Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: 6QWJCE/QI43KOqD0LD9Mscpzgl/3k+SkyDRD5Nes9ak=
Subject key identifier: CB:B1:AB:53:87:66:4C:8B:36:F2:DF:E8:8B:51:76:C8:22:D0:C6:80
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 0197B77CA14CE7929B6A987C4AA5BE508307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: NBf4SWO0BTTngeLP69beO+Qyshwgk1infmD1qoFsOkg=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a1:4c:e7:92:9b:6a:98:7c:4a:a5:be:50:83:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=cbb1ab5387664c8b36f2dfe88b5176c822d0c680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:13:e7:5c:fa:9b:64:45:5e:76:6f:fb:8e:
78:85:d5:77:a1:f2:86:1f:0f:bb:35:a2:27:ab:a8:
db:da:07:18:98:0d:bb:c7:e9:69:f2:97:74:89:2c:
9b:69:f0:a9:47:0e:2a:d4:63:c9:23:c1:43:8c:65:
65:f9:0f:3b:6c:72:06:a3:e0:5f:7c:87:a2:08:1e:
fe:26:92:ef:c0:04:78:d3:d6:70:2b:d2:2d:fd:f2:
07:4c:26:a3:29:db:6d:4b:4d:d5:b9:ec:db:f0:91:
e7:9b:50:68:46:ab:f4:82:7b:39:3d:05:f8:8b:5e:
f0:8f:4f:c4:3e:a6:f7:44:3d:c6:78:a6:49:9d:e8:
3c:55:ac:8f:7f:7a:b7:c3:8f:bd:de:9a:a2:41:75:
46:f1:82:25:f7:9a:a2:d0:8c:39:43:98:c7:bd:61:
26:79:a9:c2:79:b7:42:9f:26:f4:7c:3e:8e:52:ec:
51:9d:85:b4:2b:8a:43:86:ef:37:22:3e:45:5d:c6:
de:4a:2b:3a:26:fe:d4:63:c2:74:bb:74:2b:99:a5:
e0:61:6a:a9:bf:b6:ac:05:e0:c1:45:b2:76:8a:76:
61:61:5f:db:8b:d5:5d:b9:ff:d4:65:04:7a:14:6f:
bc:2a:9d:1b:fe:34:a8:7b:08:3a:99:a7:29:e2:b8:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B1:AB:53:87:66:4C:8B:36:F2:DF:E8:8B:51:76:C8:22:D0:C6:80
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:82:57:dc:e2:c7:ab:dd:29:97:ab:72:61:bf:80:7f:b9:d2:
3c:0f:06:be:98:9a:c9:5d:a9:b9:21:eb:64:6d:70:b5:43:b7:
c0:e5:8d:dc:06:9c:0b:1d:4c:e8:37:39:48:7e:9b:d7:9a:00:
47:9a:78:80:58:d6:6f:83:8e:51:86:61:5f:3e:f6:02:a7:53:
7b:ff:40:4f:ac:f3:d9:71:3a:e1:ae:8e:d3:77:59:e4:dc:b2:
a5:bc:17:00:bd:45:07:24:a6:a5:bf:5b:4f:48:0d:ad:e5:1e:
c9:df:0e:c2:69:ad:74:a9:57:1c:8d:84:3f:72:f5:de:67:d1:
0d:9c:76:59:fc:ec:6c:4d:ce:9d:e6:8f:45:51:e1:9b:b2:cf:
d8:61:0e:46:e6:da:39:bc:f7:b1:ea:90:cd:bf:00:68:92:0f:
f9:9a:cd:41:19:5a:de:fc:f3:db:2a:5e:7f:cb:5b:13:2a:fd:
06:64:53:79:a7:7a:c1:48:dd:47:bc:d3:38:b7:19:6f:02:91:
2c:69:3a:f8:f9:23:43:08:f1:44:c6:1c:dc:cb:8d:13:10:32:
0f:26:43:d1:4a:7f:5e:21:96:1a:93:ad:ab:a9:00:d5:ac:cc:
c5:10:17:cb:6e:7b:4b:c1:fe:30:45:02:68:bd:08:2d:6e:52:
82:f6:48:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:22 2025 by rpki-client