Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File: _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier: 0DRLIg2Bfh1m7Sc+lwhQNQyTjyyXaHS3PBSnM8OKwaE=
Subject key identifier: FA:DA:2D:6A:26:11:4B:C1:AD:67:12:42:AC:47:8E:1A:FB:DF:C8:8C
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer: /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial: 01977308E331BFF92BF090474316B6AE4AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number: 1292
Signing time: Sun 15 Jun 2025 10:00:51 +0000
Manifest this update: Sun 15 Jun 2025 10:00:51 +0000
Manifest next update: Mon 16 Jun 2025 10:00:51 +0000
Files and hashes: 1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: CaIMVFH8OxGlObSX2k+AAVa4O5zMJlNd2h/QHOUkuF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:e3:31:bf:f9:2b:f0:90:47:43:16:b6:ae:4a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Validity
Not Before: Jun 15 10:00:51 2025 GMT
Not After : Jun 16 10:00:51 2025 GMT
Subject: CN=fada2d6a26114bc1ad671242ac478e1afbdfc88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:b8:5f:59:d8:1e:79:58:d2:93:6f:11:95:
e1:8d:c6:c5:fe:9e:5c:53:13:f0:c5:3b:64:3b:c9:
7e:91:df:74:9a:16:0d:dc:7f:d0:a8:61:1b:6b:94:
f9:9d:9a:e7:b8:3d:3c:79:f7:36:6b:8e:e4:9e:46:
17:47:d8:31:fa:f6:5a:87:de:09:68:4d:49:3f:78:
42:7a:e4:62:a9:de:a9:4c:2d:9c:c4:00:38:ec:7b:
cb:09:90:81:a0:38:94:2c:92:82:5f:51:d2:04:21:
13:01:c5:42:85:e7:ee:5d:47:d9:fd:b4:f8:69:ce:
56:5f:48:e7:76:e7:8b:08:5f:cb:06:c7:26:da:7a:
6c:6f:4d:86:14:0d:e7:7a:40:12:ab:47:3b:6b:df:
e4:b6:e2:74:47:72:78:c5:f1:57:68:11:73:bc:37:
4e:6d:16:c1:82:c9:97:24:3a:8f:f1:e3:1f:6d:df:
3e:0f:f4:37:8f:9d:08:e9:37:22:77:ba:fe:03:a5:
47:cb:b0:e5:26:4d:85:00:7c:e7:84:21:06:4f:67:
d9:3c:4f:d2:23:80:bc:b5:0d:ab:de:8c:17:6e:23:
19:4f:9d:9e:95:59:6d:0d:ef:64:26:e7:cb:33:c5:
7c:3f:c2:0f:79:e6:c4:9a:d0:38:33:d4:4e:fa:dc:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:2D:6A:26:11:4B:C1:AD:67:12:42:AC:47:8E:1A:FB:DF:C8:8C
X509v3 Authority Key Identifier:
keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f7:48:9f:22:82:b1:8f:8f:41:17:b0:7e:82:61:9e:06:37:
aa:17:d1:cc:1c:71:d6:f9:f5:f5:7b:47:ce:9f:2f:98:e9:b0:
38:53:1d:cd:85:92:a6:7e:c9:41:73:e9:78:0a:53:8f:7e:71:
36:2b:16:ca:dd:2c:0c:ae:44:fb:63:06:e2:39:b7:8d:0d:1b:
db:04:8d:b6:5b:9f:9d:ee:da:29:af:52:f7:87:0b:9c:fd:37:
33:10:d9:7f:96:4d:bf:a9:8b:c3:8a:99:86:cf:7c:96:9e:aa:
ed:55:f3:a3:d5:3f:01:8e:7f:47:83:30:a5:18:c5:bf:aa:ad:
0e:bb:ed:91:0f:25:49:33:24:52:a5:e8:18:2f:1f:c7:d0:04:
31:44:14:cf:8c:e5:5b:9a:0a:78:0e:7e:4f:87:b8:38:c0:74:
bb:91:30:1e:95:54:b8:01:13:a8:29:ab:ef:e9:41:02:db:c9:
ec:ad:98:31:19:5a:c8:35:dd:a9:f6:19:09:f9:35:2b:b8:72:
04:65:2f:91:cd:24:9d:92:9b:6e:2e:43:9a:3e:65:ac:a5:84:
79:de:7d:10:3a:72:16:9e:5b:c1:81:a8:6a:01:f8:c1:16:d4:
4a:20:65:af:7c:fe:f0:7b:3a:72:b6:87:81:67:6c:5b:d8:85:
01:6f:e5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:24:33 2025 by rpki-client