Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier: bkCfbUspXqVN4CR7fQqdsbu0qAGHYmUgAfeGugn3JNQ=
Subject key identifier: 53:41:C3:65:7B:3C:98:28:4E:85:64:78:A4:4F:3C:00:80:34:73:B5
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 01974A43BE294B8DB4F73E475E216C20E810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number: 0D89
Signing time: Sat 07 Jun 2025 12:00:42 +0000
Manifest this update: Sat 07 Jun 2025 12:00:42 +0000
Manifest next update: Sun 08 Jun 2025 12:00:42 +0000
Files and hashes: 1: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: x0nxF0KGX8h/HUsvuOUSRJ7mFlJ7FxLvj2Hv7Bo/lUA=)
2: q75mVExwlcu32JNTYIQla5p7m1o.roa (hash: x+d/+bvOF1j8LDo0fwzIQNZsHB7Abtd57CLyM/qqXNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:be:29:4b:8d:b4:f7:3e:47:5e:21:6c:20:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Jun 7 12:00:42 2025 GMT
Not After : Jun 8 12:00:42 2025 GMT
Subject: CN=5341c3657b3c98284e856478a44f3c00803473b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:d2:8c:1c:c4:d3:11:ee:56:ab:d5:fb:e9:
3b:bd:e6:fb:0d:b5:46:a4:66:80:b3:af:04:f3:f8:
e7:cd:6f:50:6e:e6:89:c6:da:00:43:45:91:fc:d2:
46:bf:34:25:19:83:f4:fe:ae:35:ed:cf:48:28:d8:
a4:29:ed:d0:c1:46:84:0c:88:f1:fe:77:2a:d3:66:
40:41:8d:79:64:9b:3b:64:53:2b:a9:4d:ab:bf:9a:
ca:02:36:92:40:01:d4:13:0a:88:de:76:1a:dd:81:
f4:93:0a:98:ca:44:5a:08:1a:d0:10:6c:ae:c0:d4:
6a:59:de:41:e6:1f:1e:5e:85:41:a4:75:3e:a3:19:
52:d9:e1:d6:ce:8d:d4:a9:37:47:15:39:f4:a3:33:
be:2e:f7:73:21:d3:69:66:38:9d:be:fb:21:c7:94:
55:a5:d3:56:8e:ea:0b:9c:3b:8c:db:da:40:92:af:
8d:0e:4f:09:fd:34:81:a4:cd:e9:af:21:11:8e:ba:
fb:98:37:bc:be:25:e0:e1:20:69:54:92:7b:72:37:
e3:fd:ae:14:65:ae:ea:49:d8:d8:5f:0d:cc:1f:30:
84:57:d1:77:ca:be:36:36:51:9a:b5:3e:5c:d7:74:
13:c9:7a:26:f4:37:21:c5:aa:37:91:1c:65:73:f5:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:C3:65:7B:3C:98:28:4E:85:64:78:A4:4F:3C:00:80:34:73:B5
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bb:cb:e8:38:a9:18:53:13:40:07:8e:91:27:4e:8a:18:da:
70:dd:b7:0f:d0:cd:f1:a3:b6:64:30:58:3c:a0:53:9d:dd:cc:
ab:a8:4e:21:93:88:12:f3:e0:0d:8b:a2:92:35:23:af:dc:e4:
16:1d:dc:c4:72:bf:cf:9a:d3:22:a3:9c:c0:01:ba:5c:9c:e6:
11:a6:0e:0a:9a:a4:71:97:62:17:01:cf:38:22:5d:e0:b7:70:
e2:10:ab:45:3d:a7:ae:1b:cc:50:ba:f3:91:87:b7:7d:bf:c4:
cf:42:6c:6f:1e:94:b1:7b:20:60:8f:f6:af:d2:95:c1:f8:a4:
10:0e:78:82:5b:ac:ef:74:aa:78:f8:f8:9c:96:cf:47:a6:dd:
85:d0:a1:2b:1f:64:6c:a9:09:2c:f3:d2:cf:09:3b:07:15:af:
cf:0e:0c:9b:0c:8b:d3:09:eb:53:20:52:0f:26:5f:23:df:35:
c7:0a:40:c8:2e:25:af:b7:a9:d5:f5:24:46:fe:9d:3f:cf:72:
77:72:1e:96:da:2a:27:5f:92:52:66:5e:16:f4:70:37:d4:9c:
c0:16:aa:07:74:ca:3b:b7:17:f1:3c:df:b7:07:10:77:d5:59:
b7:96:91:04:8f:86:54:08:66:c8:82:58:ae:c3:4b:73:91:15:
37:d2:68:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:50 2025 by rpki-client