Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: wVeNv9BPk8ku5Mvrd4CHN6ugIdtz5ajh606O9w8ykUE=
Subject key identifier: 68:02:9E:05:F4:BF:25:14:8F:B1:8A:9D:E5:D2:8B:71:AC:BE:F6:5B
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 0197B70ECC21A7AC92B55505EAA0A5CAA90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 0548
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: 0Z-rzxBLOWIfSfgExnNziFjknFI.roa (hash: WIPxFrkjwE/aiN3DpBiUfgIiKOHJkBOTh5tGpO+hM/Q=)
2: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: B26WWebmtD2cxg8dyw5At9fsgZMdRsADqzIziulXB9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cc:21:a7:ac:92:b5:55:05:ea:a0:a5:ca:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=68029e05f4bf25148fb18a9de5d28b71acbef65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:64:d7:3f:42:d1:ef:1b:c4:8d:81:8a:c9:
79:ff:e7:75:48:2d:ec:7e:02:d9:40:6b:44:a6:db:
7c:a8:40:04:23:4f:ea:f6:d1:d4:d9:6e:76:ac:8c:
b0:e2:cd:68:88:0c:3a:c9:ae:d2:16:75:6a:c2:c7:
d5:76:9c:80:b1:f6:37:70:2c:ed:45:f3:9b:f9:dc:
07:55:b1:e9:46:e9:3e:13:f2:a3:30:c2:35:fb:23:
6b:6e:fd:55:ba:be:63:33:db:a5:b1:b2:20:06:b1:
e4:f2:41:a2:ab:bc:53:df:5f:9e:7d:8c:36:88:96:
5f:f6:44:16:25:89:b6:db:7b:e5:51:32:f9:f2:45:
53:a4:39:52:29:f5:9c:cb:a6:a8:42:0c:60:dc:ff:
47:c3:3b:0e:98:e1:79:16:1b:be:1e:54:ef:9e:40:
41:b5:72:2f:e6:ea:0b:e9:cc:ce:23:7c:ef:7e:88:
dd:a3:6a:aa:dd:f8:d2:54:73:81:09:7b:e0:23:8f:
37:da:30:b3:30:9b:01:0e:ec:db:58:0b:87:2e:9c:
4a:21:56:af:71:74:c1:65:63:29:dc:8f:0a:c3:3a:
1b:64:e1:e6:44:04:95:1b:fa:22:26:70:70:c3:d9:
9c:f1:f5:b3:e4:8d:06:84:cf:69:26:93:66:54:fe:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:9E:05:F4:BF:25:14:8F:B1:8A:9D:E5:D2:8B:71:AC:BE:F6:5B
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:22:89:3c:68:3d:5b:2d:00:6d:29:df:2d:82:b2:c0:a5:7a:
9b:5d:97:1f:db:fd:8e:69:ca:44:d4:c5:7a:ef:b6:d0:6d:4f:
ce:a0:d1:32:4b:0a:c2:b2:a5:8d:66:67:07:b0:0d:68:24:18:
16:26:cd:34:7a:fd:cf:a0:fe:22:31:64:08:ba:0f:2f:44:2c:
21:50:87:6d:32:66:2b:02:15:11:23:25:3b:56:91:22:17:25:
54:44:4a:c7:09:5f:70:d5:72:41:e0:3e:b9:c6:16:a9:b8:56:
ec:0b:be:9d:62:30:bc:57:5f:8d:33:3c:02:fd:06:75:94:f1:
38:97:4b:0b:f6:e6:7e:56:42:94:77:a2:8e:50:38:0e:39:2f:
48:71:be:4a:74:4c:d8:7c:fb:a4:33:85:50:34:4a:a2:f9:27:
91:04:0e:e9:42:3f:b5:3c:e6:76:f4:b0:52:12:0b:e1:c5:09:
4c:9b:de:c6:b8:35:36:ed:dd:7d:2c:10:97:35:f8:39:ac:4c:
5e:00:07:fd:99:1f:e2:71:bb:87:9c:a7:32:e1:37:32:9d:4a:
53:69:31:15:c1:89:e6:d8:3a:9e:52:92:54:b5:89:b4:3d:72:
6b:df:d8:4a:d9:41:b1:68:7c:92:7f:1e:de:4f:29:92:37:ad:
61:04:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:11 2025 by rpki-client