Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: HsNAP38rXhQiI55vqHD6k3UFwrTgBo1vv4TZvpe/75I=
Subject key identifier: 3D:E5:95:58:57:C0:EA:AE:91:B3:BC:74:C7:B0:C3:6A:5A:56:67:FA
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 01974B5642C03851A3567015926BC57B6D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 0DBF
Signing time: Sat 07 Jun 2025 17:00:33 +0000
Manifest this update: Sat 07 Jun 2025 17:00:33 +0000
Manifest next update: Sun 08 Jun 2025 17:00:33 +0000
Files and hashes: 1: 5bzk29WC2HSF9C0WZb2ngqPQ56o.roa (hash: fHgyyYyWXqEUztNgt56ZVo1FPxKD7CyfYBjgqkUt9TI=)
2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: 0BLSbAFxgjceHvPlqDsSoZoqMLDJcvjoP38BtmyZtqM=)
3: VYOb-2PB3WKsCUYPT2j-nf80wMs.roa (hash: YpnMPKkA2P+LHKT+FLRfK5zKYPPPwWgoJKnxE9kTcx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:42:c0:38:51:a3:56:70:15:92:6b:c5:7b:6d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Jun 7 17:00:33 2025 GMT
Not After : Jun 8 17:00:33 2025 GMT
Subject: CN=3de5955857c0eaae91b3bc74c7b0c36a5a5667fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:ee:bb:47:5d:20:a0:0d:14:ed:9a:57:3a:
72:e9:8f:6d:51:a4:0d:01:52:af:db:99:ae:b7:67:
37:ed:19:87:50:1c:19:70:b3:bc:f3:30:28:60:e5:
aa:92:30:35:27:b7:16:ec:90:e4:c7:7c:54:31:3a:
db:4e:4f:d9:15:de:76:50:28:84:ca:dc:33:a1:45:
8f:ab:fb:c6:98:b9:9a:14:a3:50:35:95:48:5e:34:
69:76:38:20:1a:e8:8a:95:f4:18:82:e6:59:7d:74:
af:59:79:ca:95:53:0c:25:fb:0c:ee:81:31:fb:e3:
a3:60:42:dd:03:81:cb:29:a6:f9:2e:12:39:33:b7:
f7:18:b1:53:7a:25:21:f3:23:27:a9:c6:d3:cd:e1:
d5:b0:8b:af:40:f1:72:ec:1e:7e:ca:c9:00:2f:5b:
5d:53:13:5c:40:44:74:8d:77:59:48:15:98:fb:83:
af:d7:25:2b:0b:c7:3c:3a:ac:ea:97:82:91:55:08:
8f:32:5b:ea:8f:8c:c5:15:e5:fa:c1:15:e2:b9:56:
d7:d7:4e:88:8a:3a:f7:47:d2:0c:bc:72:c3:b6:4d:
b4:88:26:fb:56:3b:f8:fa:41:26:e3:09:8e:68:f5:
22:f2:db:c8:bf:e3:62:99:d1:71:8a:d6:a1:81:65:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E5:95:58:57:C0:EA:AE:91:B3:BC:74:C7:B0:C3:6A:5A:56:67:FA
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3c:c7:67:a9:fd:12:ad:30:8f:72:1f:fc:e8:72:94:e0:ea:
9f:92:35:0c:49:f4:7d:c6:4a:07:84:a4:6d:fe:45:fb:de:53:
86:0d:83:c6:d9:7f:f2:0f:db:c3:e2:5d:17:7e:5f:2f:4a:44:
02:dd:7a:1d:af:0c:29:be:e2:be:86:aa:dd:fb:c5:bc:6c:59:
ea:3f:32:10:bc:f6:30:7b:25:d0:1b:98:10:04:96:e4:eb:8a:
59:a1:4b:0e:6c:74:06:97:d1:59:5e:b6:98:ba:bd:54:4a:d5:
de:8f:63:5f:88:1f:d7:65:57:1f:c5:01:57:84:2d:14:58:52:
8b:9d:c8:a7:81:e9:b6:57:fb:53:da:86:6a:01:ac:c4:50:4d:
08:24:8e:33:bc:19:6d:db:91:fc:bc:27:82:3b:c8:5b:7a:0d:
95:d2:14:8b:22:a3:ed:5e:14:ab:25:83:76:be:48:4e:83:48:
52:5e:47:0d:5c:d1:5b:b2:3c:dd:90:81:3c:22:79:c4:dc:77:
03:ab:87:6b:5e:d6:37:24:3d:26:c3:28:04:3a:d1:ea:f5:ed:
e1:a8:b4:51:e3:f5:a2:89:71:99:0d:10:b3:d7:8d:a6:75:bb:
18:16:e9:3f:d6:e5:11:8a:a4:64:e7:ec:43:c5:21:c4:bb:3a:
d6:ca:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:13 2025 by rpki-client