Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier: v6HvZMDCdVRIoVd3q36Z67QdhAEYpkPT4HjLrnL6Nts=
Subject key identifier: C4:2D:79:91:5F:1D:4D:C1:A2:B3:09:CF:22:80:D8:EF:DD:EC:27:D7
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 01974AE8C5E6B5502D5E236BECB4EAB38179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number: 0F78
Signing time: Sat 07 Jun 2025 15:00:58 +0000
Manifest this update: Sat 07 Jun 2025 15:00:58 +0000
Manifest next update: Sun 08 Jun 2025 15:00:58 +0000
Files and hashes: 1: 1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa (hash: YZnIrYBAzViRIOg0Z2wubi6eZGwgwJHXDai7+0T2WrY=)
2: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: ctKcpxLoyIb6b21RzVEmab8YyFSOWdNcMSz2GN/I/jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:c5:e6:b5:50:2d:5e:23:6b:ec:b4:ea:b3:81:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Jun 7 15:00:58 2025 GMT
Not After : Jun 8 15:00:58 2025 GMT
Subject: CN=c42d79915f1d4dc1a2b309cf2280d8efddec27d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:7e:7b:af:b0:74:b2:46:69:8c:16:28:92:
df:3b:83:0e:da:59:6a:82:4f:da:da:3a:3e:2d:da:
af:9c:ff:62:2c:8d:98:d4:5f:53:20:37:7c:4f:8e:
77:6c:88:cc:02:78:2a:2f:39:da:61:a9:1a:b4:1a:
d2:09:bf:a4:f9:ff:7e:90:14:27:22:b5:13:43:fd:
f2:df:d8:bb:cd:d4:06:cf:99:40:a6:f2:92:11:55:
6d:62:80:9c:2c:27:f3:01:b5:7a:9f:63:c1:ce:c1:
91:6f:2e:57:6f:d7:96:45:70:32:e2:8d:62:11:87:
db:38:de:92:ae:9e:e8:73:0d:c9:85:f2:e2:cd:94:
a6:d9:07:a7:d6:89:45:84:c6:37:7c:5a:c3:53:d8:
29:24:38:5c:ff:8b:23:12:22:dc:6a:72:f0:78:55:
cd:fa:53:e1:c1:21:ab:45:3e:98:d6:6d:21:d6:a1:
25:73:88:01:66:34:ad:6d:bc:93:16:02:c3:ee:e0:
1c:30:68:51:cf:e1:cc:b3:31:5d:3f:b4:0c:2d:57:
25:59:88:1a:30:b0:cc:03:76:0e:26:90:72:88:b8:
27:d7:17:0f:2b:00:ac:4a:a9:75:c3:ca:2c:22:ea:
ee:e6:c8:86:65:c1:70:4f:27:05:71:c9:3b:88:94:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:79:91:5F:1D:4D:C1:A2:B3:09:CF:22:80:D8:EF:DD:EC:27:D7
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0c:0d:a0:73:af:84:ff:d7:4e:bf:f9:84:5b:08:3f:4b:2d:
ff:90:d7:ee:33:0d:5e:f1:90:d4:c2:05:4b:78:69:f3:fe:bc:
c7:37:1e:96:39:ce:89:42:00:58:79:7f:01:a6:ff:c6:16:a8:
6c:70:40:15:6b:5f:5c:bc:d0:a6:9a:1c:6d:9c:97:df:27:cb:
12:fa:c2:77:8b:8b:76:b0:5d:e8:e1:c5:97:e5:5f:42:53:86:
65:89:dd:4d:07:d9:ca:2f:77:89:d3:e9:1c:ff:a3:a6:c8:bf:
e1:7a:0a:61:7a:5e:a1:72:78:b8:a6:aa:36:14:3a:8a:f2:c3:
5b:81:0d:91:09:03:74:5b:4b:30:5f:96:69:cf:23:24:73:bf:
f7:46:b5:c1:b2:3a:10:11:cb:d7:ed:b1:dd:24:17:f8:fc:0f:
df:51:7d:0d:96:71:16:cb:b1:8a:3c:fc:4c:c4:0f:c3:b4:b6:
99:b2:9d:d2:40:71:6a:e1:9d:8a:61:53:b3:af:98:5c:47:b6:
d9:db:0b:05:16:09:84:11:6a:3e:27:2e:87:bd:2c:48:7e:37:
d4:f1:32:45:2d:ac:b6:4d:2a:87:9a:f9:7f:34:68:1a:f9:88:
ae:5b:42:83:d4:d5:5c:59:21:dc:82:04:b3:9c:be:99:b2:b8:
4f:b1:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:45 2025 by rpki-client