Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: 1ziM90inqNkZh9jU4nq9NcyLIQnerpUe/lb2sWrLHaA=
Subject key identifier: E9:48:DA:C8:C0:93:14:B7:94:99:01:4B:10:C7:53:58:80:24:6B:68
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 0197470B7C8E127D3A898A4F781772BB27B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 1584
Signing time: Fri 06 Jun 2025 21:00:24 +0000
Manifest this update: Fri 06 Jun 2025 21:00:24 +0000
Manifest next update: Sat 07 Jun 2025 21:00:24 +0000
Files and hashes: 1: IR58hW2pF2dLJCna8uyvYq_VZMM.roa (hash: ac2RbFn+3ptdCI7LDC+sf8voL9sYZa7XS3mEnBJ7haQ=)
2: bkHUy_sgghNYVbWsbVxAbLGezkg.roa (hash: yMeTm4bL37IzjPkhConJ8z6pYcZ3+b2hJFSO0Nigh2w=)
3: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: G7DxeR2S39qno6a2VrUhgFiDuDi3hsOH++SB1aoBjnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:7c:8e:12:7d:3a:89:8a:4f:78:17:72:bb:27:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Jun 6 21:00:24 2025 GMT
Not After : Jun 7 21:00:24 2025 GMT
Subject: CN=e948dac8c09314b79499014b10c7535880246b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:fe:a8:3f:09:38:ec:8c:41:fb:50:17:eb:
db:63:c1:93:9a:d8:80:18:78:11:2f:5f:85:f9:c7:
b1:b1:d5:5e:0f:30:c3:f7:d4:bb:8d:91:6e:be:aa:
30:50:89:c8:3e:b0:d9:24:f7:e3:26:62:57:c6:af:
57:5b:ee:f9:13:9a:cd:39:b5:2b:74:6e:30:e1:99:
63:2e:cf:5d:2d:b7:a9:51:4e:20:76:48:20:d0:15:
8b:0a:33:fb:21:d9:d7:c2:e0:99:71:c5:be:a4:76:
91:7b:73:3b:6e:96:4c:b5:43:b8:de:08:b2:86:03:
48:1e:e5:e1:cb:77:29:c4:49:bf:ed:6c:2d:01:94:
6e:bb:3b:2b:05:9e:0f:82:99:4f:c5:32:53:b4:ad:
1e:b5:a5:4e:0b:4c:d4:ad:aa:9d:45:14:f8:90:80:
e6:b2:7e:21:da:bb:11:2e:21:db:13:48:a1:20:5c:
3f:5b:fa:3c:39:ff:f7:90:8f:47:bc:54:43:95:78:
4c:c5:5f:c7:df:66:5e:3f:2f:d9:16:0b:44:f3:20:
11:65:48:0a:03:54:4c:cb:39:e9:76:d0:58:28:a1:
8f:40:2c:e6:14:35:5f:16:42:5e:56:de:28:16:66:
71:0a:ef:50:db:b7:d8:51:8c:c0:46:a1:71:c3:b6:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:48:DA:C8:C0:93:14:B7:94:99:01:4B:10:C7:53:58:80:24:6B:68
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0b:a8:48:e0:a6:d8:58:d4:dc:95:e0:48:b2:cb:25:66:ee:
4c:cd:72:b7:72:38:99:e3:01:5f:b0:71:74:63:cd:19:b4:1e:
0e:0e:0f:d1:01:99:9c:8f:0b:04:35:31:b9:18:95:a2:d8:d8:
91:dd:28:01:d8:e1:dd:6b:09:0f:a6:26:bd:2e:dc:6c:6e:e0:
e9:0e:fd:20:78:dc:aa:3e:10:0e:d4:06:06:11:a0:84:d0:05:
bb:b0:b0:27:c3:8f:6d:6d:c3:9f:19:1b:ea:19:6c:41:5c:36:
f1:d4:80:df:5e:bf:4d:59:9e:46:ba:34:67:49:fd:5b:73:11:
4d:e6:f9:fb:46:17:71:7f:a0:d5:88:d4:6a:92:0c:8c:bb:47:
a8:16:34:2d:0b:91:02:9e:ae:d6:54:1d:04:3b:69:36:5f:d5:
d3:f0:fb:16:ea:c5:8a:69:ae:9c:cc:f4:21:1d:8a:5c:64:c6:
ef:8f:8c:5c:34:bf:4c:91:0f:70:d3:c2:39:03:77:e7:05:e2:
bc:2a:02:84:c9:fb:7f:ca:31:77:a9:5c:e6:01:39:81:81:5d:
9c:76:7a:a4:38:bf:4a:88:41:d9:5b:48:72:5b:38:5e:09:b0:
5d:79:05:91:b2:3d:01:13:ee:46:69:8b:20:95:65:fe:e3:94:
fe:ef:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:27 2025 by rpki-client