Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: W4tqT3Wt6pX9u+v3Ek3sbBUp9cLxipZl16yzOVxNgWE=
Subject key identifier: 59:80:3C:4A:87:99:97:81:DA:B3:71:BC:D2:5F:AF:BF:BB:B8:CA:19
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 01974A7B88FE916503B4F320653A83DF2B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 1184
Signing time: Sat 07 Jun 2025 13:01:39 +0000
Manifest this update: Sat 07 Jun 2025 13:01:39 +0000
Manifest next update: Sun 08 Jun 2025 13:01:39 +0000
Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=)
2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: nu7D4Q+/WsWkzDS7XwtDcDeq7rF6jdDuF6r+HT9A1dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:88:fe:91:65:03:b4:f3:20:65:3a:83:df:2b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Jun 7 13:01:39 2025 GMT
Not After : Jun 8 13:01:39 2025 GMT
Subject: CN=59803c4a87999781dab371bcd25fafbfbbb8ca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:35:50:84:06:9f:21:a1:67:c7:a1:18:cd:
c8:1d:6f:91:90:57:60:6b:13:a8:3b:a7:69:dd:36:
84:25:34:03:e3:73:05:85:39:cb:56:10:a8:b1:a0:
4c:7e:d3:42:da:23:b0:18:72:e8:06:a1:05:f3:6a:
13:22:fa:50:de:49:cc:fe:9e:2e:66:25:c5:c2:10:
6e:6f:6a:5a:ea:cd:0c:3b:69:88:ac:82:52:0b:22:
b2:6a:a3:d5:c3:ac:8c:40:9f:35:b8:d0:92:64:4f:
71:6c:5c:29:78:9f:3c:5b:6e:49:20:68:80:a9:02:
b6:b5:85:32:49:c4:d4:7b:76:a0:99:e1:3c:7e:35:
20:9f:4f:42:67:de:f0:03:75:8b:95:98:75:c9:10:
51:33:b5:26:aa:8b:22:d8:12:15:51:9b:e5:b6:66:
ee:3c:9a:a5:43:fd:40:23:eb:7c:42:33:fe:48:06:
4c:cc:94:00:1b:ea:0f:1b:c0:a8:55:47:75:69:32:
4d:fd:0d:f8:68:e5:de:d0:e6:cc:07:ed:94:3a:24:
ed:08:47:4e:97:4a:b6:96:b7:28:77:9a:42:53:08:
76:87:c6:d9:dd:40:60:6e:9f:e3:27:50:1a:22:ea:
c5:6d:64:e0:10:14:42:7c:81:be:dd:76:75:a8:ae:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:3C:4A:87:99:97:81:DA:B3:71:BC:D2:5F:AF:BF:BB:B8:CA:19
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7e:a7:15:e2:21:5c:d4:01:16:56:27:84:04:70:ef:56:6b:
4c:fb:7d:96:c8:89:e5:fc:94:78:21:94:0e:1d:4e:84:39:87:
87:e6:ee:61:d2:28:bc:1c:f2:64:49:4b:8e:54:83:0b:da:3f:
58:31:ea:2b:00:4b:9d:2e:f7:ed:f1:3e:28:54:13:9c:68:ac:
0e:0b:c7:c4:a6:95:86:14:81:6f:a4:aa:d9:17:68:60:89:43:
8c:e2:47:63:ed:f9:71:aa:12:ad:84:7f:f8:34:75:cc:86:79:
22:d2:fe:d5:d0:49:3a:b8:83:6b:7e:ae:d2:ba:23:c9:06:31:
7a:b5:91:98:cf:ca:36:08:77:b9:6f:87:4a:8a:ae:8e:3d:8c:
04:ec:98:76:6b:85:ed:83:40:27:f9:65:46:9f:b2:df:72:1d:
f1:39:88:81:10:fe:98:83:4b:05:f0:a7:9e:e1:0b:1e:19:58:
97:66:c9:39:4a:9b:04:a0:49:8d:9b:cc:a5:68:7b:cb:d5:99:
07:91:1e:a2:d4:4a:bf:54:a4:37:9c:66:3b:93:90:5a:c2:66:
bf:b7:b2:61:a0:93:51:94:1f:7b:66:a4:d1:cd:47:06:4f:68:
c7:5c:5f:74:07:c3:23:ca:74:5f:14:8d:c1:40:87:cd:a5:82:
9c:5b:f7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:38:51 2025 by rpki-client