Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: Qo3QF56BIKLdq3RbBiRZ2Trj97/WCNEVY5Q0EvvyV4I=
Subject key identifier: 80:03:20:18:08:F2:51:C6:DB:AA:AA:AA:7B:74:A2:BD:39:AE:80:0B
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 0197B88FEC2EB9EC2B87974E74B2B955A707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 054C
Signing time: Sat 28 Jun 2025 22:02:09 +0000
Manifest this update: Sat 28 Jun 2025 22:02:09 +0000
Manifest next update: Sun 29 Jun 2025 22:02:09 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: IE/t67rxIesedD4ZpEaXt6JVmWYqsAPWzwmCF9UQtU0=)
2: EZ9xcPpmaaiDdmg5D8Xp47gSAJw.roa (hash: /ZPFrrUhiRzvgJS9F6X6CPNQ9l9Fj7isIDOoSoDinwA=)
3: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (hash: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ec:2e:b9:ec:2b:87:97:4e:74:b2:b9:55:a7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Jun 28 22:02:09 2025 GMT
Not After : Jun 29 22:02:09 2025 GMT
Subject: CN=8003201808f251c6dbaaaaaa7b74a2bd39ae800b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:30:58:7f:37:23:3e:d1:86:9f:e0:3a:4d:
9e:64:55:66:98:42:07:ab:97:94:90:26:76:a7:60:
c2:7e:c0:af:1a:04:63:c9:f2:fd:02:b2:f7:a1:65:
23:c8:b7:cf:09:aa:05:fb:13:72:f6:25:3c:72:9a:
91:e5:3e:21:8e:cb:fb:b7:09:72:ec:9e:1f:92:36:
7f:82:16:f6:87:6a:b9:1e:bc:d2:37:b7:61:24:13:
bf:15:c3:0e:b4:2e:18:44:70:14:6f:00:58:31:f3:
46:0d:cf:b7:e9:d7:3c:aa:78:a3:87:d7:db:b8:d8:
b8:f7:9e:c7:56:ff:df:48:96:fe:71:b7:49:f4:38:
b7:24:4a:f7:ef:8d:d7:33:3f:99:15:d6:8b:21:3b:
a0:8d:bb:6b:ea:41:7b:29:33:19:4b:8c:df:a3:a3:
20:82:bc:b2:d8:ee:7c:4b:2e:87:99:1b:55:5b:a1:
80:2b:70:a6:27:06:02:8f:9d:ed:e1:24:23:30:03:
9a:c0:a4:89:55:20:1d:1e:68:3f:ac:60:63:cb:92:
83:b4:53:a8:26:6d:bf:df:0b:3c:eb:cd:3b:76:98:
d7:41:8c:cd:33:2a:af:d6:67:ba:f0:96:dd:8c:ea:
99:74:ca:23:4e:d7:e3:41:f7:28:ab:68:58:53:ac:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:03:20:18:08:F2:51:C6:DB:AA:AA:AA:7B:74:A2:BD:39:AE:80:0B
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c9:ea:8b:18:e7:07:f4:f9:72:45:43:03:66:e6:55:36:25:
dd:4b:cb:6e:e1:c7:1f:69:4c:ce:c9:65:82:08:bf:37:2e:f7:
b4:af:e6:67:25:5e:c3:21:d5:8f:07:f2:0d:21:a1:9a:2b:8f:
b9:26:3c:92:d5:1f:7a:16:1f:23:f6:6e:04:0b:63:41:a2:29:
d3:0d:d1:87:97:75:5b:d2:b8:3e:9f:17:cb:8d:d3:62:28:de:
b1:38:30:df:02:86:fd:14:68:af:56:c7:1b:a5:81:ae:1d:cc:
62:3d:4a:7a:70:e4:7f:a0:71:34:51:7c:39:8b:b5:7c:f4:75:
68:c6:38:e0:2d:9d:61:53:e5:98:5a:cd:c9:d7:dc:4e:b1:cc:
87:94:e9:7f:15:65:9b:91:4b:6b:ff:50:4c:ad:b7:62:3c:18:
44:90:f9:61:5a:5a:a8:b0:12:2c:de:8d:37:f1:d3:7f:aa:4e:
4e:9c:e3:3b:77:60:0e:ad:91:24:72:34:de:c5:1c:fc:8b:5e:
0b:9d:ff:a1:a0:54:18:8c:23:13:d6:b2:bf:4b:9b:df:3b:7b:
f8:23:19:8e:8e:ff:be:a1:1d:15:76:65:39:cd:9c:0e:35:da:
eb:f0:ad:af:a1:31:fa:9c:9f:2b:cc:b8:8b:a7:06:7d:4b:c6:
c4:c5:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:05 2025 by rpki-client