Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: LN9ztqPA41/7UsimQV7cw3LiN6Qbf6HCZrCmmwY7pxo=
Subject key identifier: 7B:0D:A6:FE:D0:D3:10:FE:8A:B4:6B:AD:DA:81:C3:20:8F:94:13:D5
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 019846D24DCF1A19130DE4CA01E6AB970F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0F14
Signing time: Sat 26 Jul 2025 13:00:44 +0000
Manifest this update: Sat 26 Jul 2025 13:00:44 +0000
Manifest next update: Sun 27 Jul 2025 13:00:44 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: Oof5L6S25B47TebqwHnjThYzhcuJKjFU607SlWsu33o=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:4d:cf:1a:19:13:0d:e4:ca:01:e6:ab:97:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Jul 26 13:00:44 2025 GMT
Not After : Jul 27 13:00:44 2025 GMT
Subject: CN=7b0da6fed0d310fe8ab46badda81c3208f9413d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:ae:df:03:6a:63:45:c4:b4:88:3c:b8:6a:
1f:53:64:2a:39:8b:7b:98:7a:3b:22:ae:9c:d6:af:
16:a8:3a:8b:6b:bc:00:02:c5:7e:41:b6:04:9b:de:
a9:47:8c:55:44:ca:72:ac:78:7f:fa:78:c8:33:80:
70:d5:a6:89:60:5a:de:49:9e:f3:0e:9b:9a:88:9d:
41:f7:82:55:2e:47:a9:b0:a9:fb:e8:1e:c9:f4:5b:
16:13:b6:44:da:5b:bc:f7:ef:3b:b7:96:13:0c:2a:
b6:e8:20:61:bc:a0:f0:5d:96:a2:2c:71:3c:bc:26:
24:c8:38:df:96:47:b9:90:fd:dc:3c:0f:ea:56:43:
79:a6:d6:68:2b:82:93:88:a0:dc:af:5a:37:fc:7e:
ba:31:8c:b3:89:82:12:50:16:8e:af:d0:b8:3c:a8:
0e:ee:6d:99:6f:98:6c:18:74:82:92:2e:ad:61:f1:
5c:5f:53:c6:89:6f:48:07:ce:67:57:d7:b9:6e:5f:
bf:93:f5:2d:9f:74:14:30:c1:52:b5:eb:e9:05:96:
2f:37:a1:d8:c1:86:2e:17:f7:12:fe:7d:d8:3a:79:
53:5f:2c:b7:23:9e:80:b4:75:7b:99:18:3c:b5:0a:
1e:6c:ee:27:70:0a:78:32:9c:31:52:e9:be:e4:33:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:A6:FE:D0:D3:10:FE:8A:B4:6B:AD:DA:81:C3:20:8F:94:13:D5
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:48:e9:10:68:a7:9d:a6:86:26:86:62:ba:55:98:68:c8:b4:
40:1b:66:81:2c:ed:77:42:03:9d:6f:07:11:a4:a5:33:4f:28:
75:74:23:9d:fe:cf:5d:d4:7b:94:74:e8:36:b9:74:9b:48:98:
3f:57:5b:58:43:cf:e3:de:28:2c:52:c0:bf:75:16:52:c4:51:
bd:b4:3f:4d:56:1e:07:7d:2e:0e:46:9e:f2:d9:e4:cd:07:3d:
d2:bc:d3:3d:40:c8:18:0c:41:75:8b:bc:53:45:8f:b3:36:97:
9a:1f:58:2b:b9:51:3f:2e:51:95:96:b1:f7:26:d6:1b:bd:9f:
99:fb:67:2b:55:dd:f4:dc:76:1c:ce:7a:a0:d7:f1:7e:7f:f1:
ee:e5:77:1c:66:0a:f9:67:c6:e3:fe:d7:b5:8c:59:ef:96:5e:
43:24:d4:0e:9f:52:41:46:b1:08:22:e6:27:f4:5f:a8:e8:30:
28:68:c9:e9:34:4c:ef:8e:2c:ad:9b:35:bf:82:79:47:ea:cf:
06:05:b9:ed:0d:29:5d:b2:58:e6:61:45:2c:ae:17:96:49:a2:
3d:2d:17:60:82:9f:e8:3d:0a:76:59:d9:70:1c:c0:6d:0d:76:
ea:b4:04:5a:b1:0f:7a:93:0f:3e:4e:93:3f:06:85:60:57:e7:
12:4d:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:42 2025 by rpki-client