Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: EVT2gT+rn5MIxAXINGlGyBTLqvl3X6U20QR4zv0vD5s=
Subject key identifier: 96:E5:37:BB:7C:B4:F1:EB:AC:AC:44:22:74:FF:8F:AA:9C:71:C2:CA
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 019748C2DE547848A606BFE5F29D3CD7FCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0C4E
Signing time: Sat 07 Jun 2025 05:00:19 +0000
Manifest this update: Sat 07 Jun 2025 05:00:19 +0000
Manifest next update: Sun 08 Jun 2025 05:00:19 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: MdGP7DTc/yTp9Ts5LesRQeSBPgPVZpcFcWJkE+1ims8=)
2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:de:54:78:48:a6:06:bf:e5:f2:9d:3c:d7:fc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Jun 7 05:00:19 2025 GMT
Not After : Jun 8 05:00:19 2025 GMT
Subject: CN=96e537bb7cb4f1ebacac442274ff8faa9c71c2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:5d:5f:56:98:4f:c1:df:de:ab:bb:d3:06:
c8:fb:ea:1f:fa:31:1e:cd:e3:76:b5:33:c7:ac:83:
57:c7:1b:8e:67:e2:e2:1a:91:dd:4b:46:3c:32:cd:
f4:6f:30:05:80:a2:70:63:4b:3f:c8:bc:ec:7e:d3:
56:6b:dd:95:eb:ff:3c:cc:2d:a4:b7:f5:84:e9:6a:
23:0b:66:6d:c3:ab:0a:fb:62:24:37:2b:d5:b7:6f:
d0:2e:d6:9f:a0:55:f3:85:e5:6b:d2:32:03:12:b0:
a3:d7:72:3d:7e:88:19:7f:7e:f7:d5:42:11:02:b9:
99:9b:c4:b0:57:9c:4c:73:c5:7d:d7:05:71:f4:12:
13:e6:8a:78:2b:c2:58:30:de:ad:32:40:71:e5:9d:
84:de:50:0d:aa:dc:cb:1f:3f:c6:8a:98:c4:82:be:
70:ce:8f:fc:0c:0d:42:29:55:a2:3f:0c:86:be:ea:
9c:cc:33:0b:e4:5c:a2:1f:1b:7f:fb:ed:b9:20:b7:
2f:c9:07:8a:20:8e:9b:b5:b3:26:dc:11:8c:b0:26:
25:c8:f9:5a:47:8b:7c:88:6c:49:f4:01:8a:a3:d3:
b5:b6:31:dd:d8:22:cf:da:8a:a0:d9:c6:3c:c7:6e:
d6:32:b3:c7:c7:36:a4:5e:6c:a9:44:30:df:c6:f4:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E5:37:BB:7C:B4:F1:EB:AC:AC:44:22:74:FF:8F:AA:9C:71:C2:CA
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cf:4a:4c:77:0f:64:8f:2f:4d:f6:6d:c8:f8:48:41:7a:cb:
54:54:05:ba:d0:33:47:98:28:06:06:2f:85:48:0a:99:9f:e6:
5a:a7:c9:7c:a4:c1:8f:68:7c:23:29:46:19:58:83:52:7c:75:
c2:10:ec:24:5d:0a:a6:88:e5:a1:20:98:cf:3d:00:a4:e2:f9:
f7:1b:31:7f:be:e6:02:af:ae:36:26:5d:b2:95:34:46:77:d9:
ca:ad:ba:a6:f9:c7:67:44:79:97:68:76:bb:7f:a8:3f:61:dd:
d0:f9:00:69:b0:d3:76:81:87:ea:20:47:53:a2:2e:30:09:00:
6a:b5:c7:24:a8:99:47:87:f9:10:1a:84:27:fa:e5:cd:25:e7:
ac:b7:15:4e:fc:86:45:e4:79:92:ea:f2:ff:71:80:eb:2f:e1:
06:1d:4d:5a:98:c3:3b:19:49:cd:bc:d8:d2:1b:56:97:6a:63:
11:d4:fc:f9:7a:b2:e5:76:73:6a:3f:c2:cd:5c:e2:07:c6:1c:
32:9a:40:93:72:ed:fd:78:e7:c2:55:83:25:63:cb:c0:ed:ba:
f9:28:92:c5:b0:49:a4:51:c4:8e:da:9d:fa:34:46:6c:63:46:
b9:c6:f7:b1:f0:4a:0f:63:43:35:4b:2b:ee:b2:29:4b:09:cb:
70:bd:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:33:12 2025 by rpki-client