Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: ZNr/iehhOD9S3c6OFSu7bjmb+cihQmT2PdpngzzBbB4=
Subject key identifier: 40:48:17:9A:30:36:75:B4:EC:2A:7B:4D:19:57:4C:5D:B9:51:5F:E6
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 019749315588FB95BF2A5A4AAFA47A34DD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 1343
Signing time: Sat 07 Jun 2025 07:00:59 +0000
Manifest this update: Sat 07 Jun 2025 07:00:59 +0000
Manifest next update: Sun 08 Jun 2025 07:00:59 +0000
Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: VpMYt8UwwLhqQ/f46/U/zuYOXG+7vTTTfcfMQBgCErk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:55:88:fb:95:bf:2a:5a:4a:af:a4:7a:34:dd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Jun 7 07:00:59 2025 GMT
Not After : Jun 8 07:00:59 2025 GMT
Subject: CN=4048179a303675b4ec2a7b4d19574c5db9515fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:70:5f:91:b7:de:16:77:f0:b6:af:87:86:
83:e2:7d:24:db:a3:49:9d:5d:dd:52:4a:df:51:10:
27:6d:f3:cb:d1:c7:12:5a:41:49:7c:0c:14:d4:c7:
d2:e2:87:f3:e7:ee:5b:10:e8:ed:59:60:ff:ef:5a:
fd:56:70:92:9a:ff:2f:83:e5:8b:90:c8:44:f3:2c:
44:46:57:e5:e3:92:e1:e4:96:39:c9:64:63:4b:b2:
6a:db:a1:b0:02:f4:54:29:d1:c3:56:20:a7:f7:59:
fa:85:5a:b3:03:f1:da:11:27:73:be:9d:ca:29:d1:
9b:8c:84:b2:b2:ea:12:a8:2b:61:14:01:1e:a3:b3:
d7:41:d5:73:d6:00:cb:04:e0:93:5d:a1:8a:4e:1a:
35:5e:ba:e2:92:4e:c0:7d:72:d0:e4:fe:2d:83:a7:
86:97:d0:20:f5:54:47:e0:44:34:67:4a:b8:c6:b0:
fd:67:4e:15:f0:c3:2c:2a:16:9f:40:09:32:b9:4d:
47:6d:0d:b1:6a:84:93:81:f7:e8:79:e4:93:75:1e:
36:b9:b2:52:9f:aa:db:98:72:9c:78:27:4b:12:b0:
7f:e4:44:0e:6b:ea:7d:07:7d:74:c3:5c:2d:f6:d4:
88:c8:68:2e:cd:2e:79:2f:71:3e:ad:0c:c5:1f:c9:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:48:17:9A:30:36:75:B4:EC:2A:7B:4D:19:57:4C:5D:B9:51:5F:E6
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6a:b8:11:4f:e2:c6:61:b4:e3:db:74:a4:37:f8:f1:72:f9:
3f:63:53:04:64:b8:b1:68:f1:cb:16:d2:98:37:2a:43:59:0b:
a9:ec:1f:76:78:46:d5:c2:5f:13:12:ed:f0:c5:84:23:c2:9a:
a7:9b:c0:88:1d:74:9e:72:2c:67:0e:20:89:0c:87:44:7a:9d:
34:48:bf:6c:f0:48:87:cb:96:c5:d4:a1:94:75:99:5a:d1:b3:
5e:b5:9c:da:23:37:75:49:a1:a2:00:a3:ca:d8:d8:fc:b5:5c:
93:fb:20:45:20:c2:09:96:a4:63:07:8f:14:fc:6c:f4:03:a0:
67:65:10:62:be:6a:92:b8:b7:4f:b7:07:e8:6a:4e:c2:31:b9:
3f:21:80:4e:7d:20:6f:eb:a2:54:56:04:96:44:bc:49:91:41:
2e:40:2a:2f:82:05:a3:e7:59:38:70:99:b1:13:f5:9b:5f:21:
52:db:f9:67:46:af:51:a4:9b:7b:d9:ee:db:9d:a0:be:8f:3b:
de:1e:4e:b9:b9:f2:62:3a:64:2d:8f:57:fb:aa:3d:72:7a:fa:
57:c7:48:ae:17:58:4f:31:25:08:20:50:53:21:82:72:4d:36:
ba:2c:82:8e:fd:c1:17:0f:59:6a:97:80:81:34:c6:75:a3:4e:
ea:83:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:46 2025 by rpki-client