Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: mD6nBcRxPKflENec5KuRmyD6h10gdq0M5O9w80N6R/w=
Subject key identifier: 1B:70:CA:41:35:84:15:B0:D3:75:B5:8D:87:E9:46:2D:B8:1F:6C:59
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 0197BB8FEB5018CAC0FBC1E3E8C82AC4C428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 1547
Signing time: Sun 29 Jun 2025 12:01:00 +0000
Manifest this update: Sun 29 Jun 2025 12:01:00 +0000
Manifest next update: Mon 30 Jun 2025 12:01:00 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: LbY0nvXBnxZFrq/74Z3macS4MNujyGthK0Dev3roVLk=)
2: vvNRTPRqU8Pnch_p0B0gqgkil_Q.roa (hash: nLSnGecWyvHzo3G0jRopUHVVK/4X1Sw9XUMyVphgWSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:8f:eb:50:18:ca:c0:fb:c1:e3:e8:c8:2a:c4:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Jun 29 12:01:00 2025 GMT
Not After : Jun 30 12:01:00 2025 GMT
Subject: CN=1b70ca41358415b0d375b58d87e9462db81f6c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:f4:39:36:03:92:04:cf:60:52:1f:de:98:
b9:c0:f4:0d:a0:ae:dc:59:b7:f6:53:92:5c:5a:ba:
77:54:91:0d:24:b9:90:54:64:1b:a8:8d:7d:c8:1b:
61:10:b7:13:42:c0:15:7c:9e:8e:20:23:45:14:6c:
5c:5d:d5:19:1d:e8:35:95:d5:67:65:f2:23:5c:0a:
80:8c:14:fb:fc:98:99:02:78:b4:c1:a5:72:fd:0a:
86:78:62:28:14:0f:cf:fc:05:15:8c:f1:88:df:26:
8a:1f:20:64:24:fe:3e:be:36:44:a9:a9:86:d5:72:
b2:df:23:7f:d0:45:fc:8c:d1:a6:bc:01:96:d4:a4:
67:27:5c:ba:7f:fa:79:d1:91:cd:18:ae:24:00:82:
79:fe:e4:86:d0:00:84:3f:86:51:67:25:fe:ae:29:
fd:52:49:22:94:41:45:bd:23:45:28:8e:b3:34:30:
22:87:e5:71:32:4c:17:a7:c6:a2:c4:8e:96:14:3d:
cd:dc:79:50:95:97:4b:34:7c:18:77:25:dc:d7:91:
55:d1:8b:ae:45:e4:f6:f7:14:6a:0a:10:ce:60:69:
e3:61:d7:5b:fc:94:a8:0c:cd:9c:08:6a:bd:09:af:
9e:ac:14:fb:fe:4b:74:f2:d8:f2:5a:b8:6e:89:b6:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:70:CA:41:35:84:15:B0:D3:75:B5:8D:87:E9:46:2D:B8:1F:6C:59
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:22:54:47:40:fc:9a:c2:c9:87:7f:0a:55:68:c8:c7:11:0a:
c0:57:54:f4:ab:d9:a1:3c:1c:02:ea:e1:cd:b8:a6:cc:f3:7a:
51:41:1e:82:e2:2a:e0:92:47:20:e2:82:c4:e9:1b:58:15:09:
d1:4f:46:fc:cf:e3:1e:88:73:ce:d4:1a:fa:b6:1a:82:d7:1f:
59:b0:f2:37:e0:df:00:43:b2:b0:21:92:a0:a0:6d:ee:ab:f2:
39:72:8a:5d:0d:9a:0e:df:50:a5:d1:1c:f7:ac:26:36:3b:22:
4f:1e:4e:ab:5a:23:07:34:bf:d6:35:62:15:24:59:7c:7a:03:
2e:5d:55:5e:93:97:1c:a2:3d:20:c6:22:c1:71:74:a7:e3:61:
b6:e8:b8:40:a4:54:0a:44:07:0c:7e:97:6f:69:1a:ec:d4:9f:
4f:9e:0d:cf:dc:c9:1a:88:8d:9f:60:5b:0a:ab:0b:8e:97:fb:
09:97:6e:65:2e:e8:dc:a7:77:cf:dd:14:2f:d8:33:4f:1b:8e:
e6:94:8d:9c:65:e5:ac:5a:b6:29:25:1b:81:47:06:94:1e:a8:
f9:5c:2a:cc:de:ac:9e:e5:04:76:01:da:2b:7a:84:0e:39:a3:
f1:ae:c3:98:64:22:b9:df:ad:1b:57:46:19:ed:4a:72:98:56:
5e:78:9d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:51 2025 by rpki-client