Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
File: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json)
Hash identifier: h0KAfWVzlA2Mdoh6ESeU8fbRuKG4A/WcEcd1s29/Hdk=
Subject key identifier: 24:C8:FC:F5:CB:2C:B3:B4:F6:B5:0D:E4:F8:8D:37:E2:47:5C:FD:A7
Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
Certificate issuer: /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Certificate serial: 0197B8903E6B0E43DFFE76C3622DD0A46FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
Manifest number: 9B
Signing time: Sat 28 Jun 2025 22:02:30 +0000
Manifest this update: Sat 28 Jun 2025 22:02:30 +0000
Manifest next update: Sun 29 Jun 2025 22:02:30 +0000
Files and hashes: 1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: M4DqAeJi/VtsakGy+HCnmkLrV2i0PC2KhyGe/pycAms=)
2: 5S2zrcgN0zQdJ3QFaE7FBSw-HeM.roa (hash: 7N2IUSxTtbeaCv9JQjKs/+AdqXjpbHadcRJYtmTUOLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:3e:6b:0e:43:df:fe:76:c3:62:2d:d0:a4:6f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Validity
Not Before: Jun 28 22:02:30 2025 GMT
Not After : Jun 29 22:02:30 2025 GMT
Subject: CN=24c8fcf5cb2cb3b4f6b50de4f88d37e2475cfda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:5c:ae:4b:d1:75:81:dd:86:73:b4:48:83:
bc:9d:71:e7:a9:21:0b:c8:7b:b7:ce:31:f1:d9:60:
08:03:02:1e:10:c8:83:ff:71:e1:21:f6:32:a9:fd:
f1:b7:35:3a:9e:8a:95:eb:a9:46:b4:1d:d7:ad:cd:
93:4a:c1:ef:98:55:92:d0:1b:13:86:05:9d:67:f6:
c8:6c:e0:79:cc:50:5c:a3:a3:ed:1a:94:d3:c6:b8:
15:2e:5f:b6:47:ba:68:13:13:66:e7:98:5f:8b:e2:
1e:a9:dd:58:25:30:2e:91:6e:f4:cd:3b:e1:24:1c:
99:29:16:d1:27:c2:59:f6:6d:72:39:6c:65:71:d3:
2d:f4:28:b0:79:18:ad:2c:be:cf:21:04:ca:a8:a8:
a0:a8:d9:b7:a4:9d:aa:58:25:04:93:23:92:f1:d3:
03:a2:5f:ec:47:8b:87:1e:f4:26:e7:84:2d:b2:cb:
0b:89:fc:b4:c6:8e:77:65:7c:06:a0:66:f2:da:91:
b4:1f:4b:fb:35:ff:e0:cb:6a:ee:9d:57:8a:6c:2a:
ff:ec:2f:a6:c0:ed:b1:c5:08:eb:f4:98:cd:45:64:
c4:da:42:5b:4e:76:f9:ba:14:07:5e:65:2a:7b:14:
14:33:a3:24:9e:15:0b:db:5e:63:c7:17:a5:7f:22:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:FC:F5:CB:2C:B3:B4:F6:B5:0D:E4:F8:8D:37:E2:47:5C:FD:A7
X509v3 Authority Key Identifier:
keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f8:24:cb:b0:dc:bc:5e:41:76:28:41:5c:e0:36:fc:9f:4f:
87:26:ec:21:c2:6b:3d:68:04:0b:36:fe:82:4e:fa:ca:3b:54:
36:b3:19:2f:23:8f:66:d9:5e:a0:ea:fb:6d:d4:61:fc:ff:dd:
95:fa:25:90:58:ac:de:9d:87:45:49:06:47:0c:90:22:82:5b:
dd:d6:8d:25:40:d6:ef:7c:1c:13:9d:55:f3:81:4e:0c:9b:9d:
a6:5a:c8:c8:ff:6a:9c:ae:db:07:56:f5:7f:ca:1f:90:88:9b:
18:5a:8f:71:21:25:38:1b:4b:d0:9f:79:8b:45:17:8d:9a:fb:
b0:8d:b0:6c:81:6f:1a:7a:88:4d:40:6e:2a:ef:b5:2f:b2:53:
9a:b4:1d:5a:72:3f:cf:88:76:5f:52:0f:63:da:6a:84:8c:f7:
77:3f:2b:a1:d9:9b:fa:70:91:77:76:69:50:de:9d:32:b1:e5:
29:17:b6:29:50:19:da:8f:6a:2c:59:56:a1:56:08:6e:49:4d:
53:17:fe:7c:d3:0e:18:4f:fa:d4:fa:31:ca:39:bb:71:9f:0d:
3f:4f:17:e4:80:d4:9b:48:73:ab:06:9b:00:04:f3:32:1a:42:
0c:52:f2:11:b5:fb:e7:3c:b8:8d:e3:6a:0f:94:62:fc:14:98:
a0:14:10:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:03 2025 by rpki-client