Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier: VUFwSzTiZJ7s4rru8Uwd5qcVAxtf+VGVZPHcpzG5buI=
Subject key identifier: 5A:55:9D:29:79:15:C7:5E:16:48:57:A9:DD:73:9B:F6:BF:39:63:4E
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer: /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial: 01974EC59573F1C8B3E75D5C3A448D45E5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number: 07FA
Signing time: Sun 08 Jun 2025 09:01:01 +0000
Manifest this update: Sun 08 Jun 2025 09:01:01 +0000
Manifest next update: Mon 09 Jun 2025 09:01:01 +0000
Files and hashes: 1: hyhfndoa_Z24zyoZ7ygYaeGIqPw.roa (hash: 08nYzAa42CtGg2k7nkGWsd8V/SDqafxamCeCjRVW6Yw=)
2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: 54Ju8/hurQwkFO1mdIuWHrsWU0iO5DPCu5TtnC9e0hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:95:73:f1:c8:b3:e7:5d:5c:3a:44:8d:45:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Validity
Not Before: Jun 8 09:01:01 2025 GMT
Not After : Jun 9 09:01:01 2025 GMT
Subject: CN=5a559d297915c75e164857a9dd739bf6bf39634e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:1c:23:4a:d5:54:31:e2:00:41:bb:a7:af:
9b:e3:a8:dd:cf:76:e2:ed:b4:cf:52:84:54:1e:94:
07:f7:3f:70:37:f4:bc:eb:19:9a:8d:a4:ae:c0:16:
e9:15:9c:7d:a6:aa:45:31:47:ca:d2:b2:bf:bc:ef:
bd:ec:90:9c:b4:be:fe:fb:3c:5c:e6:45:c0:d6:d2:
69:e9:5e:3d:aa:f9:d6:52:8e:99:91:71:4e:cc:6a:
a1:34:d6:2a:5c:3f:9a:6c:a2:70:06:52:9b:dd:4b:
c8:f7:f3:3c:c2:68:d6:32:6b:6d:dc:05:40:bf:c7:
ba:35:63:44:ab:f4:25:1d:87:8b:8c:15:04:18:9b:
b1:f7:b5:54:eb:bd:50:4e:31:a3:5b:f4:1d:32:5e:
b5:99:b1:c9:49:3e:80:06:d9:7d:1a:23:30:27:f4:
51:48:43:b5:71:55:f7:99:04:58:b8:42:2e:dd:c4:
40:00:0f:ec:6a:fd:a5:50:68:bc:60:63:14:2e:d2:
b6:1e:44:71:1c:51:83:43:7b:78:35:dd:a4:79:92:
48:bd:a2:ba:ca:a8:5e:fc:b0:a2:e8:d7:2a:07:96:
46:45:dd:67:63:8d:0d:94:73:23:1a:72:80:3b:1c:
62:4b:5c:c4:5d:1e:6e:eb:eb:72:59:be:aa:e1:ce:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:55:9D:29:79:15:C7:5E:16:48:57:A9:DD:73:9B:F6:BF:39:63:4E
X509v3 Authority Key Identifier:
keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:02:0c:0e:57:2b:3c:7c:0a:c7:91:c6:85:b9:b9:4a:a9:e0:
08:a4:e7:ec:b9:ec:64:22:94:4d:8f:6f:ed:30:a5:cb:4e:a1:
5d:df:b5:a5:ec:90:42:6f:02:f2:df:60:e2:66:d5:06:76:fb:
87:a0:86:5b:98:4b:67:d6:a0:31:81:c7:21:b4:b5:99:4a:7c:
5e:23:06:f5:d1:76:c9:ff:24:1b:42:21:75:30:4a:bb:39:3d:
6c:8c:b8:01:8f:12:93:7d:56:a0:72:e5:e5:e3:6b:ad:ab:1c:
12:4b:0c:eb:32:1b:87:ae:b4:78:c1:b2:3c:65:ed:23:4b:a6:
e0:37:e7:22:43:f5:41:35:d5:5f:0b:d5:60:3a:74:8e:06:06:
a7:e5:af:a7:38:c6:42:1e:e5:01:d5:6c:0b:32:ae:7c:c9:7c:
74:b0:2e:4e:b6:03:b3:c4:ea:b6:4a:97:3d:7f:39:48:42:c7:
4d:af:08:5d:09:c0:33:f8:ce:e6:0c:ee:92:6f:d2:96:ac:51:
5e:52:8a:fb:5b:30:61:9b:38:81:14:e5:bc:e9:57:a0:59:0d:
0d:22:b8:67:ca:c2:1a:7f:45:8a:03:3e:a5:b3:b6:58:cb:14:
0f:2d:03:87:26:7e:1c:d6:28:7b:b0:98:cf:7b:2c:a6:d3:7b:
87:45:c1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:22:59 2025 by rpki-client