Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: 313UF2aAR1t7jVS+SspaOrl49hgi8y/2hKdIEjyF/xY=
Subject key identifier: 8D:26:CA:F9:07:CF:F4:7F:1D:C3:AE:71:D9:52:FB:A9:09:91:A9:B2
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 0197C5016B95E4A15AA949664FF245F6484F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 08:01:33 +0000
Manifest this update: Tue 01 Jul 2025 08:01:33 +0000
Manifest next update: Wed 02 Jul 2025 08:01:33 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: AI71S2S9AC03Ipg8H/oMRFz6dDSl9rv7humdQJp2a3Y=)
2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:6b:95:e4:a1:5a:a9:49:66:4f:f2:45:f6:48:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Jul 1 08:01:33 2025 GMT
Not After : Jul 2 08:01:33 2025 GMT
Subject: CN=8d26caf907cff47f1dc3ae71d952fba90991a9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:da:8e:dd:f7:04:ff:ad:f8:5b:2e:f9:db:
cb:57:5b:65:49:a2:5e:b4:6a:d6:5d:9b:5d:f2:a7:
44:03:2b:c1:b3:bd:a2:05:6c:cf:1f:d7:41:7f:35:
b2:7c:ec:ae:8e:de:2e:49:a6:ad:37:9e:ac:ce:5b:
4f:fc:04:95:29:cc:ae:54:62:e9:54:20:e7:56:14:
05:fa:f2:6a:60:0f:b5:58:92:b1:11:be:1d:90:5c:
3e:c0:63:8a:ef:81:30:88:2f:e3:0d:7c:62:75:50:
1f:78:e3:dd:f9:05:79:ca:e0:9a:d2:4d:ad:ba:ad:
6e:f6:f2:27:39:bc:be:c7:08:e5:03:42:f2:fa:c2:
6d:b8:f0:97:f1:a3:be:ae:62:44:e1:ad:83:fe:2e:
66:64:f2:7e:a6:66:3c:97:71:9c:52:b2:d3:1f:ec:
0d:6f:0b:29:4d:57:81:cf:a4:92:c3:dc:18:e8:6d:
25:ae:34:7b:4f:9e:35:59:a5:ae:88:cf:73:df:53:
aa:71:e4:70:fe:27:be:17:c7:64:9d:70:71:bc:b7:
6b:90:fc:d6:a8:74:f0:7b:a8:49:b4:74:f6:dd:9d:
8c:9f:31:78:36:f5:c2:3d:41:a3:ea:9d:c0:19:68:
cf:7b:fe:14:f0:df:2f:77:37:69:97:f8:d2:87:de:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:26:CA:F9:07:CF:F4:7F:1D:C3:AE:71:D9:52:FB:A9:09:91:A9:B2
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ea:24:fd:5f:65:65:17:65:c6:bc:97:0e:f4:60:5b:83:25:
41:3d:6f:36:a2:90:7d:fa:c6:0d:a8:42:7c:75:fa:d7:ab:57:
b1:30:b9:25:e4:b8:2a:d3:69:28:f4:ed:ac:b5:2a:64:ba:ed:
ed:f4:e4:81:25:8a:ef:fb:3e:80:28:1a:1f:50:85:c2:2d:06:
78:2f:c9:69:7e:66:98:76:4c:53:5c:3f:56:84:d0:b9:be:2c:
0d:32:3d:10:b2:12:e4:f1:94:b0:0b:2a:29:05:ae:37:1b:87:
cc:79:b1:cc:4c:e8:f8:42:81:c7:7d:d4:e8:1c:75:0b:8c:8e:
c9:59:a0:61:fc:d5:9a:55:1c:1b:1a:d5:aa:0f:37:7d:78:67:
06:b4:bf:e9:8c:78:3f:b3:3b:63:d5:67:bc:9f:0c:20:a4:05:
48:32:32:da:af:51:c4:06:df:a7:e6:71:8c:8a:2f:55:63:1b:
cc:ea:de:e5:5b:e5:f0:f7:73:5d:79:1b:5e:0b:f8:10:92:bb:
d4:ba:27:11:b8:36:bb:75:7a:9d:38:c1:71:69:e6:6c:96:29:
8b:ed:74:14:2c:87:6f:bd:64:86:04:6c:89:c9:43:cf:52:53:
a4:50:76:39:86:76:22:ec:ff:a3:42:b7:2c:93:5c:f2:ff:db:
93:9b:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:42:25 2025 by rpki-client