Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: 302q076mfOfm2dOSEHG7FhFm+gz3Czx2AWH9VVgVIhE=
Subject key identifier: 34:98:BD:BE:A1:CE:A0:FC:6F:A5:59:0C:99:ED:1F:E3:14:5D:DA:4E
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 01974931103F4E0A95B867FDFFFB7207BDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1295
Signing time: Sat 07 Jun 2025 07:00:41 +0000
Manifest this update: Sat 07 Jun 2025 07:00:41 +0000
Manifest next update: Sun 08 Jun 2025 07:00:41 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: d+EzCMbOJGn0KplmxTcPukETTJNBXe9hMqF4W5GQw/4=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:10:3f:4e:0a:95:b8:67:fd:ff:fb:72:07:bd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Jun 7 07:00:41 2025 GMT
Not After : Jun 8 07:00:41 2025 GMT
Subject: CN=3498bdbea1cea0fc6fa5590c99ed1fe3145dda4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:0f:0e:79:26:69:dd:e9:0e:9b:60:3d:2b:
b1:e4:de:80:e4:43:53:89:15:c8:ac:9c:98:01:2c:
12:a2:ed:87:8f:3c:94:69:53:fa:41:e4:e6:92:51:
3d:f7:32:df:1e:e6:d7:5a:9c:e9:84:52:5d:bb:bc:
c6:df:7d:8f:6b:52:fc:c9:0a:9d:26:f8:40:94:7d:
fb:db:de:18:d3:12:af:89:ad:c1:1d:8c:dc:50:61:
7e:d1:5d:12:fb:54:84:c9:50:75:17:6b:22:08:43:
72:c0:02:47:58:29:b0:d8:67:23:ec:d2:55:7e:e2:
95:9d:85:d1:37:cf:45:49:86:e8:50:f9:58:e2:70:
f9:3c:c8:10:54:c6:82:d0:c0:c5:68:c5:9f:a8:6f:
1e:05:56:6d:88:27:78:e7:05:74:2a:61:48:fa:b2:
d4:e0:9d:89:5b:f6:f6:16:e5:95:9b:f8:90:1c:11:
17:2e:93:68:d1:fa:95:fa:39:94:9e:c4:85:c4:69:
22:a8:dd:8e:09:b4:c5:15:58:25:23:62:c4:cc:69:
ba:1f:b9:37:27:2c:66:9d:7b:4f:c7:dd:96:21:cd:
f5:11:c9:21:92:99:17:92:31:91:b3:5c:a9:07:51:
42:28:1c:49:25:4c:a0:13:4f:bf:b3:de:f1:a1:f7:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:98:BD:BE:A1:CE:A0:FC:6F:A5:59:0C:99:ED:1F:E3:14:5D:DA:4E
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ca:a1:42:35:e4:d5:b7:06:59:7b:11:71:6f:bf:0e:40:83:
5a:84:7c:0a:fb:f7:28:45:d1:b2:5e:fc:5b:b5:e6:ce:90:99:
f3:02:4d:3f:34:23:7b:b4:fc:e3:12:b0:a6:e0:02:5d:eb:53:
87:59:8c:ae:d1:51:f9:2b:a1:9c:86:57:40:ba:97:c0:b8:48:
a8:8a:0a:e6:e7:27:a2:9e:64:48:96:88:c5:dc:18:10:65:e5:
48:a1:09:e2:11:8b:d5:7d:20:68:8a:90:0a:e6:74:b4:a1:d3:
93:ee:c7:64:1a:b3:c4:43:0e:5c:4d:7f:4b:f5:91:c9:72:06:
bb:2d:6e:4a:1d:e2:6e:4f:db:5a:1b:25:a1:43:d5:b3:39:70:
68:fe:42:82:98:e7:0a:73:de:ed:3b:87:44:3e:95:a3:cd:9c:
9e:aa:a4:5f:b7:37:8b:91:8c:d5:fe:38:59:49:53:44:b1:91:
d9:fd:d9:25:9f:b7:57:cc:61:47:ce:96:f9:0f:d0:4d:5f:69:
69:5c:0a:25:6d:71:1c:95:6c:7b:f7:d9:98:ee:23:b5:0e:fa:
f0:51:66:1c:d0:5e:0c:9b:d1:a3:a6:8b:4f:cd:eb:b8:5c:80:
96:e4:62:83:6e:1a:7a:94:94:81:0d:df:1d:f3:e9:05:b6:78:
63:55:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:44 2025 by rpki-client