Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json)
Hash identifier: d9RykEds5Zf3Ra9gHWOyn/YtYzFiYoq/m9wB+ArPXOo=
Subject key identifier: 68:70:D0:43:8F:A1:B5:A7:CD:BA:BC:55:43:2E:F7:1C:AB:04:F7:2E
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 01974779FFD7FE76F3B8D454FEABA9A42E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 23:01:07 +0000
Manifest this update: Fri 06 Jun 2025 23:01:07 +0000
Manifest next update: Sat 07 Jun 2025 23:01:07 +0000
Files and hashes: 1: SQhydS1Vyld3IgwAh8s8p2RiQDs.roa (hash: kTe34yKWId3G306BKOLdnp9X7okjGmRInSEoph+3YmU=)
2: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=)
3: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: 1PegCIiXzSCIddfVWhc3KXRdDsWdtxrOMmMghvgJE2I=)
4: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:ff:d7:fe:76:f3:b8:d4:54:fe:ab:a9:a4:2e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Jun 6 23:01:07 2025 GMT
Not After : Jun 7 23:01:07 2025 GMT
Subject: CN=6870d0438fa1b5a7cdbabc55432ef71cab04f72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:60:db:80:e2:74:4b:2f:21:c6:a1:90:88:
d5:cf:84:6c:d9:5e:ef:a7:cd:be:e9:4b:fc:bd:4c:
b9:4e:f7:d0:5d:48:37:92:d4:99:46:67:2f:92:85:
24:e3:ec:c4:0a:07:81:75:8a:9f:49:07:26:bd:cf:
ac:bf:82:f9:b0:0c:ea:32:db:2a:d3:9f:ce:76:5a:
59:55:4b:67:49:7a:44:d1:c8:5e:86:32:0a:58:d6:
a0:c3:b5:84:7e:86:dd:d9:3f:2d:69:64:07:cc:ba:
cc:79:c3:e3:e7:98:f9:9a:06:9f:60:ed:e2:2b:38:
76:04:12:c6:97:1c:d8:56:ed:af:33:ed:28:32:30:
43:e6:4d:bc:63:1d:86:e1:ad:37:77:f3:ee:fd:5d:
ec:e2:7f:b6:99:88:a0:e4:52:30:34:60:58:7e:e3:
f3:bb:0b:bf:d0:cd:29:4b:01:03:5e:5f:48:9b:d7:
0b:78:2f:23:fb:33:49:44:da:1a:48:c5:ad:fc:e4:
5f:1b:33:ab:6f:84:91:86:04:f0:3d:18:48:76:c8:
ed:6b:36:ca:2b:0a:6f:d1:6a:c5:26:15:a5:25:9e:
35:67:07:8a:71:91:5d:bb:75:d5:5f:29:3b:93:04:
15:80:a4:9d:3c:09:85:c4:f8:e8:f1:c4:f8:a7:f2:
ee:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:70:D0:43:8F:A1:B5:A7:CD:BA:BC:55:43:2E:F7:1C:AB:04:F7:2E
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:69:6b:ea:5a:be:fc:ba:c2:39:be:22:de:9b:aa:5a:5d:27:
0e:47:44:cf:1b:bf:80:25:50:cd:3b:b3:8b:d1:ff:ea:a0:a3:
98:0c:9c:1a:ca:a6:72:06:ad:67:44:5f:e5:74:ab:88:a3:42:
6f:eb:73:8a:03:27:6b:07:e3:fb:44:dd:2b:ba:3f:a3:36:89:
9c:91:39:02:5b:4e:0a:38:c9:6a:f7:63:32:e1:3d:08:54:e5:
2f:ad:0f:52:20:d2:fd:70:a5:fb:88:17:0d:50:3b:d3:bb:73:
7a:3c:aa:5c:6d:e0:4b:df:1d:6e:99:41:8d:6d:ff:c1:ec:20:
90:81:f8:8f:6a:1f:5f:8a:ff:90:df:95:80:08:38:71:75:52:
5d:fc:d8:1f:c9:00:d0:1d:13:13:d2:9d:f4:13:99:23:3c:c7:
09:1c:fe:29:f6:82:4c:3d:4b:b7:9b:61:71:7c:80:45:d7:10:
f9:22:1a:13:e4:1c:f7:8c:32:49:a3:e0:68:d0:08:a1:fc:f7:
da:d4:e2:68:12:46:2f:2f:7c:2a:f5:c5:37:b7:dc:12:64:80:
e8:3e:79:b1:da:09:1d:83:19:37:0f:36:14:c6:cc:d4:bd:ca:
27:77:fd:e4:9b:af:89:f1:d5:f8:51:5b:4e:a0:7e:f6:fa:96:
4b:8c:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:44 2025 by rpki-client