
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: ynvgXN8J06YLLXaEgrwgSek/GwFYVad+KDv3hnAwSmA=
Subject key identifier: 9D:11:18:CE:E8:E2:FA:7D:4E:36:0F:FB:21:17:98:9B:73:1E:8A:B0
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019757C841977333B1958AB4AA2914270AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 08C7
Signing time: Tue 10 Jun 2025 03:00:31 +0000
Manifest this update: Tue 10 Jun 2025 03:00:31 +0000
Manifest next update: Wed 11 Jun 2025 03:00:31 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: T3NYMawRHngwhI3EFd9dMZQSV1E.roa (hash: f99KOEwXdj6H3ZJRNRBeTA3dMK19zszZZ6xzWHN3tPk=)
3: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: DRyFz/HfhNgXAnhbmEncf6mRwDEAVQ1McOfXNnaPOEw=)
4: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:41:97:73:33:b1:95:8a:b4:aa:29:14:27:0a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Jun 10 03:00:31 2025 GMT
Not After : Jun 11 03:00:31 2025 GMT
Subject: CN=9d1118cee8e2fa7d4e360ffb2117989b731e8ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:82:7f:7e:d7:5a:cd:e4:21:5a:db:4c:82:
bb:9e:6b:bf:73:1f:56:af:e3:90:0b:3c:8d:da:1e:
9c:bc:7a:3d:9a:2d:07:0d:d9:32:85:32:8a:47:c3:
40:ee:8c:ad:ea:91:bb:5f:96:77:3d:3c:e4:e6:32:
bf:e2:86:6d:77:1e:17:82:ca:71:9b:a5:2b:4e:18:
bb:24:82:be:a2:ee:76:8d:36:0b:50:64:1a:f0:ce:
36:55:f7:62:6a:44:b7:6a:2b:7d:f5:de:8b:80:02:
23:64:cc:6c:47:84:63:5a:2b:e0:cc:06:5d:47:d6:
7f:bd:a0:3d:bc:3f:79:9b:a5:d5:8a:33:2b:61:4f:
88:d0:e3:02:5f:cd:c0:bc:44:ef:71:6c:28:36:fa:
6d:aa:ba:76:bd:17:e5:db:46:de:c8:42:5e:83:3f:
f5:2e:cb:af:a4:b5:f0:8a:dc:4c:da:23:65:b5:90:
c7:89:b8:9f:8c:4f:3a:1a:ef:31:de:8c:47:c0:2a:
07:d1:ce:9e:c8:47:b7:4c:e4:0f:75:08:a4:35:74:
9f:e4:a0:b5:73:56:c1:0a:a5:ad:5a:0f:f9:4b:82:
2b:e2:bb:c0:aa:aa:94:22:44:79:3a:57:b0:7b:b4:
91:d4:11:16:d5:1f:82:2e:49:32:5b:f1:19:cf:2e:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:18:CE:E8:E2:FA:7D:4E:36:0F:FB:21:17:98:9B:73:1E:8A:B0
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d8:98:2e:5f:be:0a:c2:6e:66:0c:69:da:a4:9e:2a:b4:3b:
14:56:8b:78:4b:01:dd:40:67:73:33:f1:87:5e:c7:92:a2:99:
96:c9:7c:4e:27:a5:98:72:ef:53:a2:26:94:69:7d:8e:3b:18:
81:61:4a:45:df:bb:ad:34:e2:c9:84:75:71:76:a0:66:9e:81:
ac:ea:78:6b:04:1e:9d:c2:a9:e9:f7:fd:54:7a:be:d5:45:77:
1d:8b:d3:45:88:e0:58:c8:54:cc:70:68:08:6d:9f:f3:b0:96:
e8:1f:27:5d:92:18:5d:b5:49:88:28:64:b5:99:e8:2f:7b:ef:
b1:5d:f6:b8:17:fd:31:7d:63:29:bb:18:ed:d4:82:33:fc:7d:
ef:4f:6a:90:2d:30:cf:3d:9c:36:cc:1d:ab:90:4d:26:64:40:
37:20:8a:cd:52:f9:0a:d7:80:20:a5:63:56:a1:aa:6f:7b:00:
b6:9a:e6:59:c9:bd:27:07:d4:d9:39:1f:fd:75:0f:8f:fb:a8:
a9:a2:49:de:7d:d9:10:14:25:19:81:4c:ac:75:c2:93:b4:c3:
9e:26:af:11:22:48:21:23:b3:7b:d3:df:71:0f:99:23:82:09:
58:51:fc:b1:8c:da:02:75:9d:82:04:4d:2d:31:30:e9:7b:b4:
83:8d:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:23:30 2025 by rpki-client