Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: Hmq0Wt02d3ajn3UaCbeHrLMdFv6SFdtDyfrkhrO2Xs0=
Subject key identifier: 4B:29:12:8A:29:AE:38:D5:54:1A:AF:6C:99:0A:F9:98:C9:19:4D:E2
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 019745C2519FB26EDAF8B4C81175719CA078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 0E67
Signing time: Fri 06 Jun 2025 15:00:52 +0000
Manifest this update: Fri 06 Jun 2025 15:00:52 +0000
Manifest next update: Sat 07 Jun 2025 15:00:52 +0000
Files and hashes: 1: 1xdt--r7pLEFi9mXxf_8plnoO9U.roa (hash: uBNn/aL6HR9ZcIyFxzznkQDCk3CxgIi9L2wMoXNB7qk=)
2: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: B3gQiDZqK1JSs57VYpglsl0b0QvTEv7v29/ihZ/YEJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:51:9f:b2:6e:da:f8:b4:c8:11:75:71:9c:a0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Jun 6 15:00:52 2025 GMT
Not After : Jun 7 15:00:52 2025 GMT
Subject: CN=4b29128a29ae38d5541aaf6c990af998c9194de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:b0:52:1a:d4:4b:f0:25:c9:1c:67:6c:07:
02:c0:2e:93:a3:a2:90:ed:77:f5:98:fc:ce:2f:82:
32:cf:1f:c0:1e:f6:3f:f4:50:32:be:ce:4f:1f:f0:
43:19:dd:11:b6:66:90:55:b9:21:c1:15:dc:f8:c8:
10:85:56:b9:a7:6a:b5:9f:31:2e:b3:93:4d:9d:8d:
0d:f6:1f:6f:ea:4b:7b:f8:01:2c:72:d1:f8:17:a5:
a7:a5:04:61:56:eb:a3:ae:59:70:36:b3:6d:e8:e9:
7f:7e:df:1d:01:72:c0:c8:10:89:55:ef:ad:ef:38:
ef:ee:15:bb:87:8e:6d:0a:25:73:ab:d9:4d:3c:c9:
90:90:e6:ee:bb:6d:cb:8a:ae:d9:9d:11:30:f2:31:
3d:8b:89:a1:ff:a0:6e:af:8f:64:e9:23:fc:6c:e5:
bc:07:d4:ff:3c:d0:2e:e7:fb:0b:3b:05:c7:23:52:
72:dd:a1:1a:ff:07:7b:41:ab:a9:40:57:03:08:45:
9e:5b:07:bb:68:f6:14:de:5c:b1:89:fa:b3:78:30:
5b:47:28:91:2a:98:59:e5:8b:fb:c3:78:23:5c:a9:
01:62:0c:55:b4:a2:ac:39:40:c5:9f:c0:6d:44:0e:
07:7b:e6:92:81:f5:13:57:0a:13:d8:aa:f9:dc:ce:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:29:12:8A:29:AE:38:D5:54:1A:AF:6C:99:0A:F9:98:C9:19:4D:E2
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2e:74:c6:ce:f4:ba:b8:6b:13:c1:a3:39:b4:1b:b6:89:83:
38:72:81:98:ea:4d:f2:ef:24:ca:c1:44:6f:3f:5e:f6:aa:f4:
c2:cd:76:8d:68:7c:cb:57:c8:ae:d4:ea:da:36:f3:29:94:af:
38:ff:3c:f4:e1:d5:2a:8f:da:cb:b4:ce:95:3e:72:00:0f:ea:
d0:84:3b:dc:b7:84:12:8f:8d:7b:57:a6:ac:ac:8a:b5:8e:07:
d8:1d:b7:f5:a7:2b:d0:fd:15:6c:0c:3c:3a:aa:06:93:a4:5d:
2e:75:a2:d1:f6:31:72:f0:bc:54:1a:6b:12:d3:ea:c4:a9:9b:
7b:1d:2b:42:7b:d3:8c:49:ec:6f:ad:1a:d6:f5:aa:59:3c:49:
84:6e:e3:9a:cb:6a:a4:3b:a2:51:eb:51:db:c3:0c:40:bd:e1:
42:39:29:95:05:30:ef:c0:e8:c9:13:52:a9:38:7c:d5:ce:75:
83:24:a9:e1:ad:be:e9:68:a4:b4:4f:67:43:26:7c:7e:a5:97:
d9:4c:63:dd:b1:cb:b4:37:93:b3:ee:fc:1f:48:05:fd:86:37:
ea:56:6a:a7:44:91:3f:4e:4d:3b:b8:bd:cf:2f:88:7f:7b:96:
8e:f5:20:7c:ef:bb:00:9d:c1:70:70:82:52:12:5d:57:46:fa:
1d:7f:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:19 2025 by rpki-client