Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File: 1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier: 7Bv8GbSxui+JUFL1klwoXEDlMHsayg8iebaqu8VDL8o=
Subject key identifier: C9:A8:68:23:E3:67:C9:DB:C9:13:44:49:D9:B8:F2:3E:64:11:21:33
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer: /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial: 0197D0294DF3F4EB2B6C1131A30572258EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number: 04EA
Signing time: Thu 03 Jul 2025 12:00:56 +0000
Manifest this update: Thu 03 Jul 2025 12:00:56 +0000
Manifest next update: Fri 04 Jul 2025 12:00:56 +0000
Files and hashes: 1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: IN+GLT9SHD+twBye21DNGkW2cCSGS0bqzIgl87of270=)
2: iRBbWvohEYJflS9OCEUVIoQSWfY.roa (hash: zk7p1QlOj9CX+QAjlGJs9mmfWeFhKlip2Q65HI1v4ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:29:4d:f3:f4:eb:2b:6c:11:31:a3:05:72:25:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Validity
Not Before: Jul 3 12:00:56 2025 GMT
Not After : Jul 4 12:00:56 2025 GMT
Subject: CN=c9a86823e367c9dbc9134449d9b8f23e64112133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:33:8a:60:6c:b4:f7:7b:9c:5e:e1:45:f1:
b7:45:02:ab:48:af:3d:2a:2c:c0:93:25:c2:ed:e4:
eb:5c:36:ad:3d:97:7b:ab:0b:d5:c0:a7:cc:a3:bb:
73:86:56:67:ce:ff:6b:80:4f:c1:03:7c:a1:35:b3:
de:77:cd:88:35:01:55:a0:92:44:d8:74:16:2e:00:
8b:98:2b:5f:5d:42:f0:54:03:3d:70:ad:f4:58:0d:
c0:e0:f7:48:dd:24:1b:9a:40:58:b0:f0:a7:b9:1d:
ad:96:02:56:08:06:33:03:ee:6e:74:8a:99:1a:8a:
1d:1f:41:06:31:31:aa:8f:1b:e0:06:91:f6:e8:17:
3b:6e:5e:5a:8f:0e:47:d1:f0:98:4b:eb:c6:05:33:
e3:df:1f:f8:3f:b4:df:fb:3e:13:52:43:73:c7:1b:
b4:f9:99:91:c5:f6:d7:33:09:fe:b6:04:af:da:2f:
a9:dd:22:a4:dd:eb:41:2e:25:7e:bc:1b:ab:fc:80:
b1:30:55:a4:25:1d:6b:d6:52:50:28:e0:dd:9d:82:
02:d1:b0:0b:c1:3b:30:be:03:7e:f3:e4:5f:18:09:
1d:fa:c7:f4:50:a6:1c:06:fa:e0:0e:d9:ec:7e:a2:
89:b0:e0:98:3c:70:db:4d:1e:5b:0b:37:1c:e6:f4:
0e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A8:68:23:E3:67:C9:DB:C9:13:44:49:D9:B8:F2:3E:64:11:21:33
X509v3 Authority Key Identifier:
keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9d:09:be:93:b5:b1:4e:54:11:27:2c:bf:41:e9:27:d8:67:
86:89:33:42:7d:db:f5:24:ae:5d:38:e5:88:f3:cd:f9:ba:22:
ee:40:5d:d4:a7:ae:bc:a1:bd:3e:1f:c3:77:32:b2:25:b2:ab:
cf:29:a4:65:42:19:6c:c3:9a:1b:b9:5d:6a:94:89:15:9c:36:
74:5b:73:82:87:17:88:8d:1f:19:ee:ad:fb:ca:63:22:e8:29:
39:7b:d1:ec:83:a3:71:5b:60:af:5d:3c:dd:8f:2a:f3:b4:94:
c1:15:53:a0:4e:36:e5:b2:5b:eb:d5:d4:a6:c3:e7:94:55:e9:
f7:8c:17:0a:54:96:d1:e0:ff:91:22:4e:54:46:c8:b1:f6:ca:
c8:38:34:7e:8a:91:05:67:e4:a1:c0:4b:b0:90:ad:b7:66:c9:
8d:51:ce:aa:bc:f6:d1:ce:f7:71:6b:09:e3:43:98:91:35:44:
49:b2:38:77:f5:7b:37:d7:1d:8b:5c:e0:a9:54:a0:30:af:00:
50:da:b1:4d:00:07:7f:a7:9c:86:8e:83:ea:ff:25:f7:8e:98:
72:79:fe:cf:bd:35:cf:08:1d:0e:f5:e9:7d:62:d2:b1:2c:48:
79:86:32:2e:15:17:47:2e:63:4c:cd:ee:cc:de:1b:11:52:8f:
34:c1:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:30:46 2025 by rpki-client