Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: fTZyTwZada/Y0h/UEFvlwcq63fiXBHUTozY6vskdyjg=
Subject key identifier: C2:F0:61:48:05:9E:5A:00:3C:FC:28:C0:86:EB:1A:D0:1F:A8:6B:C8
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 0197BB59220D522A12716DE49EF0696A5DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0AC1
Signing time: Sun 29 Jun 2025 11:01:10 +0000
Manifest this update: Sun 29 Jun 2025 11:01:10 +0000
Manifest next update: Mon 30 Jun 2025 11:01:10 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: qcnWe0z5yu/neEslVXdqTFi6YKWiYI/cSFCXVcWO/Zs=)
2: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (hash: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:22:0d:52:2a:12:71:6d:e4:9e:f0:69:6a:5d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jun 29 11:01:10 2025 GMT
Not After : Jun 30 11:01:10 2025 GMT
Subject: CN=c2f06148059e5a003cfc28c086eb1ad01fa86bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:20:7c:58:72:c1:c7:2b:e4:48:65:51:4a:
35:83:ba:c4:03:af:d1:ce:f0:75:31:73:09:17:11:
29:c8:8e:31:29:04:e9:0d:3f:56:ab:f1:d5:dc:04:
03:cf:9f:34:90:d7:ce:66:ab:34:70:8a:fe:40:99:
d4:66:73:eb:fe:3d:d4:62:c1:34:83:71:3e:fa:28:
80:0e:e1:e4:03:02:27:d7:e7:ed:db:49:b7:78:e3:
42:d8:3d:41:30:e5:62:56:bb:b4:81:4b:1f:fe:50:
b7:47:cb:54:6a:94:20:19:2b:6d:72:0d:bc:3d:86:
fb:65:e5:66:68:3a:94:bb:a1:01:e8:3d:df:26:a9:
c7:5c:09:b5:6e:d4:02:d7:94:dc:93:47:90:9c:d7:
43:db:c9:6f:5d:91:0e:04:53:19:ea:c5:8e:a3:54:
1a:ba:22:61:ef:11:d8:e8:75:1f:35:bb:5e:7f:b5:
0e:ee:33:2c:2f:b9:40:31:ea:1d:10:5c:23:b7:33:
0b:48:b9:b7:4e:64:f2:43:bc:0e:10:5f:d7:2d:02:
cd:66:cf:d5:2d:50:46:63:09:7d:b9:0e:43:5c:09:
17:b7:05:f8:82:ef:c2:ae:29:e9:c8:b4:63:30:b6:
41:38:c0:ac:76:99:e1:88:9c:bd:5a:55:88:e6:0c:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:61:48:05:9E:5A:00:3C:FC:28:C0:86:EB:1A:D0:1F:A8:6B:C8
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:84:de:3d:4e:d4:47:16:f0:b4:2d:67:32:0c:aa:62:be:e1:
7f:e3:ba:48:4f:a9:47:88:49:04:93:58:99:f3:42:a1:be:02:
b9:89:de:c4:d1:62:02:a9:2f:e5:66:ee:90:73:ac:50:bf:77:
61:99:7e:12:1a:7d:87:4f:4d:a4:9a:af:89:f2:f0:b0:29:fa:
0a:c9:2b:ca:13:43:ed:8b:b9:b5:2b:b2:42:ca:98:86:4a:70:
78:7f:73:09:c8:7d:55:33:c6:9d:52:99:f6:ff:d7:f0:f4:8a:
d3:5a:92:4f:71:dd:ba:b1:f7:ec:cb:d3:ce:c2:13:f2:33:eb:
cb:b0:2c:7c:af:4f:fe:c2:79:46:58:18:a9:ec:0a:17:75:d4:
6f:9f:f5:2e:29:e2:84:a1:61:de:66:f0:6e:40:e6:1d:3c:f3:
88:36:8e:16:bd:7d:6e:d5:cf:c6:6c:b8:8d:eb:81:d8:9b:1c:
38:bf:dd:c1:ee:e4:34:87:61:cc:bd:8b:b6:4c:7c:14:be:a0:
75:e8:bd:41:98:f2:87:98:c7:15:db:2f:b1:8c:c9:4d:18:26:
d6:c5:a0:7d:ae:4a:b2:49:da:2f:2e:02:32:0e:6c:ad:dc:95:
44:02:7d:5d:58:b5:aa:3c:54:76:19:4d:87:d1:54:c4:21:b2:
4b:29:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:57 2025 by rpki-client