Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: aQ9iAMmxBsWG5sNmzoOa3inmaguSJwFUzzdeUj1xQfM=
Subject key identifier: 66:04:20:DC:E7:D3:DD:0A:3F:6E:C2:D0:4C:8A:7E:E4:86:A2:CC:70
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 01977F0D91B05DDA141EBDBB48611A702006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 0589
Signing time: Tue 17 Jun 2025 18:01:25 +0000
Manifest this update: Tue 17 Jun 2025 18:01:25 +0000
Manifest next update: Wed 18 Jun 2025 18:01:25 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: trKpoyA/0kkbEB7+XrXrEx95/3Ihj4M0u16hWITqVBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:91:b0:5d:da:14:1e:bd:bb:48:61:1a:70:20:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jun 17 18:01:25 2025 GMT
Not After : Jun 18 18:01:25 2025 GMT
Subject: CN=660420dce7d3dd0a3f6ec2d04c8a7ee486a2cc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:02:f9:a6:55:7c:5b:b0:76:7f:53:0b:af:
f0:aa:e4:33:6f:9f:c4:82:a3:04:c7:3c:06:7b:82:
a9:58:54:8e:7f:57:a7:43:75:2f:bd:f2:70:20:db:
d1:0b:b0:3d:da:e3:9c:5f:50:34:b3:72:d6:3e:7a:
64:49:3f:4f:9d:0f:9f:f7:67:4d:2d:97:5f:35:3b:
5c:9c:ac:0d:d2:5e:97:61:a2:a8:24:59:3e:2a:91:
ee:56:b3:72:11:ba:be:58:e8:66:67:d7:13:4f:f6:
00:05:c4:cb:19:91:e1:e6:83:cb:17:65:b8:8a:f1:
b6:fa:d9:87:97:e1:ad:bf:7c:97:36:c5:c8:eb:56:
b5:1f:c0:4d:fb:b5:00:a1:a3:c8:bb:bd:f2:6e:d0:
26:ba:f6:06:77:08:b6:1d:53:a1:03:29:f8:a3:2d:
b3:6f:b7:5a:b1:f8:9f:43:2f:06:5e:b9:4e:4d:cc:
e7:02:d9:22:bd:7d:af:d3:de:51:18:9f:8e:0f:51:
94:5d:62:c0:32:eb:e7:2e:af:b9:85:34:ec:6d:5d:
f9:7f:97:6e:dc:0b:05:22:52:ba:15:11:17:d7:91:
75:a6:6b:d1:e7:c0:a5:8f:d1:a7:94:13:78:2e:75:
e0:10:b3:20:8d:de:35:13:85:87:1a:1f:3b:43:9b:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:04:20:DC:E7:D3:DD:0A:3F:6E:C2:D0:4C:8A:7E:E4:86:A2:CC:70
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9d:fd:69:09:b6:5e:27:e3:65:3f:06:ef:bb:5b:83:cc:45:
72:2a:03:82:d9:1e:c3:2c:0a:c0:39:95:7b:48:40:35:80:28:
9f:e2:a5:cf:16:78:a3:50:1b:9f:f0:42:74:bb:59:72:e4:fc:
6a:7b:a7:7e:bc:70:bb:ec:96:81:54:5c:22:bb:5c:04:5d:77:
22:a5:eb:bd:b4:8f:f0:61:9a:1b:db:7e:4e:68:b4:10:9c:63:
bc:ea:ae:66:05:75:ce:e7:c6:a4:50:8a:09:0e:6c:e1:ba:07:
de:2c:34:d8:61:42:87:f3:c9:b4:09:95:49:54:6e:08:74:1a:
67:8c:90:16:5f:86:a2:8c:32:67:0e:ce:e0:9a:cf:ba:8d:e7:
ff:76:39:4c:1e:83:83:d7:31:43:d8:d9:a9:30:6e:5f:c9:e4:
14:47:fa:76:e0:17:02:c2:5e:0b:6f:17:27:cd:f6:40:50:3a:
13:f4:1e:32:82:bf:55:d9:a9:e3:ac:31:a3:2c:46:7f:c7:b0:
62:b5:b5:b8:e0:d3:40:0b:fa:fe:f1:f6:7e:0a:59:98:2b:9d:
9d:f1:e5:a7:4d:c7:73:64:1b:6e:dc:1c:c1:81:da:8d:0f:5b:
4b:86:fe:bb:00:2f:69:1e:34:bb:5e:f1:ff:d7:64:96:71:cc:
4c:57:9b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:09:53 2025 by rpki-client