Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: Lochai9tNzdoqlgbZJRQePdwMJxt6keNodhMEqK8mPA=
Subject key identifier: A1:E7:99:0F:26:28:3F:02:B5:30:80:45:3C:D5:9C:F5:3E:AD:40:74
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 0197624BE32C750A72DFD47807D32697D220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 0301
Signing time: Thu 12 Jun 2025 04:00:29 +0000
Manifest this update: Thu 12 Jun 2025 04:00:29 +0000
Manifest next update: Fri 13 Jun 2025 04:00:29 +0000
Files and hashes: 1: KIBPt_IHF6y4uJMTevu1k0aU37E.roa (hash: xnu5MWsk10XHvOorhDM/6K8KY5BqTo0pp6Ckq1C4ML0=)
2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: O+UmTLA8Qe6jzGHmgaNp/GfSKKVOCXnCPfpRMBKYa3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:4b:e3:2c:75:0a:72:df:d4:78:07:d3:26:97:d2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Jun 12 04:00:29 2025 GMT
Not After : Jun 13 04:00:29 2025 GMT
Subject: CN=a1e7990f26283f02b53080453cd59cf53ead4074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:68:87:65:a2:2e:ae:53:ba:a4:7c:4e:ae:
c9:f2:10:38:72:e6:65:af:95:1d:24:04:a1:ce:66:
fd:e0:6d:ea:0a:30:79:07:87:0e:3a:7b:75:19:cd:
4b:12:b5:14:5f:a7:bf:10:c4:09:b0:38:52:aa:5e:
cc:e3:5a:e5:68:57:56:7e:b7:ab:53:e8:b3:7a:31:
6d:8e:30:de:af:83:5b:7b:af:db:3c:47:94:95:b3:
07:a2:b8:18:21:59:22:4d:fd:93:3d:33:ba:46:b0:
23:fe:be:07:72:e8:b6:1f:f2:0b:53:8c:1d:05:0d:
04:90:b8:df:81:f8:bb:56:a8:42:a0:e0:cf:d2:28:
39:00:5a:14:72:2a:48:ef:c5:d5:d0:4a:44:72:58:
0d:d5:58:2c:b8:c0:2f:ee:39:d7:1c:a4:5b:40:cd:
38:e3:86:40:83:c0:85:51:95:e9:98:31:eb:25:a3:
0f:ee:db:f7:f5:77:d2:44:ec:6a:47:7d:35:aa:22:
23:ae:7b:c6:fa:c6:3d:ef:8c:4c:03:d7:16:2c:74:
67:3b:43:96:12:97:c0:f8:87:9f:e3:9c:d9:96:a0:
c5:74:ed:68:9a:26:f0:8c:73:66:87:8b:ca:85:67:
93:b1:ce:40:aa:8c:ab:aa:be:6f:00:bb:fe:0f:54:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:99:0F:26:28:3F:02:B5:30:80:45:3C:D5:9C:F5:3E:AD:40:74
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:75:bd:ee:ec:73:25:62:89:8b:62:a1:16:76:62:04:14:c7:
43:1e:13:91:25:03:25:e5:54:94:17:1c:d3:0d:3b:94:44:90:
ef:f2:e7:cc:79:61:b9:fe:60:cb:63:be:69:44:30:1b:f8:e1:
ef:01:da:12:93:68:e5:ae:d4:cf:35:c8:96:f7:89:4b:a6:ac:
ee:24:51:2c:c6:8d:44:41:96:22:8f:53:f0:f6:fa:62:5f:78:
23:1c:ad:24:d4:44:c6:89:0a:17:90:3b:df:41:cf:d0:f9:e5:
c3:28:51:e7:ea:70:bc:21:f7:f1:8b:1c:f9:03:1e:57:75:e6:
e3:a3:68:6d:13:40:a2:eb:0c:89:07:77:3d:c1:3b:75:c0:97:
ca:0a:9e:5a:1a:29:fc:2e:91:7e:8a:9c:48:95:a1:91:93:80:
88:57:47:0d:4e:8c:4a:45:78:0a:08:13:4e:72:54:e3:79:27:
78:50:34:28:3f:b8:73:8e:d6:2d:2f:37:77:f6:b4:e9:2d:10:
c3:d0:33:ca:da:68:f4:c2:90:ec:35:1a:4e:2c:32:9e:78:8a:
52:64:79:ce:75:52:35:79:d8:1b:c3:81:5c:8b:53:e5:15:f8:
d7:ea:1e:6e:cc:ae:73:c0:d5:74:5f:6d:6a:4c:15:5b:9f:be:
10:cb:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:23:17 2025 by rpki-client