Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json)
Hash identifier: E913b67HDZFu2CksiBta/sE57aPObtoW13azWObMJmI=
Subject key identifier: D0:8A:51:F2:1A:1C:59:F0:1A:DC:14:57:AC:55:99:63:45:B7:5F:CD
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 01974AE8BD2C1716DBFF89744A7C9C5BFE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 15:00:56 +0000
Manifest this update: Sat 07 Jun 2025 15:00:56 +0000
Manifest next update: Sun 08 Jun 2025 15:00:56 +0000
Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: jkLHzSs4zF2daD91FAikD8K/+PWOKJuI6fRplJdrttc=)
2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=)
3: lishyzU5fcRQD0UnbZJENmou-sc.roa (hash: OXZjviRf58gZnLzaiDcKdYvZD8OZRwCWQQj7e3qyEJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:bd:2c:17:16:db:ff:89:74:4a:7c:9c:5b:fe:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Jun 7 15:00:56 2025 GMT
Not After : Jun 8 15:00:56 2025 GMT
Subject: CN=d08a51f21a1c59f01adc1457ac55996345b75fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:5e:5b:55:f6:71:3e:93:2b:9c:5c:79:b4:
12:20:26:f4:de:04:e6:90:6f:67:e0:4a:db:24:b4:
93:59:54:f1:de:7d:b2:c8:40:6a:7c:ad:37:9b:f2:
eb:02:0d:fe:eb:19:7d:d5:88:d1:0a:2b:1d:ff:b9:
b9:bc:16:40:35:4c:d3:56:01:66:17:11:2c:bf:08:
42:5f:3d:ed:c7:ee:8b:2d:4c:aa:51:c8:29:03:a2:
1a:8e:d9:6a:26:2c:0c:84:78:bf:d5:25:71:95:ad:
fd:34:ae:24:52:83:0e:da:f3:21:e9:b0:e9:ab:4a:
76:dc:34:2d:53:c0:75:31:f6:b8:6e:fe:0b:80:3b:
a9:4f:7b:d6:ef:c2:4a:e8:f3:23:4c:a7:e9:31:16:
10:63:8c:ff:47:c6:4f:1f:fb:b7:bb:73:a7:4c:60:
46:8f:63:2a:09:51:10:fd:24:1b:e5:43:a6:77:96:
25:98:5b:1a:08:98:ed:72:a9:e6:70:4e:59:d0:72:
4b:d9:c9:76:a5:27:7f:7b:df:2a:9c:18:f1:db:92:
e0:a8:e2:b3:8b:ec:af:43:c1:8a:56:58:8e:f4:84:
2f:03:b0:17:d3:cc:8a:77:08:bd:5b:61:be:bb:af:
15:fd:4b:43:f1:80:43:22:3a:04:ab:c8:be:31:1a:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8A:51:F2:1A:1C:59:F0:1A:DC:14:57:AC:55:99:63:45:B7:5F:CD
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0e:17:83:b9:74:0e:35:cd:76:2b:22:02:9c:f2:18:d2:96:
cf:7f:29:a3:01:78:4d:95:d3:77:29:a4:e9:98:ae:19:7b:36:
f6:b5:c5:ca:ff:88:36:1c:00:60:fc:53:87:88:d8:ab:24:63:
ac:6d:15:1b:5e:93:ec:62:9c:0e:75:0a:06:ea:91:a2:7e:07:
5c:52:bf:77:27:b7:dd:6a:cd:f2:df:b4:86:ce:16:1a:2e:05:
eb:c2:f7:8b:3b:22:43:e7:3a:2b:df:5d:d1:6d:d5:5a:36:63:
d3:c6:44:a5:bc:7e:10:a8:2d:b3:34:07:37:d0:09:6d:5c:93:
5f:32:66:1c:1c:49:1e:aa:47:43:a8:0f:0c:01:df:5d:ec:30:
90:7c:a9:ec:cd:51:d8:00:c9:b2:8f:00:40:19:08:65:63:bd:
3e:fb:29:b0:fe:d8:f7:98:20:83:64:f1:24:bb:aa:ce:7e:ef:
9b:8e:7e:17:ea:69:0f:9a:35:39:28:40:dc:c2:7d:24:ae:60:
3e:35:05:ae:4f:0c:bb:59:68:fe:73:7b:b1:a1:ce:94:f2:bf:
95:20:1e:90:6d:07:56:c0:d8:66:3f:aa:79:91:a6:e1:a7:53:
7c:4a:7f:eb:93:c1:38:15:a2:d1:24:ef:c7:de:e5:b5:09:3a:
83:37:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:35 2025 by rpki-client