Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: skPBEvHQB+1eKVKP4FcklrqKt1jMhTlmrNno+8VgjJ0=
Subject key identifier: 8B:60:78:3B:84:F3:A7:1F:AD:DF:FC:89:2B:BF:60:77:DF:1C:40:68
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 019849D3591A0EDBB5D63A5A7582438F5583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 05F2
Signing time: Sun 27 Jul 2025 03:00:44 +0000
Manifest this update: Sun 27 Jul 2025 03:00:44 +0000
Manifest next update: Mon 28 Jul 2025 03:00:44 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: gJzm1PamsakHbEjEdDuOEOMzGxQ7DdkxrmOfo5rjQzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:59:1a:0e:db:b5:d6:3a:5a:75:82:43:8f:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jul 27 03:00:44 2025 GMT
Not After : Jul 28 03:00:44 2025 GMT
Subject: CN=8b60783b84f3a71faddffc892bbf6077df1c4068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:c2:20:2d:b9:bc:96:96:16:54:19:b6:1f:
5e:bc:ef:13:09:35:02:29:e5:e0:3e:16:c3:84:90:
6a:09:d2:62:6f:75:d5:4b:20:1a:e5:88:cb:ea:86:
22:23:27:dc:69:aa:78:8d:60:33:86:6a:0c:75:ef:
18:51:b1:eb:9a:c4:3f:7e:6a:07:7c:40:da:bf:69:
23:30:c2:ee:7b:d3:07:95:e1:89:62:14:1a:dd:2c:
67:fa:96:0a:86:24:c1:c3:e6:eb:a5:1a:90:6a:c3:
2b:83:da:01:2d:98:98:e7:96:7a:1c:79:51:8c:1d:
a5:68:3c:02:c1:0c:64:bd:8c:59:01:c5:44:9c:ad:
6f:81:51:f6:e2:71:8f:ae:c3:39:40:91:fc:61:5e:
25:e2:36:7e:01:e4:e1:20:d6:f7:74:70:27:9d:bc:
d6:41:de:22:20:65:bb:65:3e:00:53:19:ff:fc:17:
6d:e8:c9:d2:16:f6:64:69:4b:f0:12:a6:c1:a1:b9:
41:a7:47:8b:0a:48:27:c2:21:e7:f6:da:28:42:7a:
ae:32:6d:24:30:4a:e8:15:fd:50:b9:4f:d6:58:14:
f0:8c:5c:c6:18:51:7f:32:fa:0b:b3:50:64:40:c1:
d9:a6:77:53:88:05:f9:9c:c9:ab:65:d1:c3:01:71:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:78:3B:84:F3:A7:1F:AD:DF:FC:89:2B:BF:60:77:DF:1C:40:68
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e0:47:64:1a:1b:d1:b0:f0:fa:ff:d8:b8:e7:7b:c4:dd:31:
2f:88:3d:7f:b3:f6:67:1f:45:03:e4:a1:88:59:51:50:5e:e2:
61:79:f9:6e:87:80:06:14:15:99:94:09:92:36:a2:e0:f7:8a:
3f:a6:f9:47:f3:81:08:ab:b9:92:c5:e6:00:c0:06:5f:60:33:
00:c8:f1:fd:ee:d8:c6:a6:55:9c:4e:81:d0:04:fa:43:0c:c9:
82:5a:09:e6:91:71:6d:e1:8f:c1:4b:6b:12:51:d8:8a:60:1a:
94:f4:7e:30:cc:8a:e3:0c:79:86:94:3d:cc:d7:21:4e:87:f9:
37:6a:81:4a:58:d1:a7:19:03:2c:56:52:30:11:39:bb:a6:0c:
95:68:6d:77:2e:34:11:fc:b0:77:7c:59:5f:6a:6a:0a:c1:1e:
17:c4:92:a3:ca:85:ff:b5:36:94:ce:d7:4f:5c:60:bf:ba:b2:
c5:36:30:f8:0c:c4:63:c0:44:07:12:14:fe:c7:87:c2:85:3d:
b1:15:ea:87:74:f0:9e:0b:5a:be:fa:92:76:7a:ac:99:92:c4:
f6:aa:67:a5:e6:1b:78:4e:73:16:45:60:b9:ae:ff:55:57:b7:
f3:cf:4d:55:02:58:f8:60:f5:6f:56:ef:7d:95:a1:0c:0b:35:
b1:2d:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:38 2025 by rpki-client