Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: j/pPsfTzc3xN1dDiarAMdgtcBnnC10yPnwChZ6B364E=
Subject key identifier: 04:1F:B6:27:A3:11:F8:EF:6F:2E:2C:8C:D0:2F:40:1B:D3:81:3D:B2
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 019749310286C20D7297811699062FD306BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 0910
Signing time: Sat 07 Jun 2025 07:00:38 +0000
Manifest this update: Sat 07 Jun 2025 07:00:38 +0000
Manifest next update: Sun 08 Jun 2025 07:00:38 +0000
Files and hashes: 1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=)
2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: /GerHZW0gMUlj65LDnuCTvfIOlh74iXjaynjdy290L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:02:86:c2:0d:72:97:81:16:99:06:2f:d3:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Jun 7 07:00:38 2025 GMT
Not After : Jun 8 07:00:38 2025 GMT
Subject: CN=041fb627a311f8ef6f2e2c8cd02f401bd3813db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:4f:43:9f:7b:9e:27:cc:9d:c9:91:fc:09:
e0:4b:7d:53:cb:17:e7:1a:4a:73:ca:f3:3c:d0:25:
3f:16:ca:3b:ac:84:0b:a7:0d:ae:12:64:12:ea:d2:
40:3a:46:a6:c2:ff:f2:c2:23:f8:46:1f:a1:59:93:
9a:df:e3:3e:0b:c4:1a:f5:af:60:96:da:38:b2:b2:
f9:ca:22:64:44:a8:a8:21:c5:4a:43:28:cd:93:04:
f6:63:e8:3d:24:02:eb:67:02:a5:b5:7c:ca:9b:20:
3c:12:d9:0c:42:85:b4:4b:61:e3:63:16:89:b5:3d:
56:e2:66:cf:1a:cb:f9:41:bc:a1:84:21:bf:6a:29:
c1:e9:a8:b3:47:53:f5:9c:78:01:2d:c9:e0:dd:ca:
48:1a:3b:43:0f:41:94:6d:fe:f9:7d:6d:c4:4d:7e:
f4:3e:c5:cb:0b:81:0f:6c:77:28:ce:86:6d:8f:f8:
1e:71:53:89:a4:f3:1f:88:12:4b:6f:e5:d0:04:01:
58:bb:01:c9:00:10:65:5a:bf:64:f9:43:0d:04:ef:
90:91:cd:82:6a:d1:f9:f6:41:08:4a:33:20:5c:63:
80:6e:a3:02:de:92:9a:b1:24:bd:c9:49:a4:fa:98:
70:2e:a1:d3:91:90:6c:4a:06:ee:e7:97:a8:39:a3:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1F:B6:27:A3:11:F8:EF:6F:2E:2C:8C:D0:2F:40:1B:D3:81:3D:B2
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2a:dc:ad:69:53:0c:92:88:b0:b9:18:c9:a2:29:34:6d:7f:
14:8e:82:47:03:a9:ac:c4:c6:da:5e:81:2f:dd:e4:06:a0:62:
87:c9:dc:ed:57:52:5b:84:e2:ab:d8:95:5a:47:3c:c3:f9:76:
00:7c:da:51:6e:2c:87:54:1d:16:b3:33:a9:e2:37:49:ad:05:
37:34:56:68:f7:56:43:c8:65:de:9e:cf:a8:fc:35:21:88:eb:
0d:1e:60:01:60:53:b1:26:ef:e0:2c:44:e1:1c:11:70:ee:02:
ea:60:21:ab:49:57:6d:af:0f:0e:65:c5:49:b9:3c:42:b4:19:
2a:ca:56:ef:d6:dc:fc:5b:80:2c:1e:f4:b7:eb:8f:63:f4:06:
d6:61:2e:93:0b:b5:2b:b5:c8:72:1d:de:62:c1:ac:4f:f1:a6:
37:e1:5b:f0:af:35:11:a4:2c:56:9d:33:f9:92:48:a0:38:c8:
9f:4c:57:04:d0:29:98:31:2b:65:07:b7:b7:28:d0:fd:40:1c:
c2:7f:bf:ff:f9:23:0c:97:d2:9c:c2:33:f9:7a:95:74:72:f1:
92:fc:e5:45:cf:64:16:9a:c3:e4:b5:fc:69:e0:7e:99:0c:f9:
36:7f:32:26:36:fa:a2:94:63:cb:9e:59:ae:2a:39:00:f0:2f:
9c:6b:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:41:48 2025 by rpki-client