Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: c/ECRLeV+nv7q0JFUAem87xWxAzhpP0vsedbsKTrojw=
Subject key identifier: CF:EE:4E:BB:DB:DF:FA:03:EC:76:66:A5:B9:33:AD:07:BB:69:C4:D7
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019849D3486E8B7358D7E0515949DE748FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:40 +0000
Manifest this update: Sun 27 Jul 2025 03:00:40 +0000
Manifest next update: Mon 28 Jul 2025 03:00:40 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: sKMX5NMQmTWdgyxiEIuC5/fX6JW4IO3l2MTV9fas4/g=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:48:6e:8b:73:58:d7:e0:51:59:49:de:74:8f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Jul 27 03:00:40 2025 GMT
Not After : Jul 28 03:00:40 2025 GMT
Subject: CN=cfee4ebbdbdffa03ec7666a5b933ad07bb69c4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:f7:c7:b6:ac:f8:bd:ae:17:52:dc:0c:9a:
6b:17:17:f8:12:d5:af:9c:4b:a9:d4:6f:7e:b8:fb:
44:07:32:ba:aa:41:02:8c:b2:20:88:07:1d:33:b7:
1e:cd:5f:49:4a:c0:73:d0:f1:5b:14:9e:d3:48:23:
0e:a6:4e:8e:f3:b3:50:99:b4:f4:e0:50:9c:f3:5e:
49:0e:34:b2:56:59:d3:ea:20:fc:e5:22:12:07:ac:
0c:3d:f2:36:a5:c1:70:93:b5:51:57:5a:16:72:5e:
a3:d9:6b:32:fd:54:d9:36:ee:19:c6:98:34:1c:20:
7f:b3:ba:54:7a:44:d9:fd:a8:92:62:79:65:5d:8c:
47:e3:53:ce:49:06:c8:48:a8:b4:78:16:9c:4c:c8:
95:aa:bc:de:f7:fa:ba:25:2a:f3:6e:9d:a8:5d:dc:
b7:bf:08:65:3a:b9:57:8d:1a:07:fc:92:72:2b:35:
df:ff:d8:48:11:be:e9:21:a4:55:8d:fc:b8:cc:03:
26:80:06:e9:a1:7d:41:f4:2b:7a:02:93:20:b2:63:
bd:77:93:a2:c3:22:e2:70:b5:25:1c:12:81:b7:90:
4d:07:c0:e4:da:cf:a4:3b:64:5a:4f:20:45:2b:8e:
e8:fb:73:cc:71:48:fb:46:3e:30:14:a5:d7:b6:fe:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:4E:BB:DB:DF:FA:03:EC:76:66:A5:B9:33:AD:07:BB:69:C4:D7
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c6:80:15:7c:88:1b:6d:a5:44:b7:5e:55:fc:45:0c:f8:f7:
33:71:6f:e3:17:a9:9f:f6:8d:98:2e:3f:cd:68:90:08:5c:01:
e0:bf:df:2b:fd:da:18:31:48:0c:94:d4:0a:85:42:e9:f8:3c:
85:44:ee:a5:32:ab:0a:29:f3:b5:65:e5:43:07:81:55:af:4e:
29:48:8b:81:4b:bb:75:99:f2:4d:69:35:f8:7b:88:1b:f9:00:
2c:ec:d9:3b:90:be:33:0e:7d:21:1f:15:c9:ce:a5:86:5f:2a:
72:f3:ad:7b:21:4b:23:84:1e:fc:4c:f4:3d:41:06:30:b6:f6:
87:a2:f2:b3:e6:1e:0a:b9:8f:d6:e9:cd:29:22:52:bd:26:0d:
a6:1b:0b:a1:6c:1f:fc:99:b9:a2:d0:1d:54:81:a9:ad:74:5b:
5f:6b:f5:2d:da:4b:77:da:0c:a9:96:af:5b:f4:c0:ee:e2:c7:
31:84:35:4d:94:78:21:82:22:80:ed:a9:0c:4e:74:75:70:ba:
1c:62:58:a6:a6:d3:43:4f:70:e5:19:f5:63:98:c3:88:9c:36:
07:05:da:aa:3d:74:23:56:43:02:77:ed:92:3b:e7:bd:02:b9:
bd:ef:3a:b4:56:28:dc:43:e9:bb:2a:7d:fc:6c:ef:9e:70:2c:
c4:71:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:33:23 2025 by rpki-client