Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: eGeOW9Nuc06YP6FfG/nsBMdijrWfZ/50TOQj/ConMww=
Subject key identifier: 43:96:23:65:4E:C3:3F:1F:33:BA:50:0E:96:C9:C5:E8:43:EF:E0:4D
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 01976D3E24CE53CCB2F872E1715595362F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 07:01:18 +0000
Manifest this update: Sat 14 Jun 2025 07:01:18 +0000
Manifest next update: Sun 15 Jun 2025 07:01:18 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: pslk3evnO6N2b72czC9OX7Sp5wnRSrF4phdwKbw7vQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:24:ce:53:cc:b2:f8:72:e1:71:55:95:36:2f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Jun 14 07:01:18 2025 GMT
Not After : Jun 15 07:01:18 2025 GMT
Subject: CN=439623654ec33f1f33ba500e96c9c5e843efe04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:03:fd:86:b9:ab:c8:a8:cf:35:a4:81:a6:
34:77:18:62:64:a3:ff:91:93:52:fb:96:18:03:af:
62:03:ad:24:7e:1e:72:23:06:46:b9:ee:9e:0a:8a:
18:fe:3f:ad:14:8f:58:82:49:37:b8:a1:3d:0d:85:
c6:06:0a:f5:c2:ba:8d:70:09:c4:dc:9d:69:2c:84:
2c:b5:43:c8:1f:4a:74:07:4a:05:14:99:b2:66:69:
93:dc:73:bf:9a:0d:14:e9:7e:6a:af:4e:4b:c4:29:
35:71:6b:15:ba:40:a2:f1:a8:50:28:14:8b:07:e2:
bc:68:9d:5d:86:91:61:ad:a6:cb:ec:78:b7:d3:6b:
67:95:b2:8e:81:62:20:01:7b:27:f6:7e:8b:86:46:
8d:62:e8:a8:14:41:95:8b:a7:3f:bf:ff:72:0e:81:
6e:ca:1e:58:ad:75:6f:6e:13:5e:bb:b1:c4:17:a3:
8d:03:26:6b:97:54:7c:fd:17:c0:03:9a:76:c1:98:
31:fd:92:a3:9b:44:dd:e1:c7:41:88:ef:9f:2c:4a:
75:52:32:9f:5d:a5:fa:4e:ae:06:ed:ad:83:d1:de:
81:77:a2:fb:be:7d:3c:e7:c4:da:6f:78:32:9b:23:
42:5b:18:4e:54:49:6b:29:b9:3c:4b:b3:c1:1b:7c:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:23:65:4E:C3:3F:1F:33:BA:50:0E:96:C9:C5:E8:43:EF:E0:4D
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:11:b4:15:b0:fa:e4:96:3b:87:7f:22:6f:13:a0:78:22:
36:9e:1e:97:66:aa:b4:d6:fe:cd:60:2d:2f:cf:15:28:55:df:
e6:a5:af:69:28:8b:05:51:05:1c:bf:c7:34:a2:db:13:ea:25:
ed:4d:0b:1c:f2:8d:32:44:96:14:d1:a6:de:20:76:ee:d9:69:
a7:f4:e3:4d:99:fc:0e:8a:87:9a:41:8d:50:5d:a2:6b:3b:be:
1d:ed:30:da:94:5a:71:6b:f8:d0:53:6a:1b:1c:27:1f:6d:74:
f0:0d:b7:24:5a:30:1e:1f:3c:64:3a:74:14:78:28:a9:8a:4d:
5e:8c:18:7d:24:b3:fe:52:c1:02:45:66:0c:96:d7:e9:99:d6:
fa:a0:bf:56:23:85:d4:01:8b:08:f5:7c:cf:6d:74:58:08:8b:
41:9a:99:6c:b3:ba:4e:bd:0b:17:f6:32:ce:a5:78:0d:f3:63:
4c:01:50:b9:5b:24:ad:9c:d3:6e:68:48:7e:0c:92:6e:56:b3:
44:a9:3b:6d:e3:b5:42:bb:ba:f2:d9:7e:90:ab:bb:a6:bf:c7:
6d:2b:c4:5d:89:2f:21:b8:26:c9:99:45:fe:b3:85:a5:df:4f:
a1:60:0b:7c:9b:40:bc:09:a4:eb:ad:2b:27:b5:fc:c7:df:44:
11:31:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:11:58 2025 by rpki-client