Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: Rqg/nk232Ae69Zh6/YZC4eIDdb40oPbalEN9yveyz4s=
Subject key identifier: F5:20:AF:03:10:E1:DD:17:CF:A8:5E:EA:DD:7E:99:1B:31:3B:E3:BB
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 019849654D489E8EC834CC5DB174E4B9DBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 1208
Signing time: Sun 27 Jul 2025 01:00:32 +0000
Manifest this update: Sun 27 Jul 2025 01:00:32 +0000
Manifest next update: Mon 28 Jul 2025 01:00:32 +0000
Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=)
2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: sLgImQzxPGqlgqDqk4Qva7lxYqJ6eRfitEqqdzAhpaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:4d:48:9e:8e:c8:34:cc:5d:b1:74:e4:b9:db:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Jul 27 01:00:32 2025 GMT
Not After : Jul 28 01:00:32 2025 GMT
Subject: CN=f520af0310e1dd17cfa85eeadd7e991b313be3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:0a:37:6e:c6:1b:f1:87:e7:25:8b:ab:85:
a9:67:c2:19:0c:27:a6:2d:3d:3f:6e:bc:ed:80:57:
70:20:8c:ba:0f:30:74:4f:5f:6b:49:a5:5c:e7:04:
12:a7:d8:59:ed:18:ae:d4:42:2d:85:73:53:cf:77:
53:0d:d0:4e:02:16:8b:ed:54:46:91:52:57:46:0b:
ae:4d:3e:a9:2a:34:d1:09:25:da:4e:a9:dc:66:3c:
fe:ba:a7:b4:82:3e:d8:9f:ca:f1:df:8c:90:be:ce:
3a:29:53:ca:20:c8:71:56:7d:3c:d9:4b:54:f8:1b:
1f:03:84:b9:58:7e:d4:ea:05:86:31:e1:85:36:79:
10:0b:36:50:13:f5:0d:7f:09:7b:93:00:50:af:ce:
19:c7:9a:e6:22:6e:18:b2:07:ac:5d:b0:cd:9e:d1:
a5:e0:f9:e7:93:6b:c6:e6:fb:82:d1:59:da:88:13:
35:7c:85:3f:1d:13:a1:a0:07:e6:a7:3a:2e:06:46:
2d:80:45:18:68:df:62:42:b2:7c:96:47:2f:97:55:
2d:cf:ce:7a:41:cc:5d:76:97:b8:89:bf:07:dc:da:
50:a8:c0:6d:f7:c9:e9:cd:e2:b3:0f:42:c5:9e:5b:
ce:e5:e6:cb:b9:1b:9c:75:f8:9e:0b:7d:b7:d1:fc:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:AF:03:10:E1:DD:17:CF:A8:5E:EA:DD:7E:99:1B:31:3B:E3:BB
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4a:62:00:90:fe:dc:26:ef:c6:1a:50:d0:97:56:0e:d8:0d:
f9:b3:80:80:7c:b0:d4:3b:d2:1a:1b:5b:e8:32:a5:4b:7d:7c:
e1:e3:dd:ee:80:ed:05:4d:3f:65:e7:81:0e:cb:82:0d:8f:9c:
1b:6e:c8:60:cb:84:43:a9:38:a5:0e:31:85:5b:80:9f:e3:d0:
7e:38:66:ce:45:7d:17:d8:a3:85:82:9b:90:58:48:22:a9:92:
ee:2d:f6:c9:f2:be:60:26:bf:5f:a6:e2:25:78:a7:3d:e3:6e:
d4:7f:97:d5:e5:67:ac:2f:16:11:92:96:4f:2b:96:d9:00:27:
e1:e0:ee:f3:4c:49:2a:bb:9a:f7:b3:57:b3:ab:25:ac:80:6f:
31:b5:a6:ae:22:72:a5:73:24:df:94:22:64:24:e1:fa:b2:f4:
f3:2a:a2:e5:d1:a5:87:72:c2:d9:34:99:9b:e7:1d:d6:66:09:
c4:ba:7b:49:2c:f0:18:6a:3d:8c:35:32:8b:82:1b:0d:39:b2:
c1:55:18:e9:97:c7:56:86:14:20:90:12:04:2d:96:2e:f2:3f:
7d:91:8b:c3:22:ce:c1:a5:04:be:af:4a:5d:0c:d2:a2:e0:ff:
37:c9:5d:c9:7f:24:0f:ae:71:24:00:4c:85:7b:c6:3c:96:60:
40:5b:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:22 2025 by rpki-client