Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
File: bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json)
Hash identifier: yTy4UroHP+85aRjzQCfgsPZ8hBmxc4+a8B0hocmhpfE=
Subject key identifier: 2F:86:F1:EE:08:E8:C6:3B:02:AB:BB:87:DF:6B:B1:1F:D0:66:3D:AF
Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647
Certificate serial: 0197B77CBA3FED0124B9C36000FC79C3F638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
Manifest number: 09D5
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: +lYRWNeEpStHTOG9xyGJBNQgQxFS0HJ4FH+Q5/uO7QU=)
2: okBQ3HYZQrL6ORKAHfJHyIzTOqU.roa (hash: 8hx35QaymOBGYmgY5QQuJWW8cF+INO74gqLHBnenUT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ba:3f:ed:01:24:b9:c3:60:00:fc:79:c3:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=2f86f1ee08e8c63b02abbb87df6bb11fd0663daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:c5:5c:0e:a8:6b:50:df:3a:4d:42:e5:df:
3b:7b:b4:ca:9f:9d:18:f8:6f:33:c6:16:3a:64:69:
1c:b0:cd:8c:b3:fb:3e:16:95:c7:19:2b:d4:a7:ab:
fa:2f:3a:93:07:ab:41:a2:00:e0:ad:ee:67:cd:e7:
66:fa:ea:dd:1a:71:16:ac:c3:57:10:d5:a0:6e:2c:
af:f9:fc:a1:05:e8:8b:06:9f:70:7d:5e:34:cc:e8:
72:7a:2b:93:f5:7c:e8:a4:f5:71:ec:e1:f9:24:96:
7a:99:be:f4:96:c4:13:43:4e:18:c8:da:4f:c1:b0:
a8:c3:d4:6c:46:15:95:7b:e4:70:83:d8:29:08:e1:
82:d7:0d:06:87:fc:e8:d5:11:af:26:42:c6:c5:8d:
d0:f2:77:88:01:8c:a1:df:25:6c:1c:96:3c:7a:a1:
c0:07:23:bd:09:35:fd:a4:53:d9:e8:0e:6a:56:28:
28:4c:d3:f6:11:db:90:d7:1d:de:2f:4c:3f:2b:f2:
32:44:10:89:e8:d8:c6:4b:80:3e:5d:87:60:30:b3:
99:d2:11:c9:12:2b:b4:8d:13:36:71:94:ae:18:37:
58:f9:27:76:69:3e:c8:7a:be:71:76:76:6a:ed:cb:
aa:74:de:58:b3:df:e2:62:7a:40:9a:2d:fa:f2:d4:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:86:F1:EE:08:E8:C6:3B:02:AB:BB:87:DF:6B:B1:1F:D0:66:3D:AF
X509v3 Authority Key Identifier:
keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:47:c1:93:a5:a4:b4:15:61:c6:e2:0b:16:8d:1f:f7:fd:20:
97:74:f2:33:b2:c5:3e:7c:28:1e:5d:2b:1b:63:d9:50:69:de:
4f:be:85:4c:47:31:00:dd:af:73:18:0c:17:20:53:92:c5:40:
6d:36:d3:b2:2e:1a:e3:76:c6:b6:2d:68:f9:f9:de:2f:25:36:
2f:20:20:a8:9f:48:71:40:a9:f2:4a:24:fd:fd:e8:e0:55:0b:
6a:6a:31:e4:ea:fb:cd:c9:43:0e:2c:52:77:a5:8c:29:e6:ab:
21:a1:b7:9f:5b:fb:c8:65:0f:8c:01:f6:3a:77:66:de:31:3d:
0e:29:63:7c:54:b8:5e:77:b1:18:28:9f:3d:ce:d8:ba:06:b3:
8e:89:a6:f0:eb:03:5b:0b:7b:f0:5f:3f:9b:64:96:54:02:ce:
ab:f1:3d:9f:07:c2:f4:b6:14:64:13:fd:28:97:8a:91:05:74:
69:7e:38:0f:7d:6d:e3:38:df:28:15:c4:76:48:70:82:5e:f7:
27:d6:33:f2:31:17:41:e4:8f:e4:94:e3:16:e0:23:04:4c:2a:
94:b2:d8:07:e8:07:9d:f7:55:fa:ec:c3:99:a2:53:3c:f5:7e:
e1:cf:94:a9:c4:28:82:96:dc:b5:41:a7:b8:e2:94:25:9d:50:
6b:dc:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:46 2025 by rpki-client