Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: Fue1ZOBhObE7hSn7XDxdALl3KnDtsUOVmUJ3m/S4I7w=
Subject key identifier: 2F:DE:CF:D8:11:05:0C:3F:B1:E6:CA:7A:8E:5E:42:76:B1:D7:65:B4
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 0198537B2C421C43F448B02AD625E7DF8FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 1599
Signing time: Tue 29 Jul 2025 00:00:37 +0000
Manifest this update: Tue 29 Jul 2025 00:00:37 +0000
Manifest next update: Wed 30 Jul 2025 00:00:37 +0000
Files and hashes: 1: 7wYbQJjmUZJ3jrCYQep7ej1ycX8.roa (hash: gX6AQ4uDUscH9HZMwyFhtSxb+YXiJVmytGAK7BhRx4Q=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: kVI6egTXXyqXzp/AQ0tYoJ0MTIQ4K2kUippWFI6V4Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:2c:42:1c:43:f4:48:b0:2a:d6:25:e7:df:8f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: Jul 29 00:00:37 2025 GMT
Not After : Jul 30 00:00:37 2025 GMT
Subject: CN=2fdecfd811050c3fb1e6ca7a8e5e4276b1d765b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:74:b2:83:55:cf:e9:0c:3e:8f:78:83:04:
7a:28:7c:22:13:2c:fa:a6:c8:13:27:bf:be:ca:82:
02:ed:d3:11:49:d8:03:ac:6e:bb:28:b1:68:86:a1:
15:67:64:2f:41:e9:cd:a8:14:3e:37:f4:39:9a:e5:
10:6f:c6:a7:79:e0:57:b4:ef:73:9f:f2:d8:3f:db:
bd:8f:30:2b:8b:cf:52:79:85:77:84:e4:4d:05:c4:
41:c5:fa:9f:fe:32:6a:f9:05:26:33:bb:2e:31:a4:
dc:28:b8:78:d5:88:b7:bf:94:f9:0a:44:72:cd:c0:
c4:18:44:3b:a2:f1:d7:e2:67:38:81:c3:fc:ea:38:
ce:63:be:15:78:7c:c2:99:93:e6:ff:fe:91:39:61:
29:1e:dc:c9:3a:84:b0:9e:25:a6:9c:43:2e:5b:c7:
3d:be:a4:ba:e4:da:e6:56:d9:b2:84:21:5c:ad:6d:
71:f0:9e:3f:f7:41:ae:fe:d9:3d:65:d2:d7:0f:a3:
9a:d2:63:fc:68:53:e0:fa:e7:87:20:d9:39:2b:b7:
4c:fd:25:f4:66:0f:b0:0b:71:da:b3:93:e0:56:14:
75:1b:a8:17:bd:2c:4a:ec:c6:00:2b:18:03:77:ea:
02:c0:19:c0:87:0a:2e:00:38:c5:c1:f7:0f:ac:91:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DE:CF:D8:11:05:0C:3F:B1:E6:CA:7A:8E:5E:42:76:B1:D7:65:B4
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a0:2d:0c:0a:e2:fa:9a:9c:0a:70:6a:48:d1:77:61:f7:0c:
77:23:c8:16:84:2a:99:75:11:2e:bf:aa:87:7a:33:a5:87:0e:
22:44:a6:f6:04:6a:c1:41:10:49:e7:ae:56:66:79:44:fa:b3:
94:05:5f:80:af:c4:74:d6:f5:07:1a:b7:06:19:22:73:7b:c3:
48:66:22:06:5b:b2:e0:93:24:4a:49:e6:7c:2f:31:d2:b0:fd:
83:4c:81:c6:e4:32:39:5c:5f:2c:d5:4e:36:e9:c4:3b:78:7c:
96:ff:68:f1:fa:d2:47:05:a5:9c:f2:96:7b:0a:da:4c:eb:4d:
e6:e3:97:b2:53:67:d7:f5:ac:54:53:29:b0:c7:5f:83:86:48:
76:36:1d:42:30:af:f3:42:8f:13:3c:dc:7d:98:8f:1a:d5:ee:
36:14:5b:11:69:8f:f6:11:d4:17:84:51:ef:97:d2:1d:0f:bf:
9d:c7:04:41:d4:01:69:14:af:2f:72:ae:a5:d5:f1:67:ef:48:
81:9f:75:6f:6e:3d:ae:df:70:f4:f8:99:f2:0b:8e:a4:aa:72:
06:c9:c5:8e:b9:9a:20:35:37:fb:5f:87:6d:0d:55:4e:4c:cf:
86:09:df:ec:43:05:d1:e8:e8:d2:2b:52:aa:c9:5a:4f:14:24:
81:5a:de:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:38 2025 by rpki-client