Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json)
Hash identifier: Z+0EweOBmJ5aBMPt9LlydCc1uVT+pI4YPTNWH6ubppM=
Subject key identifier: D9:B5:8B:E0:AD:27:0E:A2:6D:3A:71:5F:E2:38:24:7C:7D:5E:1A:04
Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Certificate serial: 01976BF45142436F3F39626596465ABE2EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
Manifest number: 0304
Signing time: Sat 14 Jun 2025 01:01:03 +0000
Manifest this update: Sat 14 Jun 2025 01:01:03 +0000
Manifest next update: Sun 15 Jun 2025 01:01:03 +0000
Files and hashes: 1: B3Ys6xmlqC9wLcdB3cpexOusdU8.roa (hash: KigHTwHmCj6upextpp39A2hT194k5nIpvq7I4qZjAqg=)
2: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: nwAcVonrj593QS6Z5y5VToN41Jo7Syt0MlNBqW8V30M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:51:42:43:6f:3f:39:62:65:96:46:5a:be:2e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c
Validity
Not Before: Jun 14 01:01:03 2025 GMT
Not After : Jun 15 01:01:03 2025 GMT
Subject: CN=d9b58be0ad270ea26d3a715fe238247c7d5e1a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:3c:30:2c:d9:11:a1:af:95:2e:8b:74:76:
d2:bc:6c:3c:a9:90:e5:42:c9:49:42:33:6a:df:44:
05:bc:34:82:8c:44:49:68:8d:85:0d:5d:68:12:7a:
66:78:a0:34:5c:e7:3f:75:8f:67:8c:16:00:f5:57:
fe:6e:14:30:7d:29:6a:95:4b:87:43:e5:38:dd:08:
e6:c7:12:d1:f6:b3:3a:60:c3:f4:19:01:bf:0e:4a:
5d:10:5f:af:38:5c:3f:e6:b0:1d:9f:35:a3:d1:40:
b7:46:cc:72:e2:e2:94:bf:1d:5f:04:d3:8e:a6:c9:
5f:e3:6c:91:2d:e7:aa:52:aa:94:e9:99:a7:b0:8f:
9b:32:e2:a1:e2:8b:80:c5:af:3d:b2:f8:fc:3a:b0:
6c:33:55:49:85:e5:4a:d6:0f:38:12:8d:50:06:e9:
53:21:f4:d8:a0:6e:20:d2:f9:ee:b7:b4:4f:0b:ba:
91:37:cc:cf:66:40:83:ce:c2:c5:24:bd:95:ab:52:
29:01:8b:c0:2e:3f:68:a3:9b:fa:98:26:a9:19:ae:
9b:56:8f:b0:71:e4:5e:ab:41:1b:c2:ca:0d:b1:c3:
0d:9b:af:f2:65:f9:31:d3:f9:8d:6b:ef:4a:37:6a:
2b:1b:db:c4:42:c6:ab:20:70:72:fc:e4:8e:a0:30:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:8B:E0:AD:27:0E:A2:6D:3A:71:5F:E2:38:24:7C:7D:5E:1A:04
X509v3 Authority Key Identifier:
keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d8:cf:4b:56:d9:c9:1b:e6:5e:5e:20:59:8a:d1:d1:af:6f:
2e:09:a7:77:2e:26:f1:b7:a3:0a:51:0d:2d:c2:e9:07:f3:5c:
88:c7:58:9f:0e:62:98:1f:8b:a0:c9:98:7f:73:b3:ed:1f:7e:
e3:40:c0:1f:b8:92:ad:84:f5:8c:27:63:57:c4:e6:02:84:95:
c9:60:57:b1:28:e3:5c:2c:25:21:92:9a:1d:fa:03:39:c6:eb:
50:4d:76:a7:96:87:7e:ed:a1:f1:f5:78:4a:ea:a8:bb:88:3f:
7b:ae:c0:de:87:31:a5:30:98:3b:e3:05:f4:cb:63:38:a8:8c:
3e:7c:03:08:69:f7:25:38:e9:d4:48:b8:3f:8f:3e:50:94:1b:
47:ec:ad:73:a0:0b:53:d2:ff:b6:aa:2d:71:ed:0a:0d:fa:9d:
66:58:09:77:51:dc:67:b1:b5:ab:1a:9c:d7:60:85:78:3d:88:
f4:e9:1f:62:1c:fc:7a:03:f0:07:68:0d:6e:9b:2e:a0:5a:16:
4c:58:7d:4f:04:ed:c0:7e:b1:fc:38:83:4c:26:0e:fb:a1:d8:
18:69:3c:c7:5c:c7:31:c4:69:b2:92:8e:87:d3:57:76:37:fb:
d7:85:8f:63:40:a2:d7:65:ab:e4:06:9d:95:cb:ec:b7:d6:70:
25:84:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:21 2025 by rpki-client