Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: CVHOhIRe82zQ1uy8vh0Ajxc2t26I2PSC8TByDwJnHvA=
Subject key identifier: 28:A8:A9:DA:69:DD:E5:F2:AB:BD:F0:7F:8D:3A:8D:A3:71:76:4F:D9
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 0197488C3EA5AA2F9A58CA400CBF13AC8A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 10C0
Signing time: Sat 07 Jun 2025 04:00:39 +0000
Manifest this update: Sat 07 Jun 2025 04:00:39 +0000
Manifest next update: Sun 08 Jun 2025 04:00:39 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: a0YxHhzP8B9XTAIjwWiTA2+woo1m3KWwI22yyS0D35U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:3e:a5:aa:2f:9a:58:ca:40:0c:bf:13:ac:8a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: Jun 7 04:00:39 2025 GMT
Not After : Jun 8 04:00:39 2025 GMT
Subject: CN=28a8a9da69dde5f2abbdf07f8d3a8da371764fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:4b:e1:3e:28:60:1e:c3:58:52:7d:38:b9:
40:ee:33:4c:d2:02:94:46:4c:ce:b7:e7:11:8e:a7:
ee:d8:3f:0d:3f:35:44:ac:b2:fc:40:ee:3f:1b:69:
88:73:5c:18:08:44:2b:ae:2a:54:c6:cd:fe:73:c8:
09:54:e9:c2:a7:44:e1:32:d1:18:1f:df:5b:1f:aa:
b2:ff:02:5d:23:0a:ba:c2:14:35:24:4b:e6:b7:07:
dc:07:dc:87:02:a2:7d:b0:0b:3b:1b:1f:47:56:2f:
1f:17:e6:b6:93:5f:be:ad:9c:18:cb:9f:61:f4:fe:
fb:51:21:76:cc:b0:ec:55:a1:f8:26:df:c1:ac:ec:
b8:aa:60:f6:65:ff:0b:3f:e2:57:dc:23:47:a3:2a:
76:e8:66:59:f5:a7:42:db:e2:8a:f2:d5:b6:03:52:
b8:b2:c2:eb:a6:5c:5d:95:0b:7b:47:62:ae:a6:b2:
45:2e:ff:24:ab:67:b1:88:16:e8:0d:ae:a7:8e:54:
2a:f7:d9:63:13:91:2c:3f:c4:e0:f6:b3:c6:83:4f:
48:2d:3c:07:1d:94:c5:4a:72:2e:55:2c:98:1f:00:
1d:3d:4e:e1:09:e8:69:04:e0:3e:03:d6:a2:26:52:
6e:02:a5:a0:30:af:f6:b7:70:d1:92:cf:a1:07:e7:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A8:A9:DA:69:DD:E5:F2:AB:BD:F0:7F:8D:3A:8D:A3:71:76:4F:D9
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ad:8a:02:a4:dc:0c:0b:70:0e:e6:8f:32:05:f7:f4:1d:6c:
c2:c6:84:66:cc:64:4e:e2:ae:eb:20:00:ee:d6:6e:4c:ae:49:
88:a2:4d:81:7c:fe:aa:19:6c:24:b5:bf:ab:2c:0d:27:cc:d2:
6d:9f:8f:c4:73:e0:56:af:93:58:7e:77:ad:eb:3d:85:97:fb:
b9:ce:6d:ab:a0:57:56:d0:b6:49:d0:6c:02:17:07:41:ce:2e:
1e:4a:55:cc:72:f9:57:e0:04:4c:1e:54:2d:91:34:3e:2b:80:
e1:e1:51:32:38:fa:1e:53:7e:54:4d:25:df:6f:26:7f:db:59:
e1:7b:a3:5e:f2:da:ad:76:6a:e5:72:ab:a9:5f:2f:38:07:46:
80:d4:ce:8e:6c:db:16:45:56:03:cf:08:61:97:52:3a:17:84:
99:5a:4b:86:4b:64:30:d4:9b:3c:e0:d1:51:17:26:fa:1b:84:
2b:55:36:93:4e:43:a2:44:61:ad:f9:31:64:76:bd:46:f3:f3:
17:3c:2d:87:7b:f0:37:18:50:35:81:ac:85:7e:e4:f6:94:00:
6d:14:e8:e9:16:6d:0f:16:ec:9e:eb:79:41:f2:fb:b1:e4:00:
ed:ac:88:22:bc:50:5d:96:c9:6e:a4:c6:16:56:91:27:f1:27:
53:23:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:25:06 2025 by rpki-client