Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: n5IV0F+HQKkAEsO/oBYzKApqEAqofNqpwjNeLfr7auM=
Subject key identifier: EA:B5:10:AB:6A:C8:4B:D8:AB:BA:27:B5:49:CD:13:C5:2B:85:0B:99
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 0197B70E78B9F07644DD374BC5E60CB96891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: A2
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: OGdOX6abbiOiGHCmxbGmztztfjOMco8yrWrejUHIryE=)
2: 2w_iKrPjyXvCCJbs0F7ZOxiGDMg.roa (hash: nKdejJ8/KPh01N5ujViM/1f8ednF50B5j98TO8WaB8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:78:b9:f0:76:44:dd:37:4b:c5:e6:0c:b9:68:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=eab510ab6ac84bd8abba27b549cd13c52b850b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:e4:23:f6:b9:1d:d1:0b:87:35:48:19:8f:
e6:95:9c:8b:3f:0d:e6:d9:f1:0b:b5:d0:51:e2:03:
a3:1e:b7:fc:ff:76:62:8c:91:bd:cf:68:c8:92:71:
69:60:48:cc:eb:a1:1d:00:fe:1e:1f:b5:03:fd:72:
6a:55:f6:d1:f8:62:c7:d3:fc:84:30:3f:b0:8d:e5:
d9:45:41:38:1d:d7:4f:61:bc:a4:b9:b5:d1:75:70:
9f:1b:90:2f:cf:d4:42:b3:08:de:88:56:76:f3:15:
cd:66:3b:a8:60:da:ac:d5:59:b4:93:10:7a:37:c4:
b6:b0:ed:22:55:ea:d6:38:38:5e:37:54:c5:b0:e0:
9b:e6:94:bf:94:1d:f7:e8:fe:bd:19:d4:ad:77:fe:
44:1e:ef:0c:36:b7:fd:99:d4:95:c5:7d:8c:1c:62:
f8:af:3e:44:5d:51:28:42:e7:90:1c:8e:9f:2c:1b:
3e:d0:17:3f:a9:7d:1e:3b:06:09:ec:5b:99:1a:0c:
99:7c:64:7a:72:51:5a:62:7f:6e:8f:80:7a:ac:5c:
11:56:69:9c:e0:d7:e2:05:dc:c1:2a:fc:39:58:2d:
b8:d8:af:04:13:ac:e6:7a:dc:25:1f:88:b0:b4:f5:
3a:60:50:c3:52:ac:bd:0b:56:b8:c9:e6:14:31:1b:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:10:AB:6A:C8:4B:D8:AB:BA:27:B5:49:CD:13:C5:2B:85:0B:99
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:85:59:c7:e6:50:f9:68:df:a3:6c:94:fa:79:bc:65:06:
dc:9a:8f:88:9f:e9:4b:03:6f:19:6d:46:ed:3c:a6:ab:e7:87:
47:d9:43:81:06:b0:a4:d7:6e:93:17:19:30:47:9b:25:3e:bf:
c9:ea:cb:10:d4:ef:4b:87:a1:81:15:cf:ff:a6:fc:73:7f:71:
b8:ed:8b:5d:52:fb:09:02:e1:fd:d5:fa:97:77:9c:b8:ef:ed:
66:84:df:13:78:b5:b7:31:5c:89:1f:e5:18:87:5b:b9:b8:6d:
bf:ad:be:d6:98:1d:ff:f9:62:5b:df:b3:7a:e0:d7:0b:d2:24:
df:3e:0f:fa:ca:96:9a:12:fe:3a:81:04:f2:da:dd:1d:73:d7:
35:84:f2:1d:b1:94:80:4e:7e:1e:ef:e1:03:d3:fd:cd:2d:69:
5a:43:b2:3d:9f:ad:4c:e2:7f:4a:85:7f:7c:03:42:d9:f4:16:
42:5a:28:e9:cb:70:ce:f2:21:72:ca:b7:d0:c2:f4:ba:6d:ce:
e5:33:ef:7a:b0:74:82:31:1d:fa:b5:ed:bd:5e:f0:24:37:d8:
1a:5e:c6:8b:82:15:57:86:3f:80:1b:a0:69:86:b9:a0:fa:b1:
fb:00:a1:65:53:31:32:2d:1f:9d:7b:2f:3a:83:8b:60:19:d7:
6d:10:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:22:49 2025 by rpki-client