Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: qwbTjk14WewLTPwdleMj9ukDOyLdA6MrmVd/EYDi/2Y=
Subject key identifier: 67:60:28:98:96:9D:27:F2:48:6A:99:D2:86:B8:D8:87:D6:B2:BF:EE
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019748C327953A26C0C758668A134B3DD45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 0527
Signing time: Sat 07 Jun 2025 05:00:38 +0000
Manifest this update: Sat 07 Jun 2025 05:00:38 +0000
Manifest next update: Sun 08 Jun 2025 05:00:38 +0000
Files and hashes: 1: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=)
2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: myE10sWRA5kWef/HWMDmRXficoOBiT7XLnmUBAkfyRw=)
3: uQVUGEMfvHVdv1_YESVkZQZE7PE.roa (hash: OhVC0ZpRFpvtoO4OMxLJb0wiwXx6IP+AnGybXMCFI/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:27:95:3a:26:c0:c7:58:66:8a:13:4b:3d:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jun 7 05:00:38 2025 GMT
Not After : Jun 8 05:00:38 2025 GMT
Subject: CN=67602898969d27f2486a99d286b8d887d6b2bfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:36:e9:e9:9d:d6:66:13:30:71:a5:ec:45:d5:
43:97:4c:1e:1d:b5:99:0e:2a:f0:4e:7f:ab:39:b5:
c6:64:10:e6:56:20:22:04:ce:c5:c4:5f:c4:65:1a:
de:f5:99:de:38:ba:1f:bd:88:9a:9e:ee:de:95:a1:
e1:60:aa:a9:a4:98:46:0c:32:13:fb:7d:b6:61:f5:
31:9d:92:90:f9:4b:4f:34:76:15:b0:fe:3c:e5:4e:
1a:d2:77:02:60:02:d0:b0:dd:a3:e1:02:fa:71:e2:
34:f9:49:72:93:f7:81:f0:2b:71:24:3a:21:50:bb:
b8:b4:a3:76:f1:dd:68:e8:5a:d5:d1:b6:35:12:b2:
47:68:00:4a:fe:11:61:c3:b7:22:8c:2e:c4:15:bb:
eb:d6:47:e9:75:81:0e:a6:72:93:83:af:fd:fb:09:
1f:ca:d7:a3:d1:d0:b4:29:00:ac:05:03:c2:0b:ab:
4c:de:18:d6:92:d5:fc:24:b6:f3:ed:23:18:53:34:
1f:13:a9:80:ab:71:e1:20:e8:37:01:01:72:7f:42:
72:ac:61:3a:1f:c6:bb:88:6f:24:a7:b4:ad:c7:58:
ea:c0:0f:45:20:92:33:c2:33:09:e3:96:4a:c0:a7:
16:d1:85:93:6e:f2:ad:52:ae:28:95:ab:37:5f:45:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:60:28:98:96:9D:27:F2:48:6A:99:D2:86:B8:D8:87:D6:B2:BF:EE
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:53:83:92:3e:84:13:c6:0c:ee:de:35:b3:74:d9:6c:cc:c6:
22:c0:87:df:aa:91:72:5a:af:9e:67:86:ad:57:3a:0b:21:0a:
a6:47:4f:c7:e7:b3:15:21:c3:de:02:b2:1d:fd:7a:c9:81:b6:
8b:d9:74:39:b8:44:11:4a:ef:a7:f1:bc:11:2f:d4:ed:30:62:
12:7f:59:06:60:af:3c:e9:b5:4f:cc:29:c1:af:d5:11:69:28:
99:44:bb:1c:b9:76:b1:3e:b8:e4:4f:d5:82:29:e3:32:67:1e:
f4:ef:4e:1d:02:79:77:83:e2:bf:ac:db:2d:47:1b:bd:4f:87:
a7:2b:bc:a1:29:0f:e1:fd:b1:e9:d5:9b:06:13:ef:17:5f:5e:
64:77:94:15:0e:e0:10:41:c5:0c:46:f5:76:1c:bd:83:b0:57:
86:dc:a0:8b:4c:5a:09:a3:a5:73:0c:79:80:3a:0b:a3:a6:43:
bd:31:33:96:9b:55:ba:93:f8:20:fc:36:2a:a9:14:5f:23:58:
70:1e:56:14:28:8b:59:6d:ce:8b:91:6f:bd:1f:55:cd:04:6a:
bf:52:54:1f:a5:af:09:76:2a:69:30:39:b1:5c:81:d7:41:5b:
9f:35:d5:52:99:78:fa:c0:92:4c:1c:85:02:08:a8:70:3a:dd:
e5:ed:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:55:55 2025 by rpki-client