa:a5:02:
c5:66:d6:9b:28:86:0b:d7:1d:a7:ab:70:16:5a:70:e9:47:16:
b4:64:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:09 2025 by rpki-client