Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier: AT2wCJId0Bsdk38CIWK4kFprbGK9coXEdAroHeYc4Uo=
Subject key identifier: 68:7D:61:17:98:F5:EC:A0:BB:24:F2:A4:DC:40:1E:CE:C2:17:7E:30
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 0197B6A22B060DD05300EE0D27B48EB73DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number: 108D
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: Y5S6m/evNiS3dpINIwnInmMtDulTx0+40/PuUA37jBA=)
2: gGx-x2iRamyRfnlhx5me1YxCw6s.roa (hash: JLnMtxeLdoGYGRa/pvkNkIdX/aY0zlXxd7zsjwME0tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2b:06:0d:d0:53:00:ee:0d:27:b4:8e:b7:3d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=687d611798f5eca0bb24f2a4dc401ecec2177e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:7c:c4:c2:81:60:5e:a7:46:77:7f:d8:9e:
02:69:44:7f:8b:6a:9b:be:c2:4f:36:a1:66:41:94:
3d:51:8b:c2:a3:16:4a:43:f0:61:bc:58:68:bc:89:
0d:f4:79:77:e8:ef:cb:ec:7e:a4:96:ca:87:1d:fa:
7d:e1:ff:8d:20:b6:e5:36:52:08:73:3b:66:5e:09:
e0:9a:9d:21:e2:b4:a4:22:69:3f:ba:5f:2b:7a:86:
2d:00:e8:d0:1f:fa:81:9b:6f:52:fd:94:08:60:8e:
cf:69:32:76:7c:de:83:63:da:06:dd:b1:aa:20:39:
d1:4f:da:ff:0d:49:05:80:d2:23:bc:65:89:3e:3e:
6f:ad:36:c0:a5:ca:e1:db:12:3c:d6:31:6f:9d:75:
8f:96:bf:34:f9:0f:27:72:a3:d1:fc:6f:81:e9:51:
5e:d5:39:7e:54:5a:a6:a0:f6:b8:8a:d1:e6:a5:64:
38:bb:4b:3d:7d:24:12:1a:36:06:14:de:ea:79:72:
76:2c:e8:c9:7e:92:59:fb:32:98:ba:27:82:1a:f8:
09:44:a4:54:06:ea:d3:25:8b:fd:78:09:98:77:85:
0c:10:f2:0b:a0:d7:aa:5c:07:a6:94:42:d3:a8:df:
06:e9:11:a1:b6:29:91:04:7f:69:5f:b5:75:c0:ac:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:61:17:98:F5:EC:A0:BB:24:F2:A4:DC:40:1E:CE:C2:17:7E:30
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:97:95:ec:70:07:0b:5c:75:73:1e:de:74:b0:51:c1:55:04:
8d:23:6d:9f:4f:f7:93:48:ef:4d:59:06:fd:41:50:51:e0:c5:
d4:2e:e0:c3:6c:38:2f:3a:7b:b8:8a:31:74:51:aa:7b:92:74:
29:4e:97:44:29:2a:6c:ce:13:0e:2d:9d:b7:cb:e4:b5:a7:8a:
f5:f7:f7:9e:8c:bd:3c:8e:a4:95:6f:8f:58:35:7b:e8:32:43:
4c:b8:7e:f6:d3:c1:fe:3d:b7:f1:e4:35:68:38:02:be:59:e6:
16:4a:f2:e8:df:5a:0b:f3:6d:86:6d:ba:b3:2b:a1:b5:5f:e7:
44:ac:07:d7:ba:31:2a:fe:58:af:56:53:f4:4a:be:e9:20:0a:
a6:f7:20:e1:a7:1d:51:6b:65:60:e0:38:5e:14:48:79:fe:05:
7d:be:5b:fa:4d:b4:b4:42:0c:83:66:3b:76:19:02:58:bd:d0:
7c:fa:a9:ac:bf:da:a3:1d:63:42:8b:1c:f8:cc:3c:f4:dc:33:
22:03:63:a4:d2:e0:3c:15:2f:04:62:e5:05:8e:0f:e5:17:99:
2d:bc:a0:d7:f1:14:f4:e9:1c:08:cd:15:8c:93:12:62:1d:54:
db:66:aa:ab:ae:e0:77:bb:92:2d:5c:f9:1d:7a:b5:b8:97:21:
2c:97:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:35 2025 by rpki-client