Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: ry+Exo/rGAuGX/SfeC+dnK5usex2oIqaLfydqW40jss=
Subject key identifier: F6:A3:96:41:B7:39:0E:92:69:F3:69:85:BB:1E:57:9C:D1:0A:7C:62
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 01974DB2EC489AB7C4AB7BAFF00B1EC63540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 0308
Signing time: Sun 08 Jun 2025 04:01:00 +0000
Manifest this update: Sun 08 Jun 2025 04:01:00 +0000
Manifest next update: Mon 09 Jun 2025 04:01:00 +0000
Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: mm20km9mEmJLXJKl6ADoaBdmRWSmRWGIFzuNPPQti7w=)
2: VWgiKeUlZyr_tkfBtwpTnh3j5es.roa (hash: F+rSoMMmSh1ZRMmb8OY6V8ChtegfB1X8DkMugPNoNpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:ec:48:9a:b7:c4:ab:7b:af:f0:0b:1e:c6:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: Jun 8 04:01:00 2025 GMT
Not After : Jun 9 04:01:00 2025 GMT
Subject: CN=f6a39641b7390e9269f36985bb1e579cd10a7c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:9b:e7:20:c7:71:00:81:b9:9b:46:34:fd:
82:c4:b6:a1:b0:6f:94:5a:16:34:3f:a3:47:53:d4:
4a:b6:8c:3e:c9:81:8c:63:98:ad:5b:89:f6:1a:d1:
8d:55:1c:ab:b2:79:52:d2:5f:1b:39:cb:f3:0e:6b:
18:bc:df:ae:c0:13:68:f0:12:cc:88:a8:87:80:09:
a2:5c:f3:b7:1a:65:e8:84:4e:0b:cf:5d:cb:a9:67:
87:21:d9:98:7f:eb:05:6b:5e:55:37:75:d1:b1:3d:
33:59:a5:02:1d:e9:e3:55:79:6d:57:2c:57:89:63:
3a:1d:40:0b:a1:24:85:f5:d1:15:0b:72:c3:fc:2f:
02:92:c6:63:1e:a0:a0:c0:8d:c7:3a:6a:3d:b1:46:
c0:37:74:d9:44:b7:cf:5d:6c:3a:f9:c8:8f:c4:80:
38:f6:c8:e7:66:cf:09:6f:f2:26:89:3f:3b:4a:62:
07:97:8a:90:93:c9:dd:e5:d2:af:fe:4f:f2:48:c5:
e8:c2:99:9f:63:bf:18:20:d8:72:59:42:78:b8:e4:
f6:b0:d8:3b:2f:23:d6:e4:87:a5:c3:26:07:62:e0:
18:13:e7:a1:e9:e0:0c:0a:8b:fc:f9:ac:22:09:cc:
89:bc:65:a3:c8:d7:76:92:b8:c5:65:18:f9:10:85:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A3:96:41:B7:39:0E:92:69:F3:69:85:BB:1E:57:9C:D1:0A:7C:62
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:14:27:b7:2d:bd:85:80:f1:89:c4:47:55:3b:79:2c:ba:08:
b3:6b:29:fd:62:81:51:11:f7:6c:56:78:fe:d8:38:9b:40:e7:
f0:60:f9:25:bf:af:a1:93:5b:22:6b:39:21:87:d7:a4:3d:10:
e1:88:68:d1:b2:df:92:41:e3:75:46:86:8d:15:ca:dd:51:1c:
e7:d4:4c:4d:9f:2a:aa:37:68:c1:86:fd:42:9e:cd:7d:39:42:
73:80:c8:9e:4b:3e:23:ba:33:27:1e:35:5d:68:8a:73:24:6b:
11:14:8b:e6:d8:29:47:03:67:74:8e:a4:bb:9a:93:d8:6c:ed:
15:15:26:5e:43:3c:81:64:61:b1:af:69:5e:4c:e8:e6:73:a2:
2b:c3:c3:df:f5:73:80:90:9a:e1:fc:00:2f:4f:02:e3:21:75:
2c:68:e2:e6:ce:6a:60:cb:ba:c2:3b:78:0e:08:33:a4:4c:40:
94:81:b3:09:a1:88:2b:5f:6e:a7:4d:63:c5:b0:ff:a6:ad:5c:
ea:b7:f2:66:1a:f2:8c:a2:57:34:3f:2c:ed:86:d5:20:da:49:
2b:7e:bd:23:2a:a5:54:71:1d:0f:85:fd:8a:05:aa:15:4f:88:
85:ff:58:3f:a4:da:a8:91:59:45:88:ed:16:8f:82:21:bf:40:
f0:0e:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:38:29 2025 by rpki-client