Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: TqUxWGMMv1VeSFb/KQFtVGZECVOk0dMpJQzngjYTJuc=
Subject key identifier: A6:22:C0:66:49:C6:DF:16:B7:2F:E9:8E:73:61:19:6F:B2:6E:1A:65
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 0197B632AB4A09AD4A726447DB95C8B3153F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 1302
Signing time: Sat 28 Jun 2025 11:01:03 +0000
Manifest this update: Sat 28 Jun 2025 11:01:03 +0000
Manifest next update: Sun 29 Jun 2025 11:01:03 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: CPPxbhd/XgKubhj/Zkcju+XIPINmg5HllRmCjHTMLpc=)
2: HtyuFwumqnKPMziahbUKFS0HWi4.roa (hash: +Ry2R7+vd5notaRsVNHJudJevoZS3UrzytB191N2Lxg=)
3: J_BkHOkhHT0AEp-6tEsjYFw6hs0.roa (hash: JAS00/5XA38hVRagh+vY9Urvk5gt+2KkIUuPK6DqVFc=)
4: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (hash: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ab:4a:09:ad:4a:72:64:47:db:95:c8:b3:15:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Jun 28 11:01:03 2025 GMT
Not After : Jun 29 11:01:03 2025 GMT
Subject: CN=a622c06649c6df16b72fe98e7361196fb26e1a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:30:f3:b8:37:4e:21:f7:50:66:27:64:4a:
e0:25:77:d4:c1:92:2d:d6:49:bc:a4:d2:87:c8:8c:
c6:85:e3:ba:41:be:f2:f2:9b:68:fa:a0:ac:53:09:
c3:6c:c8:39:e8:2b:b8:0f:22:85:08:e5:50:42:83:
d0:78:a9:52:4a:ee:06:7c:57:44:e2:a4:a0:88:11:
40:08:e7:02:e4:ea:2c:c2:f1:b7:2b:e5:d2:eb:7b:
fe:39:6b:b9:eb:95:a4:ca:bb:3d:50:59:7d:c9:f7:
e2:42:6e:1f:3f:eb:85:40:6d:d4:ac:8c:20:a7:28:
8d:e6:4f:d1:01:bd:84:43:4c:96:a6:0b:8d:e4:2d:
9a:82:42:69:45:dd:12:bd:b9:c7:8b:9e:63:ab:b0:
5c:e4:6d:56:43:6b:8d:8e:45:2f:00:f3:49:47:54:
32:bc:b2:ec:0f:db:fd:db:69:16:27:5f:9b:2c:82:
c6:e9:9a:cc:ce:d1:e0:4f:b8:08:10:2c:4d:07:9a:
d4:5e:a1:09:42:36:26:c0:6c:5c:47:54:13:5a:dd:
fc:fd:d2:94:47:bb:84:a4:4d:7b:31:64:f6:9b:25:
81:46:bd:ac:ea:27:d8:2d:91:ec:fb:bf:e6:1c:d4:
94:63:73:24:6c:af:6a:ba:14:f8:5b:55:84:4c:68:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:22:C0:66:49:C6:DF:16:B7:2F:E9:8E:73:61:19:6F:B2:6E:1A:65
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d1:91:6f:39:fc:d3:02:dd:7e:bb:0d:a1:81:30:35:d8:95:
be:4a:40:2f:08:bf:7a:6e:9f:d9:af:7a:7d:00:39:96:8d:09:
03:44:b2:dd:66:15:16:6e:22:33:29:7f:87:15:96:5c:be:bc:
bc:c7:69:77:58:5a:04:fc:2d:ed:48:1f:51:a2:ff:0a:52:79:
b0:51:8b:94:fc:29:6c:e5:8b:ed:f5:2d:4f:6a:8e:8f:e2:e4:
59:4e:27:18:99:dc:e5:f6:6b:3d:4b:78:66:5f:d7:6a:cf:b6:
e5:5e:ea:8f:d6:ea:6c:45:88:eb:37:0d:a7:39:e9:19:3c:10:
09:0f:c8:61:78:7b:75:86:fb:27:a6:df:3b:c6:54:65:39:e4:
d7:f5:a8:bc:58:34:5b:86:28:bb:bc:6c:7f:23:94:42:73:6d:
49:59:1c:ea:61:db:5c:83:b5:dc:0a:3c:6a:13:60:7e:57:15:
50:a2:e9:e5:45:4d:1e:8b:33:c0:c3:60:ca:38:e8:7b:c7:1e:
af:65:e6:0e:8b:ee:19:65:9b:41:7c:c1:46:54:3f:53:e2:1f:
fc:36:b3:f0:3c:2d:f4:a1:f2:87:df:78:8e:7b:4e:20:7b:12:
85:53:d2:1d:cc:dd:6c:c4:b3:ab:3b:b2:bf:63:37:0a:ee:f0:
45:14:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:48 2025 by rpki-client