Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: c+9XJu8XLz3Aekjvx0MZbPS+2SyIsfQN7KkggpGwEcI=
Subject key identifier: C6:CE:19:0E:89:0E:12:D7:D4:68:AF:38:88:41:9C:BE:1E:F4:30:0F
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 0197470BBA6F980EB165EEB21807D83A6E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 21:00:40 +0000
Manifest this update: Fri 06 Jun 2025 21:00:40 +0000
Manifest next update: Sat 07 Jun 2025 21:00:40 +0000
Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: KcDTgP5Y5nLw9SlCEDpq9TSXgURMc3MuLVZ+rIStYKM=)
2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:ba:6f:98:0e:b1:65:ee:b2:18:07:d8:3a:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Jun 6 21:00:40 2025 GMT
Not After : Jun 7 21:00:40 2025 GMT
Subject: CN=c6ce190e890e12d7d468af3888419cbe1ef4300f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:6a:c3:cd:24:4d:04:4d:6d:5e:41:c9:c7:
dd:a5:d4:cc:f9:82:38:e6:37:ee:40:ca:be:3b:99:
dd:6c:14:81:d7:cb:ba:73:b2:60:c0:04:02:eb:30:
67:c1:df:a3:5a:d0:b3:8f:2c:09:d8:12:ab:19:41:
c1:ec:6b:91:94:98:bd:dd:c1:bf:07:b4:7b:fb:97:
1f:ae:95:ee:79:18:3f:52:a3:5b:ac:54:3b:80:ac:
c4:86:d4:0c:21:c0:e3:11:db:1f:ab:38:71:76:14:
12:e5:43:20:7e:f4:17:fd:01:0b:68:0c:9d:5d:e4:
15:4d:7d:bb:2e:70:82:6b:23:f4:53:1b:ae:68:08:
bb:1a:3d:f4:2e:3f:c9:8c:3e:c9:60:a9:94:e2:c1:
62:55:ae:ca:cb:5e:1e:14:b0:b6:79:3d:f2:0f:cf:
5a:82:ea:07:92:ac:c4:cb:ee:30:97:89:cc:8b:c7:
87:72:51:ed:e0:d0:62:e1:65:47:69:d1:51:75:a6:
60:15:86:2c:ff:4a:cb:24:3d:38:d7:2b:62:e5:d4:
3c:82:31:aa:ed:32:ae:99:bb:b8:25:f5:d4:33:9a:
17:b4:0c:f2:47:4b:64:42:f2:8e:fe:cd:36:4d:e4:
7b:93:ba:e9:a8:f3:da:d1:0c:ae:2b:f8:fa:d2:f8:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:19:0E:89:0E:12:D7:D4:68:AF:38:88:41:9C:BE:1E:F4:30:0F
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c0:a7:b8:0f:16:85:12:b8:06:cb:de:22:a3:c4:4e:56:d5:
08:d0:5e:63:d7:e5:37:ac:e5:06:35:69:aa:85:39:34:ef:f7:
66:c7:e2:ab:66:a4:b2:a1:31:94:17:7c:06:49:d2:87:1f:e1:
a5:d3:5e:07:d8:1a:af:2d:0e:de:d8:8a:85:73:1d:cd:87:84:
eb:bb:80:3c:8d:39:17:2c:9f:2b:0d:ee:c5:6d:58:c6:f2:72:
01:c3:f8:47:da:0a:0b:01:aa:a9:a0:86:1b:fe:6c:d8:1f:d1:
46:72:e3:0a:c2:41:65:90:ee:b3:54:a5:a7:23:25:1e:df:4a:
c7:9d:13:96:f7:d6:97:56:16:08:7a:e0:49:f9:ee:51:17:19:
c2:44:c5:3e:77:22:4c:44:b2:19:9a:80:32:2e:0e:d0:89:1f:
70:6d:09:2b:88:f5:c5:5a:a9:4b:b8:7a:bf:e1:d6:4b:41:7a:
31:2e:da:a0:e5:36:5a:08:ab:48:20:e9:6b:dd:d1:3d:f4:cc:
43:ab:d8:21:cf:88:98:be:e0:92:b1:9d:a3:81:6e:24:3f:71:
4d:1a:e8:5d:fc:20:48:da:38:8d:ee:c0:ac:ef:15:3d:5d:b5:
d6:66:d3:b3:cc:33:92:c8:74:28:bb:9a:6b:71:7f:2b:1b:f6:
39:55:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:13 2025 by rpki-client