Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: Jx6Ihgti0y2EXcZXAsAUz5xgjBA2WlqmDyoUMY+EXcI=
Subject key identifier: DC:01:85:C7:F6:BB:63:8C:36:7E:6F:6E:57:48:C1:46:AC:27:CD:5E
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019747E7431147709F3C78C6EA7F64F35755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 01:00:27 +0000
Manifest this update: Sat 07 Jun 2025 01:00:27 +0000
Manifest next update: Sun 08 Jun 2025 01:00:27 +0000
Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: v4/HpJsLnyL/0kSM6mLkFC0VpaA+aRBf9b2/B4Hh6qE=)
2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:43:11:47:70:9f:3c:78:c6:ea:7f:64:f3:57:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Jun 7 01:00:27 2025 GMT
Not After : Jun 8 01:00:27 2025 GMT
Subject: CN=dc0185c7f6bb638c367e6f6e5748c146ac27cd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:9c:2b:ed:44:4e:6b:74:00:32:52:19:3b:
df:1c:58:fb:45:f3:e7:70:62:3d:13:2e:94:f0:34:
89:a3:35:a7:04:f1:72:3a:42:24:6b:6e:f8:ad:d5:
99:cb:a3:95:3f:6a:25:a5:82:b4:24:f9:c2:2c:93:
7c:68:4d:30:90:b9:67:e2:79:85:a2:91:30:04:2b:
f8:1b:56:d7:d3:71:12:c6:e2:c5:21:e5:dc:bd:e8:
78:c2:9d:cd:1f:a7:47:17:df:a4:3c:75:a8:31:82:
cd:ad:bf:d3:99:44:51:a0:55:35:89:07:7c:8a:f6:
ef:49:22:2d:66:54:ee:80:23:de:5f:ee:8b:74:69:
cd:94:71:53:2c:b9:a4:b7:68:da:e6:d9:af:37:b2:
15:3e:9e:a9:99:b6:2f:f1:c5:37:14:fb:64:88:69:
3e:30:b1:bb:6d:ee:4b:cf:42:b8:a4:4c:a9:1d:4c:
7d:8c:31:ff:d9:cf:98:42:49:8c:4b:3b:0f:9f:ce:
db:42:eb:1c:7a:e5:7c:d1:a5:16:ea:32:47:04:e5:
2d:5e:6e:d0:1d:95:9a:e0:5e:03:62:c3:37:4b:a4:
1d:8e:7f:5c:f9:c8:cf:de:7a:83:6f:96:5b:29:a6:
ad:60:b7:0e:c1:01:89:1e:f4:7e:7c:7e:25:75:69:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:85:C7:F6:BB:63:8C:36:7E:6F:6E:57:48:C1:46:AC:27:CD:5E
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:21:2b:98:11:1b:33:09:05:e5:08:ef:64:77:8c:54:78:58:
e7:ac:0c:58:ac:fd:3c:2f:cb:7b:8a:85:78:d1:3d:75:20:17:
ca:f1:dd:6c:5a:aa:82:75:21:b2:67:15:1a:94:52:e0:a7:70:
7a:14:6b:88:30:f0:f9:06:b2:b8:83:b0:be:3e:d8:6d:4c:dc:
d1:af:d7:8c:62:33:5c:d0:72:a2:60:de:5d:ca:eb:9e:83:16:
fc:dc:05:dc:5d:32:b6:bd:14:7f:c8:76:16:a4:2d:4a:27:dc:
91:5e:cd:dd:ab:96:4f:df:68:8e:22:15:42:a7:81:a2:33:55:
fe:22:9f:95:45:97:fa:ab:96:99:e5:30:e8:d1:10:14:b8:6a:
7f:a2:9a:7a:c2:86:38:7a:1f:9f:63:19:ac:59:9c:3f:c9:01:
b6:ed:93:97:fe:e9:96:08:c2:66:39:ed:fd:94:d7:50:a6:8e:
eb:93:df:ca:4d:9a:25:f0:2e:0d:c7:b2:14:8b:01:31:78:b4:
ca:79:01:ab:f2:0b:f1:59:9e:b9:b1:89:28:58:e0:46:03:af:
d5:23:1d:4d:de:95:17:a4:36:9f:e7:4f:09:f2:91:ea:4d:de:
3d:3b:33:7c:d5:b3:56:84:9d:c7:d8:ca:50:94:79:66:5d:3b:
89:a2:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:27 2025 by rpki-client