Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: Y1fHf+lgN9Wr6x8l9Z3zX6yBSh8ha8GZvpdqs9jHVwA=
Subject key identifier: 69:47:48:4D:63:C2:24:D7:5D:EF:62:8D:A4:88:AF:47:58:0E:CA:90
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 0197B88EFC33EB8DB2D36AF9D46F4C935114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 1255
Signing time: Sat 28 Jun 2025 22:01:07 +0000
Manifest this update: Sat 28 Jun 2025 22:01:07 +0000
Manifest next update: Sun 29 Jun 2025 22:01:07 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: 6qDay640GhP66cCA5idE4A8Su7V2C7AFVdEgjCqrHyU=)
2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:fc:33:eb:8d:b2:d3:6a:f9:d4:6f:4c:93:51:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Jun 28 22:01:07 2025 GMT
Not After : Jun 29 22:01:07 2025 GMT
Subject: CN=6947484d63c224d75def628da488af47580eca90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:b0:f9:9f:77:1d:57:d3:2e:59:d3:9e:7f:
64:74:a2:fb:02:0b:f5:0a:a2:c5:1f:b7:4d:aa:61:
6e:62:4e:ea:c5:48:83:a7:ac:33:fc:1d:b0:ea:a0:
07:b6:ff:77:ae:0d:76:6d:f8:fb:01:2b:ef:62:f7:
14:40:b7:c1:69:cf:ba:ec:3d:ea:95:67:0b:a2:85:
01:97:d8:e2:05:6f:5f:26:e3:b4:01:22:bc:50:a0:
9f:38:91:21:a0:4f:a4:b6:08:6b:18:a5:df:4a:36:
c5:28:2b:1b:9a:1c:64:68:91:b6:6b:22:58:29:cc:
03:aa:53:d0:aa:9f:bb:26:58:5d:6c:d4:cb:df:48:
38:8f:85:9d:bb:8e:35:51:bf:1c:28:13:62:8f:53:
35:4d:fd:1f:e9:25:98:81:e1:bd:b8:10:06:f5:e0:
05:4f:1b:8b:e5:9c:13:d4:c1:40:9e:ad:61:88:0f:
3f:90:7f:a9:96:87:8d:d2:7a:c3:bc:a9:cd:49:02:
8c:42:4f:f7:40:d0:3a:c8:f2:68:e5:4f:79:2e:dd:
1d:97:39:11:35:ec:98:a8:3c:eb:82:a9:50:36:ed:
43:01:d4:98:ca:84:5d:0a:3e:12:dd:08:3f:e5:1c:
62:0c:3e:27:9a:3a:85:d8:16:18:c8:e9:bb:99:94:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:47:48:4D:63:C2:24:D7:5D:EF:62:8D:A4:88:AF:47:58:0E:CA:90
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:db:c6:e3:df:16:89:fa:ee:e2:c2:05:ff:94:35:0c:b3:e6:
e4:31:c9:8b:60:9e:fe:f6:de:3c:62:5c:4a:17:be:41:01:85:
48:a9:25:00:8e:ca:bb:0d:80:4f:f0:11:1a:db:c9:cf:7c:67:
07:c7:6c:d6:1a:e0:7a:a8:ad:d5:ec:2f:9f:dd:18:9c:a9:a7:
65:9c:7d:73:24:fb:b5:05:e6:4e:da:ea:b4:c2:00:39:4b:47:
9e:e1:9c:f7:b9:06:29:86:67:41:13:df:85:b7:69:b6:e4:c7:
82:c4:ec:cd:79:2a:ce:63:0f:1e:05:e5:21:19:6d:10:74:ce:
4c:b3:70:db:3c:b8:9e:5e:8e:4b:7f:c4:d0:28:72:f3:75:34:
6a:39:4a:91:f5:d5:a7:22:4e:57:6d:25:96:71:2b:5e:31:8c:
7b:39:fc:c9:e2:ce:0f:b0:2d:15:00:dc:cf:8b:e0:ba:99:e8:
11:18:49:d9:0a:8c:a6:f9:c6:e3:27:1e:5b:b6:8d:50:43:c8:
22:f8:10:72:49:1d:ad:a0:24:91:b9:c0:5e:49:18:35:87:47:
46:fc:8a:51:a6:5c:29:c5:69:ee:82:5d:f1:fa:9e:71:f8:63:
03:61:f4:b7:67:30:08:0f:0f:2d:5c:c4:bf:da:bc:10:e0:12:
f3:61:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:53 2025 by rpki-client