Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: XpuJYVN7sCProDMtTeVO2ETC7s9y2VvJ5rj/iwAKY18=
Subject key identifier: A3:93:41:67:8D:71:84:BD:41:3B:7E:B7:D5:87:21:B0:8D:01:E9:43
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 0197518F2A5856C319C6FD311788CDBD66C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 118C
Signing time: Sun 08 Jun 2025 22:00:26 +0000
Manifest this update: Sun 08 Jun 2025 22:00:26 +0000
Manifest next update: Mon 09 Jun 2025 22:00:26 +0000
Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: Fztp7auh3kosn8d1v//oDebfwTq4g8LHkaNTfQZV2QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:2a:58:56:c3:19:c6:fd:31:17:88:cd:bd:66:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Jun 8 22:00:26 2025 GMT
Not After : Jun 9 22:00:26 2025 GMT
Subject: CN=a39341678d7184bd413b7eb7d58721b08d01e943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:30:92:9d:d5:31:4c:fe:cd:66:7b:64:fd:
2d:22:c7:2d:f9:31:86:19:fa:03:1e:ac:41:49:ea:
01:31:42:b8:cf:53:26:ce:f3:70:cf:5d:91:cc:96:
0f:26:75:0e:54:47:f5:37:ce:c2:79:b8:89:d8:0c:
7d:dc:82:97:7c:81:c5:21:73:1c:1b:03:15:37:79:
48:42:c7:61:db:16:f6:44:bc:4c:8c:8a:e6:f9:5e:
27:82:bb:69:92:8c:19:e7:8a:32:3b:e8:e4:38:60:
48:51:9a:35:1a:15:f9:2e:ae:0f:b0:6b:54:1c:fa:
00:79:0d:5d:cf:ec:76:ed:04:f5:81:a6:fa:7d:31:
9d:1b:24:59:f9:e0:0f:7b:e8:d0:de:69:92:9b:26:
cb:e6:3e:d6:d8:56:97:41:7d:2e:f9:65:f8:ad:a4:
04:e7:d2:cc:2b:c9:33:50:96:ed:70:79:84:62:29:
96:e6:25:09:1c:21:8d:9e:48:14:2e:77:bd:a1:67:
2d:f4:f4:fd:91:5b:23:0c:3f:93:c0:e9:ea:d5:a2:
5c:14:7a:2b:13:58:a5:4a:b2:82:78:fb:9e:b0:6b:
85:1a:bc:23:f6:9d:8c:e7:2a:1f:63:65:48:3c:de:
2d:d9:16:a7:d6:5d:49:3e:cf:a7:65:5b:40:a4:92:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:93:41:67:8D:71:84:BD:41:3B:7E:B7:D5:87:21:B0:8D:01:E9:43
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f4:70:d5:70:0b:fe:f5:0c:68:ba:cc:78:f9:24:ac:06:6d:
7e:1e:e7:6c:9b:a7:3b:ce:eb:e0:65:4a:f6:27:68:25:e3:35:
17:7b:f2:e4:0c:7c:c0:4d:25:9c:7d:02:78:77:28:4a:41:7e:
f8:79:f3:03:d5:8f:eb:27:0b:22:ab:a9:2f:d5:2f:f2:b5:33:
4f:8a:52:bd:34:d1:d9:04:cc:43:62:8a:ce:db:8a:f9:be:b4:
99:3f:3c:6e:c9:21:70:07:c7:46:03:a9:a1:09:86:8b:d7:bf:
7b:e5:58:28:ff:b0:d2:07:cd:4a:0f:bd:b8:f5:94:44:45:3e:
ec:1a:8c:95:f8:77:22:4c:b8:c7:3b:06:53:92:5a:87:42:28:
05:cb:10:80:9e:7a:10:6a:d5:d8:8f:ff:09:39:27:5c:8d:36:
ef:83:47:f5:5d:79:2d:25:51:19:f8:c6:c0:b6:0c:aa:d8:10:
3e:35:70:23:29:47:a9:4f:f6:4a:2a:e9:ce:cc:e7:ff:f0:06:
98:2b:de:4a:b4:86:3c:e0:77:99:f5:48:de:29:65:f8:74:6b:
79:55:f9:3c:c1:68:ce:73:6c:e3:e3:af:87:55:8e:4e:84:33:
54:19:65:61:11:85:00:ab:82:66:0a:c5:86:2d:5d:84:7e:fd:
0d:ae:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:30:29 2025 by rpki-client