Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: JRwlybgbJOGdJQ4VC+IotvM07bTI6xduprkc1ilPKK0=
Subject key identifier: 58:15:5B:38:C3:71:FA:13:65:1A:6D:69:58:18:2D:AF:CE:26:08:09
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 0197518F3B1F8E05F85523C498D3A782EC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 1299
Signing time: Sun 08 Jun 2025 22:00:30 +0000
Manifest this update: Sun 08 Jun 2025 22:00:30 +0000
Manifest next update: Mon 09 Jun 2025 22:00:30 +0000
Files and hashes: 1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=)
2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: NQdjwKuCLBOWzmUplptntfst1U0Cl56v+xWGF+oceN8=)
4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:3b:1f:8e:05:f8:55:23:c4:98:d3:a7:82:ec:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Jun 8 22:00:30 2025 GMT
Not After : Jun 9 22:00:30 2025 GMT
Subject: CN=58155b38c371fa13651a6d6958182dafce260809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1b:28:69:67:49:11:53:3e:e1:7a:68:dc:de:
b1:01:5d:53:1d:2a:af:a6:4f:af:a7:37:2d:bf:39:
f8:d3:58:31:62:fb:ae:76:4b:f6:b1:c5:ee:ec:e9:
35:e5:12:c8:d9:13:c4:43:f9:f2:81:21:bc:0a:26:
f0:85:cb:e3:be:3b:45:71:41:c1:f7:70:ae:e2:19:
26:11:25:e7:76:98:76:4f:76:3e:17:56:9a:68:48:
67:cd:e1:15:be:74:f9:bc:67:7a:46:0b:e4:ef:33:
80:c8:76:b2:29:27:2d:a7:4c:50:8d:d3:b3:87:16:
cd:f2:15:16:78:75:92:ca:b4:ef:24:c1:8b:3a:cc:
e9:5a:67:53:1a:43:1d:0e:1f:db:c9:31:cc:79:a8:
8f:37:d9:3e:bb:de:e9:4e:5b:d2:88:4e:6a:79:f8:
03:61:c5:cc:fc:09:b0:f3:1b:bf:24:2e:13:6c:35:
88:6d:be:dc:02:77:4e:58:85:87:b4:3f:80:5c:78:
1e:4f:67:e5:af:70:1e:49:32:b2:56:f2:d7:8a:f9:
91:8d:46:5f:0c:00:c9:e5:e9:fd:b4:dd:14:1e:c8:
e9:a7:b5:c9:2d:3f:de:08:a9:0c:0b:29:77:2d:53:
73:5f:f8:04:9d:bc:ea:9e:f0:bb:70:e4:16:b6:b5:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:5B:38:C3:71:FA:13:65:1A:6D:69:58:18:2D:AF:CE:26:08:09
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:36:c3:6e:8e:41:1b:f6:5f:5f:c5:c1:94:98:c7:13:3a:8d:
ac:e4:ad:9f:21:df:e3:70:58:76:d6:52:d7:96:0d:21:b8:bc:
6a:91:e0:4b:19:11:1e:82:64:0c:5d:eb:76:9d:4c:0c:3e:21:
d3:e5:b0:46:96:b9:93:cd:ed:25:01:b5:21:b0:99:0a:1e:b6:
88:52:aa:59:b7:cc:c8:15:ab:ea:be:76:22:2a:ad:c3:0c:e1:
2a:3f:6d:c3:e3:d7:ab:16:f8:6c:54:33:e5:27:de:e9:df:d9:
99:23:3b:27:8b:04:3e:6f:ac:6d:f5:7a:32:89:f0:03:78:fb:
f3:ce:a9:50:5c:ac:d4:d2:e0:3d:7c:96:af:3d:c0:fc:55:e4:
7b:33:bf:1c:4f:30:45:48:93:e8:a6:0e:2c:13:4a:ca:3b:c9:
93:26:1d:dc:2b:89:fc:c2:6b:ff:c0:ed:73:32:65:98:9d:a9:
3a:93:69:9a:3e:28:fb:18:5b:a4:b3:4f:90:b6:29:52:04:2a:
2d:fa:59:f4:55:92:c0:22:79:ac:74:74:12:fc:f9:fc:af:48:
d6:7d:92:80:54:c7:4a:c2:5b:a4:53:c7:05:97:0a:aa:f3:9c:
75:f4:ec:24:45:b8:49:02:3a:24:37:99:f8:f6:4f:55:b4:d7:
bd:a2:11:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:32:32 2025 by rpki-client