Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier: lY0b3nJ0NRE6Vn3rc0uy6pL4KTHiKEzsszmH7S7V9oE=
Subject key identifier: DC:7F:81:EB:BA:2A:52:A6:86:BC:15:78:FA:A8:1A:D6:2F:C3:18:6A
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 01976D3E3FBB0FAA6826F39C6955AF1AC220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number: 0775
Signing time: Sat 14 Jun 2025 07:01:25 +0000
Manifest this update: Sat 14 Jun 2025 07:01:25 +0000
Manifest next update: Sun 15 Jun 2025 07:01:25 +0000
Files and hashes: 1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=)
2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: ooIGv6ZdKCMY/TGV4c0Glwtc070x0KrHa/n1mmUv7C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:3f:bb:0f:aa:68:26:f3:9c:69:55:af:1a:c2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Jun 14 07:01:25 2025 GMT
Not After : Jun 15 07:01:25 2025 GMT
Subject: CN=dc7f81ebba2a52a686bc1578faa81ad62fc3186a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:46:fd:38:fb:c6:01:57:ae:3d:e7:03:af:25:
9c:49:31:62:84:85:5d:d5:ec:86:75:19:28:01:d7:
d9:bd:dc:5f:46:0a:cc:9f:63:1c:06:5a:23:24:67:
f2:19:f8:de:8e:99:78:f9:69:3f:3b:ed:3e:6d:18:
7c:89:40:05:9c:b8:0b:de:b6:b2:b8:d2:a2:c8:d1:
69:c1:f9:d4:5d:ca:85:eb:64:bb:7e:ee:5b:57:33:
3b:15:b4:58:32:47:53:04:c3:a8:0e:4c:f0:2c:ec:
a2:60:ab:40:2a:af:92:07:9f:13:af:d8:de:2b:32:
ac:dc:42:18:f8:19:ac:f7:87:68:80:8f:35:98:f3:
06:d5:18:a3:ce:ee:f9:f4:07:3f:7b:2b:94:86:79:
79:f8:67:c8:56:c1:65:91:e1:41:7e:99:97:2c:94:
1f:42:f6:46:a0:fd:86:16:0b:9b:6b:5d:7f:5e:a5:
a5:f5:dc:2d:70:88:35:dc:ab:de:5a:04:fa:dd:b1:
28:78:cb:47:9b:10:d8:88:7f:11:02:18:27:02:f7:
49:cc:b6:62:3e:2a:74:8e:cf:e8:34:c4:1e:8e:03:
03:3d:74:7f:31:6b:7a:6a:30:7f:61:c7:04:bf:0d:
2b:1d:a8:d0:dd:6c:d9:73:4b:cb:98:71:02:b8:25:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7F:81:EB:BA:2A:52:A6:86:BC:15:78:FA:A8:1A:D6:2F:C3:18:6A
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:68:91:bf:c4:57:a3:bc:a9:ad:6b:bd:27:27:d7:71:cc:d3:
68:4d:f8:3d:ef:10:64:9e:12:fb:51:03:0b:18:a2:cd:d2:99:
dc:89:2d:63:a2:5f:53:24:ba:17:6c:9d:60:27:0b:b3:5f:43:
89:78:79:94:1a:af:13:ff:97:5e:2f:7e:0d:10:25:e0:c2:e2:
49:fc:de:d0:df:82:53:33:c7:45:f8:ca:9b:9c:f5:f4:41:ce:
6f:8f:1f:4d:7e:ee:20:c7:ac:d4:24:52:c7:aa:bf:5f:e7:c3:
54:79:bc:8c:15:c6:15:d6:7f:33:93:2d:27:40:71:bb:3d:3c:
84:41:38:07:4a:31:90:eb:ad:19:82:35:f0:4e:2e:22:08:33:
74:9d:d7:53:66:05:11:b7:9e:ce:83:b5:d2:86:2a:1e:21:57:
b7:9d:57:b6:7c:36:6d:6d:51:77:65:ba:9e:4e:5b:29:43:2a:
c0:8d:5c:82:b3:cb:22:89:e7:ee:19:61:23:82:d1:70:fb:5b:
16:6d:66:34:ad:77:2d:0e:94:29:a1:b6:45:4c:fd:1b:58:2e:
ea:24:f3:55:0c:5a:06:ba:4c:cf:27:ec:17:39:be:9b:2a:9c:
d7:a7:9d:88:4f:e0:d5:3c:f6:04:38:5e:eb:d9:fd:62:fc:45:
02:48:f1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:36 2025 by rpki-client