Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: h8LsTo20hUd5VD1BF0Cb+nhlWThmI2MGvO3F8rog/x8=
Subject key identifier: FF:D4:3E:9E:4F:F0:E9:EC:7B:7D:BB:2D:19:18:B2:41:29:99:57:A3
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 0197488D0AE5CF89F9A1B4D8CD3E3F7AC467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:32 +0000
Manifest this update: Sat 07 Jun 2025 04:01:32 +0000
Manifest next update: Sun 08 Jun 2025 04:01:32 +0000
Files and hashes: 1: RHNggBb1TucAzNCR_Nr4pg_wiTI.roa (hash: gVu159ZiRDG0Y/9P6fbJjRdg/qCz0CZogXW7oBMzxmM=)
2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: geunadezlGdMxlkNk61258oA1FWAU/lYdwA/3iuFeG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:0a:e5:cf:89:f9:a1:b4:d8:cd:3e:3f:7a:c4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Jun 7 04:01:32 2025 GMT
Not After : Jun 8 04:01:32 2025 GMT
Subject: CN=ffd43e9e4ff0e9ec7b7dbb2d1918b241299957a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:9e:78:dd:fd:81:b2:98:8b:46:c6:f6:e1:
fe:26:cc:df:5a:7c:fc:87:87:58:9e:2d:6a:64:1c:
4d:b4:b6:2a:ff:cd:bd:9b:51:12:20:78:0a:f3:07:
a6:41:45:e1:a6:49:91:41:ee:ba:6c:9f:aa:b1:4c:
9e:6e:f7:09:88:e0:f7:e8:59:aa:10:55:9b:cd:79:
be:de:d9:22:ab:6c:d3:09:8e:d6:38:ea:4b:5e:cb:
7e:01:ca:90:37:a0:72:51:44:54:43:72:b0:0d:d4:
5a:f1:4a:e8:6e:cd:be:c8:d6:35:4d:86:b6:54:6b:
7e:dd:c7:e6:1d:5f:da:7c:37:03:93:9e:c1:10:b4:
a8:d6:bd:97:ad:f1:83:b7:92:c0:94:0a:1c:aa:c1:
3d:00:34:a4:5c:40:30:76:d0:56:c4:60:07:f0:7c:
01:e4:19:04:7e:e9:87:13:c4:fc:ec:70:1a:63:ec:
00:c2:b0:4c:75:7a:f9:f5:ec:12:4e:b5:b9:9f:b6:
ee:a3:31:e3:4f:f2:96:c9:38:4c:1a:4a:1f:9f:22:
bd:67:1e:67:c8:10:56:f4:8f:e7:30:09:f7:bb:e0:
a4:5b:a3:40:ab:08:5d:0f:0c:5a:86:00:fd:19:aa:
5f:94:57:20:e8:ee:fa:1b:88:b8:4e:f2:13:c8:dd:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D4:3E:9E:4F:F0:E9:EC:7B:7D:BB:2D:19:18:B2:41:29:99:57:A3
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:36:76:b6:7a:61:ea:d9:c2:eb:3c:e3:8b:ca:8e:1c:cf:5c:
70:3e:52:e7:d4:9c:ad:37:4d:58:28:e9:ab:3b:cb:c9:83:41:
7b:fc:06:c1:62:2f:87:18:87:f0:43:d8:de:42:40:a9:06:08:
05:73:e8:b9:3d:9f:02:a2:96:04:93:5f:d5:94:cb:90:81:07:
86:ac:27:60:4d:09:59:05:f0:5f:bc:9c:85:b4:98:7c:f7:52:
3a:50:d0:f4:aa:60:de:5b:a1:72:97:21:43:72:a1:43:01:1b:
03:f6:fe:0b:44:04:3d:89:fa:ae:04:e0:ae:e5:6a:d9:93:02:
41:c9:a5:f0:cf:83:40:89:f7:44:65:6e:eb:5d:9c:5e:ab:1e:
0c:bf:4e:a1:a6:01:ab:b5:a4:46:0d:2f:a7:e0:88:f9:e6:96:
46:82:29:2d:c6:77:ca:7b:18:cd:5d:cf:f4:49:2e:7d:78:10:
a0:f4:8f:d5:de:c2:42:7a:e5:0c:ff:da:20:3b:76:89:19:0a:
84:e8:0b:e9:45:c4:ae:9e:90:cb:19:bd:b2:10:8c:f0:92:14:
c5:bd:98:a0:f8:53:56:18:cc:64:6b:6d:4e:8e:d2:fa:2d:0f:
59:16:d5:18:07:86:79:2a:04:43:38:59:89:28:50:25:8c:5d:
5d:62:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:10 2025 by rpki-client