Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: 10+bNX365MRy+qIpDAOo2kT9va72g3m52sZ57vLDSFY=
Subject key identifier: F4:69:75:B2:BC:E9:AF:69:1E:8B:FE:2A:9A:65:C7:25:62:C1:79:B2
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 0197488C7E37FD01BCA1E450895D3DFC8491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 12A7
Signing time: Sat 07 Jun 2025 04:00:56 +0000
Manifest this update: Sat 07 Jun 2025 04:00:56 +0000
Manifest next update: Sun 08 Jun 2025 04:00:56 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: MNwXbphaQm8P4kB/ukg+WSIkRtLECdkl2idAxEaYKv0=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:7e:37:fd:01:bc:a1:e4:50:89:5d:3d:fc:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Jun 7 04:00:56 2025 GMT
Not After : Jun 8 04:00:56 2025 GMT
Subject: CN=f46975b2bce9af691e8bfe2a9a65c72562c179b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:3d:53:97:e2:57:7d:76:8c:1d:90:2d:61:
5b:6a:02:95:a4:c9:bf:9c:35:3a:ae:70:31:6d:11:
cc:19:e4:6f:c8:d3:2d:5f:43:64:7a:f0:c5:ca:61:
1c:f2:bc:47:0d:e1:f5:a3:b3:92:45:40:ef:12:10:
1f:28:e6:15:d8:37:12:95:c6:6d:3b:44:6e:da:b6:
3f:c5:80:ea:ff:8e:d2:d4:d5:2e:ee:87:02:21:fd:
18:69:97:6b:c1:9d:32:0c:eb:78:c7:c6:1d:5f:c4:
d8:ff:9c:09:3d:5f:9c:56:a7:1e:8d:8e:e5:c2:56:
d8:fd:43:85:d0:8b:c3:a2:fd:7e:ac:9a:6a:94:97:
e2:97:95:18:ca:98:f2:98:fd:d8:6a:a5:2a:e4:54:
80:36:23:bc:92:b2:52:ff:2a:0e:72:3b:32:99:34:
39:d7:ed:78:c7:f0:e8:3e:64:da:54:09:e3:68:33:
36:f8:93:c9:3a:8e:a2:af:a8:ba:a3:89:39:34:e9:
11:8f:d9:3e:25:8b:85:e8:7f:51:37:c6:df:1b:bc:
ec:14:3c:9b:bf:6e:cc:99:2a:34:09:b0:bc:60:c6:
bb:49:cd:c9:34:2c:16:47:4f:b3:83:ee:39:9e:65:
35:6e:7c:90:b4:84:a0:fa:60:f0:a8:d4:e1:6f:47:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:75:B2:BC:E9:AF:69:1E:8B:FE:2A:9A:65:C7:25:62:C1:79:B2
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:40:11:bf:dc:51:06:46:83:20:4d:f6:2f:25:c8:78:ac:30:
5d:c7:18:1f:0b:fc:25:99:41:51:58:d7:b9:ed:ed:f5:2f:40:
81:6b:6b:7b:25:ab:37:33:00:8e:ac:f4:84:6a:e2:6b:f6:cd:
11:60:51:f3:90:1f:e6:8a:a8:18:98:bd:ee:42:b3:76:41:ed:
07:82:b6:57:c6:ef:78:bb:70:ce:d8:d2:2f:f0:90:e1:92:e6:
e0:11:91:4e:b8:80:e2:a6:a0:5d:02:3f:f1:53:7c:6f:86:6b:
82:81:cc:37:74:fb:42:94:87:6e:90:c7:04:67:c7:d4:fb:3b:
e2:10:d1:bd:c5:21:e0:e5:dd:fb:10:2b:56:4d:6f:2e:36:4d:
81:15:e0:ee:cc:15:96:98:8f:d7:f2:6e:26:51:03:f1:2b:ed:
58:fe:5f:64:93:92:fe:25:0c:74:3d:45:b2:f3:1e:79:bb:7c:
e2:1f:f0:ed:e3:bd:fb:00:1a:d7:95:4d:80:06:dd:b9:42:e5:
eb:2f:74:79:d6:5f:40:15:9d:65:1c:0a:7c:2c:cf:c0:cd:2f:
34:28:4e:49:7e:8e:c1:4e:d9:8d:ef:5e:58:62:0b:d6:99:36:
78:94:23:b8:42:38:fe:e2:2e:1e:c5:45:13:1b:33:f4:17:1f:
b0:1c:ab:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:40 2025 by rpki-client