Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: 7E17rTiCWc6aHcyENzTkMEow4JelYRE5S5PP5q/ZhDg=
Subject key identifier: FB:D5:5D:49:7E:F6:68:BF:9C:92:89:CF:C4:FD:39:7A:D8:86:C6:D1
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 01984A40BF8829093C215E5986CBA63E3A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 1188
Signing time: Sun 27 Jul 2025 05:00:13 +0000
Manifest this update: Sun 27 Jul 2025 05:00:13 +0000
Manifest next update: Mon 28 Jul 2025 05:00:13 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: 71SEdV3441hkVsK025Blj7BrD5n5RQMfatm9P7h/UY8=)
2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=)
3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:bf:88:29:09:3c:21:5e:59:86:cb:a6:3e:3a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Jul 27 05:00:13 2025 GMT
Not After : Jul 28 05:00:13 2025 GMT
Subject: CN=fbd55d497ef668bf9c9289cfc4fd397ad886c6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:9d:ee:0a:77:8a:3b:67:2b:da:01:45:76:
32:b5:ae:0b:0e:f5:a1:b8:ee:db:48:18:93:cc:53:
3d:c8:6e:a7:83:f4:45:cc:5e:5b:69:80:2d:88:1a:
af:d2:43:d8:7a:ad:a4:c7:26:03:99:e2:29:1d:71:
30:da:a9:b5:b7:7e:df:b5:1f:ba:ed:b0:ec:54:bd:
21:ff:a3:04:69:ff:46:8d:71:f0:77:21:ec:e0:10:
fa:cb:e8:9e:0c:b5:80:92:88:05:4d:21:ba:b2:ea:
9a:fc:12:21:c2:a9:fe:3f:08:32:17:59:52:8e:c1:
c7:23:f8:47:6b:aa:0a:e8:8e:29:db:c0:e3:76:fc:
91:49:3f:8c:ad:40:69:3c:71:3a:45:5d:79:78:54:
4a:9d:5c:91:c9:12:e0:28:fc:b6:fe:0f:87:45:f7:
fa:fe:e5:9b:05:39:fb:6d:6b:ab:59:e6:1f:05:39:
c1:61:a7:9f:db:aa:b1:20:b9:b9:82:08:30:1a:30:
f7:cd:3a:75:84:d5:9a:1d:ea:b8:5c:4a:15:70:bd:
71:12:b5:60:61:a1:e8:89:72:c1:bc:54:c7:6a:68:
f7:ee:fa:a0:3f:8d:38:49:d5:70:0c:54:9c:41:45:
88:31:95:4f:a9:47:5f:08:17:4d:bf:6d:6f:48:0d:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:5D:49:7E:F6:68:BF:9C:92:89:CF:C4:FD:39:7A:D8:86:C6:D1
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4c:a1:38:f4:60:3f:91:ae:00:d1:5b:2d:2c:58:3a:46:42:
bd:3c:f6:88:c6:8b:40:59:24:16:e6:25:4f:4f:cb:8c:bd:44:
59:8b:1c:72:62:eb:e3:2b:ad:df:5f:e0:77:28:84:93:2e:26:
f3:58:ef:4e:be:8a:07:36:e1:43:c6:1f:f6:1d:c7:6c:f1:15:
df:5f:47:ed:ab:5f:98:20:ed:af:c5:0f:b5:2f:8f:63:a6:3f:
33:1c:de:4b:96:8e:05:24:9f:79:4b:6d:82:a2:f9:28:35:0d:
34:b8:69:4b:b0:ea:e3:9b:83:da:f7:fb:dc:a6:c7:d3:75:8d:
59:d1:17:2c:62:aa:67:e5:bc:c9:76:f1:fe:e9:b7:ef:7c:c1:
f7:72:67:81:fd:fa:94:a5:5e:42:2f:94:13:7d:68:3f:c8:4e:
63:51:87:33:22:b5:12:5b:cc:0e:ec:7b:5f:ae:51:91:55:68:
94:a6:1d:7e:a8:29:8d:2c:47:7e:84:ae:02:4b:b9:5f:2c:a0:
d0:05:c7:76:e3:69:c5:b7:ef:cd:07:34:4b:18:7c:85:19:cc:
1e:c2:59:c8:b9:76:7e:0a:c1:e2:99:66:4a:b6:db:65:b4:d7:
15:f7:e9:ee:f3:3f:16:84:91:82:31:f2:8d:94:7a:db:db:8a:
85:71:09:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:11:32 2025 by rpki-client