Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: aycsH6B5c5OiEAPI6+E4EJyfCmeNm1Pi5UBzBbLYVKM=
Subject key identifier: 6E:12:84:23:31:5D:8D:1B:05:3E:D9:1A:EA:86:00:08:B0:D9:97:FE
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 0197D819AA6DCFAE006C4E6BB27DF591F284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 0868
Signing time: Sat 05 Jul 2025 01:00:49 +0000
Manifest this update: Sat 05 Jul 2025 01:00:49 +0000
Manifest next update: Sun 06 Jul 2025 01:00:49 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: djiQehf07MvO+AmYivgu+O7dOqOXBMwHVj4JfGPYgvc=)
2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:19:aa:6d:cf:ae:00:6c:4e:6b:b2:7d:f5:91:f2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Jul 5 01:00:49 2025 GMT
Not After : Jul 6 01:00:49 2025 GMT
Subject: CN=6e128423315d8d1b053ed91aea860008b0d997fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:47:26:97:af:58:97:29:df:66:25:44:61:
ab:3f:67:75:20:d1:77:7a:f7:35:cf:9b:ec:48:fc:
2b:0a:b7:f4:08:9b:6a:dc:8d:a9:42:f4:5c:9a:fe:
80:e4:c7:52:7f:fe:00:fc:e3:57:40:62:ad:e8:9b:
66:81:0d:bf:94:55:c7:b7:aa:16:77:e0:2b:2b:33:
e4:6b:24:d0:71:f1:f2:fa:c2:f8:fe:96:d7:1a:44:
1a:24:c8:28:ac:2f:c7:b6:25:56:ba:cf:c4:bb:98:
64:41:06:dc:17:88:a0:20:f5:99:c0:50:d5:c9:66:
29:30:d7:5e:a1:eb:03:d5:83:eb:d8:ec:4c:56:ee:
ab:f1:c7:8a:e0:31:2e:2a:95:71:66:db:a1:76:5e:
40:fe:f9:61:6c:2b:d0:53:a5:34:d4:09:47:ca:38:
56:84:42:17:86:1c:b0:53:5d:ed:ae:82:06:59:31:
aa:be:1e:ce:f6:1a:07:12:a1:f7:67:db:d5:f0:d4:
3b:63:cf:ee:91:e6:4f:d1:f2:cf:c6:38:20:80:67:
a1:f4:91:da:91:b8:af:10:d9:5e:be:0d:03:2a:d0:
09:74:c8:08:3b:25:3e:aa:11:c1:c4:5c:d0:01:6c:
fd:a0:65:97:e3:45:10:74:99:92:9d:a5:04:68:c3:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:84:23:31:5D:8D:1B:05:3E:D9:1A:EA:86:00:08:B0:D9:97:FE
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:84:8a:00:48:74:6d:93:6e:d4:d6:47:a1:64:28:0b:cb:07:
42:52:d2:6b:65:4f:bb:26:8f:11:72:78:e4:0c:47:2e:77:60:
0d:5f:d3:af:97:ce:cb:35:d7:aa:38:cc:1c:71:d7:7a:5a:c9:
d1:fa:1a:1c:f7:db:cd:3b:a2:d7:1c:c0:7a:10:fe:04:53:e5:
b8:5b:c7:1f:69:bd:f3:f1:d2:12:19:0a:50:fc:20:61:28:07:
68:42:92:ca:b5:c5:89:01:e8:e5:84:a3:d5:90:c5:6d:36:50:
0d:54:50:47:0f:1f:12:41:fd:24:67:35:49:55:2d:9b:d7:d2:
46:81:6c:c5:3f:86:8d:ad:c6:7d:e9:88:af:0d:78:c1:2b:21:
f6:62:bc:46:8e:e4:ef:fc:ad:75:4d:89:79:42:29:9c:16:ff:
9b:d5:4d:1b:62:e2:2e:6f:fd:d9:f2:34:24:d3:6d:95:5e:e1:
6b:85:c6:5e:9d:f7:b4:ee:67:9b:4f:e9:99:67:6e:cb:66:19:
dd:78:5a:26:b3:44:ad:24:c5:5b:89:44:9f:63:78:a0:30:23:
bb:0f:aa:3c:b1:33:e5:12:df:6d:2b:53:ab:fe:74:b6:79:1f:
08:08:a0:da:4c:ca:6d:99:91:fa:1a:12:71:88:66:93:3a:c4:
2f:f8:a6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 09:20:31 2025 by rpki-client