Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: PLCBUaFsysqQ2+SiRP051cM5eVu2CiDSV5UFLxVUS48=
Subject key identifier: CE:18:9D:B1:48:85:29:87:B9:DB:29:24:D4:0E:F3:7A:E6:01:8E:70
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019856EA8988442538FA4674635D4798DC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 1319
Signing time: Tue 29 Jul 2025 16:01:07 +0000
Manifest this update: Tue 29 Jul 2025 16:01:07 +0000
Manifest next update: Wed 30 Jul 2025 16:01:07 +0000
Files and hashes: 1: 26OroNSilLDsLnRmS90OawnRg8M.roa (hash: 2vZiL1ss373Q0TX+B8Q8SMDZKCr1m9fpyjjeqgVg0rI=)
2: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: XqEIltekM00Rob7NRLFPRdsSjd0FNi5s8mHImIIDE1k=)
3: yFq0JfOaNjdhRiNZMahKgBz5pBs.roa (hash: HLvs21UJM8ndMu/vC6YjvpshtGffGUPV1RHDv0ERCAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:ea:89:88:44:25:38:fa:46:74:63:5d:47:98:dc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Jul 29 16:01:07 2025 GMT
Not After : Jul 30 16:01:07 2025 GMT
Subject: CN=ce189db148852987b9db2924d40ef37ae6018e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:9c:5d:09:aa:9e:e4:f0:4d:92:55:2f:2b:
56:ba:f8:56:ea:f6:7f:77:e7:3b:d1:49:cf:06:3d:
45:41:02:c7:0a:0d:73:62:1b:6e:3c:25:63:1e:86:
dd:28:a4:22:d3:45:74:fb:3a:76:2f:81:a9:ed:e3:
46:26:6d:fe:ab:7a:10:78:db:dd:f6:fb:85:2c:6f:
e1:e5:ac:a0:50:91:3f:20:f1:e3:5d:41:8d:9c:0d:
52:0e:40:d3:49:c2:65:5a:50:4c:3f:bf:c6:84:25:
cf:c3:58:35:71:09:30:5a:6e:35:a2:cd:a0:77:c7:
e3:0b:54:e4:1c:70:81:7b:8f:d7:70:bf:d6:58:57:
e0:09:83:3f:a8:87:2c:cc:84:81:53:2f:23:b3:e4:
0a:be:f5:eb:23:34:c6:2d:7e:9b:ab:99:90:90:e4:
24:6f:2d:96:93:90:ea:71:90:4a:d3:17:05:df:1e:
42:fc:38:55:e3:8d:72:56:e9:d5:15:14:58:55:3a:
20:18:a2:51:b0:51:48:e5:5e:a1:68:31:f1:5c:90:
7e:5f:39:a0:44:6a:ea:fb:be:d7:7d:03:5a:85:02:
ea:8e:62:55:b8:6e:d1:2f:d4:e6:e9:b5:6c:18:9c:
fc:2b:f2:20:f1:08:41:b7:4f:fc:ab:c6:28:81:3c:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:18:9D:B1:48:85:29:87:B9:DB:29:24:D4:0E:F3:7A:E6:01:8E:70
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b5:e5:b7:ee:27:c1:1d:34:f7:93:bb:12:42:fe:67:b4:48:
56:7a:ae:8e:7e:9c:fa:06:6c:c5:34:7c:fd:c4:2c:9f:4c:ef:
47:e9:c4:6f:96:01:25:a9:85:54:2e:15:48:05:32:ff:67:5b:
62:b1:83:54:80:64:b3:1b:f8:f9:14:20:26:9c:d3:69:8c:77:
c2:5b:63:26:5a:45:4d:cc:4b:0c:5d:5c:ef:41:03:4f:81:7b:
cb:53:89:00:56:db:1d:69:4b:50:7e:bf:04:b2:2f:55:04:41:
56:19:bf:c5:82:34:fd:4e:85:f0:ae:9c:f0:83:ef:f4:00:34:
89:d6:1f:72:77:5a:80:5d:25:38:41:20:96:10:cf:a4:1c:f1:
77:93:55:35:81:9e:f5:09:3e:1e:80:04:45:e2:ed:b6:f8:cb:
b0:cb:b5:91:f1:34:7d:77:6b:57:7e:27:02:04:92:35:72:9f:
ca:1a:fa:69:eb:3c:33:45:90:09:a7:ad:85:c2:8b:4c:da:1e:
60:af:0d:4e:1f:bb:05:ed:b5:24:87:42:92:c5:6c:a3:b9:bd:
46:c7:fa:54:9b:a7:1b:4c:ea:ca:1a:c9:85:08:98:1f:6b:36:
f1:19:d0:08:b3:40:fa:44:17:66:90:6e:3d:6d:2a:d7:10:46:
68:46:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:10:29 2025 by rpki-client