Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: qyCvLX1aI2LnGPeFII8w76r8HKNqS6FR4pajYAaYsaA=
Subject key identifier: BA:AA:E1:DF:FE:1A:52:8C:D2:A8:BB:FC:5D:61:D9:ED:C0:02:70:7A
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 01976026E49DAC352716926DE3FA80BA05E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 0579
Signing time: Wed 11 Jun 2025 18:00:50 +0000
Manifest this update: Wed 11 Jun 2025 18:00:50 +0000
Manifest next update: Thu 12 Jun 2025 18:00:50 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: pRAy/i3qHtrc2Kj38YioQKdBXqjQIGdk6YxVhvqY/c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:e4:9d:ac:35:27:16:92:6d:e3:fa:80:ba:05:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jun 11 18:00:50 2025 GMT
Not After : Jun 12 18:00:50 2025 GMT
Subject: CN=baaae1dffe1a528cd2a8bbfc5d61d9edc002707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:f6:f9:31:c5:f6:ba:f3:5b:49:78:0b:cd:
62:2a:22:b7:a7:91:d3:72:57:bf:5a:07:5c:b9:a3:
6b:b1:5e:d3:2e:49:e1:9d:79:f0:40:ce:61:f7:ed:
33:03:a6:b2:f0:cd:09:19:95:9c:04:a2:ce:2f:10:
75:cd:d9:f3:d5:12:de:4e:45:fa:6c:54:9c:b2:f8:
26:18:d3:b7:fb:85:89:6d:e8:1b:7a:68:9e:05:41:
7a:24:cb:f8:6d:73:76:49:0e:74:a0:68:0a:8d:8f:
d2:d8:72:09:59:6b:01:dc:d9:1e:f0:ab:cb:b0:69:
4b:41:16:54:03:46:59:ce:c4:4b:59:fa:e3:c3:71:
59:09:43:ee:83:13:6b:f0:f6:1a:fe:eb:58:6a:f7:
40:ce:c0:6f:15:18:01:4f:e7:55:ff:2c:15:0e:8c:
a3:f4:67:79:1a:78:25:45:f5:76:37:b0:d1:86:98:
e0:df:e4:11:9a:02:4b:16:3f:66:d1:e3:04:70:f6:
dc:3b:47:c2:77:48:c6:ff:95:b8:97:cd:81:d9:7a:
4f:31:11:35:bb:fe:fe:02:9e:e2:f5:6e:78:8f:30:
c5:b4:b3:07:aa:39:fa:26:a1:ce:4f:81:a6:04:50:
56:11:a8:59:1c:f0:8c:fd:45:1a:98:16:43:e5:f9:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:E1:DF:FE:1A:52:8C:D2:A8:BB:FC:5D:61:D9:ED:C0:02:70:7A
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5f:dc:6b:f5:6c:4c:59:87:c4:35:4f:06:13:59:43:02:e4:
c7:88:d0:63:bb:f3:a3:aa:24:44:fd:77:21:a4:83:ca:0c:12:
59:3d:c3:45:73:2f:35:b5:df:c6:69:99:87:a2:94:9b:fb:ed:
45:b0:e9:05:7e:31:c4:5c:1a:c0:4b:52:3e:c8:5c:26:c5:91:
8f:1d:50:0a:03:97:21:4b:2e:48:1d:c1:34:c9:73:13:b3:1e:
b7:28:84:8f:19:48:47:b7:07:0c:dc:ff:2f:c6:1c:69:0f:c4:
e1:2a:eb:00:8e:bf:16:dc:db:02:7e:04:00:93:5c:a9:4e:a2:
5b:08:1d:92:71:c2:9b:fc:a2:8f:b5:d3:82:b9:68:c6:99:c0:
47:85:0f:fd:f1:13:27:03:57:75:e0:7c:31:5c:1d:fd:bc:ec:
4e:70:63:18:b9:d0:2d:e2:ca:a0:f5:d0:e4:fa:ad:b0:1e:8d:
20:4a:17:d1:aa:8d:89:d5:3c:58:e7:f8:84:62:f0:b4:75:39:
d8:29:dd:4d:88:85:9c:89:4b:39:87:ae:24:94:ba:53:33:d3:
46:ba:77:d5:69:d0:cf:ec:0f:b5:68:00:3d:24:d7:a1:c5:68:
55:a1:55:b0:94:b5:74:b6:76:19:1d:51:c8:0f:a2:a7:23:41:
80:88:2b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgJuSdrDUnFpJt4/qAugXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTc1YzA4MzUyNzE4MThiYmQzOGQ2ZGVkN2Y5NWFiYmM1
NTc0NGYwHhcNMjUwNjExMTgwMDUwWhcNMjUwNjEyMTgwMDUwWjAzMTEwLwYDVQQD
EyhiYWFhZTFkZmZlMWE1MjhjZDJhOGJiZmM1ZDYxZDllZGMwMDI3MDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qf2+THF9rrzW0l4C81iKiK3p5HT
cle/WgdcuaNrsV7TLknhnXnwQM5h9+0zA6ay8M0JGZWcBKLOLxB1zdnz1RLeTkX6
bFScsvgmGNO3+4WJbegbemieBUF6JMv4bXN2SQ50oGgKjY/S2HIJWWsB3Nke8KvL
sGlLQRZUA0ZZzsRLWfrjw3FZCUPugxNr8PYa/utYavdAzsBvFRgBT+dV/ywVDoyj
9Gd5GnglRfV2N7DRhpjg3+QRmgJLFj9m0eMEcPbcO0fCd0jG/5W4l82B2XpPMRE1
u/7+Ap7i9W54jzDFtLMHqjn6JqHOT4GmBFBWEahZHPCM/UUamBZD5fl7YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqq4d/+GlKM0qi7/F1h2e3AAnB6MB8GA1UdIwQY
MBaAFHEXXAg1JxgYu9ONbe1/lau8VXRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYt
MTk0MmUwODlmMGIwLzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYtMTk0MmUwODlmMGIw
LzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl/ca/Vs
TFmHxDVPBhNZQwLkx4jQY7vzo6okRP13IaSDygwSWT3DRXMvNbXfxmmZh6KUm/vt
RbDpBX4xxFwawEtSPshcJsWRjx1QCgOXIUsuSB3BNMlzE7MetyiEjxlIR7cHDNz/
L8YcaQ/E4SrrAI6/FtzbAn4EAJNcqU6iWwgdknHCm/yij7XTgrloxpnAR4UP/fET
JwNXdeB8MVwd/bzsTnBjGLnQLeLKoPXQ5PqtsB6NIEoX0aqNidU8WOf4hGLwtHU5
2CndTYiFnIlLOYeuJJS6UzPTRrp31WnQz+wPtWgAPSTXocVoVaFVsJS1dLZ2GR1R
yA+ipyNBgIgrnw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 03:40:18 2025 by rpki-client