
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier: GgH640abmcQgU/Ny51yKlGCzd5Qaryngn2aeKY3wmmw=
Subject key identifier: 41:BE:BB:EA:99:0B:82:DC:19:32:5D:23:CE:1E:0B:B6:20:52:0F:6A
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer: /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial: 019849D2C64E250CB8D8E1DEDB79F0C6F629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number: 087C
Signing time: Sun 27 Jul 2025 03:00:06 +0000
Manifest this update: Sun 27 Jul 2025 03:00:06 +0000
Manifest next update: Mon 28 Jul 2025 03:00:06 +0000
Files and hashes: 1: hyhfndoa_Z24zyoZ7ygYaeGIqPw.roa (hash: 08nYzAa42CtGg2k7nkGWsd8V/SDqafxamCeCjRVW6Yw=)
2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: ondL+s3ZYVd2i6SdcajLZnnC7NHN74VhZGgPV/jOejQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c6:4e:25:0c:b8:d8:e1:de:db:79:f0:c6:f6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Validity
Not Before: Jul 27 03:00:06 2025 GMT
Not After : Jul 28 03:00:06 2025 GMT
Subject: CN=41bebbea990b82dc19325d23ce1e0bb620520f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:6d:cb:a0:36:1f:24:a4:b5:b5:5d:34:c2:
21:cc:f1:d6:24:93:20:ee:84:b8:2b:04:67:9b:a4:
e8:d1:e3:dd:38:25:02:87:e8:af:d5:58:3e:dd:25:
41:8a:cd:ef:82:34:30:e2:c4:17:36:8e:cb:58:24:
de:85:3c:83:90:67:a2:27:60:f7:db:b4:4d:07:c4:
d1:60:ed:2f:13:ad:05:62:fb:3f:49:4c:60:b8:fb:
8b:fa:c3:67:a6:31:a8:d6:4e:4c:e2:2d:26:56:8d:
b5:d6:05:d7:ac:0f:ca:78:46:2f:4a:c3:f3:ca:ba:
dd:29:c7:63:98:35:f0:5e:88:77:d3:0a:64:a1:7e:
49:e1:f4:54:c6:2f:29:f4:7d:2d:ca:ec:09:a6:18:
97:da:bb:57:59:4c:4e:03:96:6e:e9:4f:6a:e1:94:
68:dc:71:da:02:2a:9c:1e:06:a0:f7:67:5d:36:76:
cc:15:c7:1d:51:d6:b5:70:9d:b7:98:1a:c1:f5:d5:
26:7d:bc:cd:c5:84:c4:1f:a5:6c:e3:11:dd:91:1c:
00:a0:54:40:7d:e7:eb:b7:78:d0:6f:95:f5:22:c7:
fd:7c:0f:24:7f:58:15:8c:59:5c:b7:e9:f6:12:75:
ef:de:78:60:68:9e:cd:0a:ad:20:06:2d:e7:8e:66:
a3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BE:BB:EA:99:0B:82:DC:19:32:5D:23:CE:1E:0B:B6:20:52:0F:6A
X509v3 Authority Key Identifier:
keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e8:6d:50:75:12:b6:0e:72:8b:85:38:c1:cb:0e:b0:97:ce:
d7:b3:ab:c7:5c:38:81:36:23:30:8d:82:db:1c:e8:c7:20:ca:
9a:a7:98:45:76:f7:4b:48:e0:d4:c1:0d:fe:55:b1:5e:56:c0:
9a:b5:04:d5:2c:6e:02:30:ce:90:7a:72:92:a9:06:62:f1:de:
d2:9d:54:fc:79:87:15:18:99:40:4d:f4:52:6b:be:bb:15:1e:
12:85:12:41:75:4e:37:41:d5:64:e6:56:e2:85:8a:60:0b:39:
9b:01:ab:c8:18:44:36:bb:b1:1d:73:5d:08:9a:65:2b:18:0b:
4c:f2:70:41:5b:5d:91:97:9f:1d:8d:49:a2:54:75:ec:bc:48:
d5:b6:00:6b:8c:52:2a:31:64:4d:26:ad:6d:89:d2:15:c6:0a:
15:c7:b9:0f:61:68:40:77:56:08:2b:69:16:2b:93:cc:41:23:
8a:61:9d:cb:a1:e7:51:dd:be:88:b9:6b:1f:f1:08:30:31:89:
c7:8c:75:f5:ca:d4:78:5f:d5:23:5a:51:fa:a0:b2:c6:71:cc:
7c:25:c3:46:87:84:ea:d9:1f:70:69:34:f8:51:52:31:f8:24:
07:23:66:cc:27:a2:f8:e7:e9:6f:7b:e3:95:a0:ef:a5:b9:62:
14:ea:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:17 2025 by rpki-client