Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: Ci2JyUHDUWn/Jq/+N6SyoM26FO4WVx3uLCmU5gVpe80=
Subject key identifier: 95:6B:12:FB:88:DF:60:F9:5F:06:E6:ED:64:92:34:66:A3:6E:51:2C
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 0197B821563BDE386767C352629E4B27CB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: D7
Signing time: Sat 28 Jun 2025 20:01:21 +0000
Manifest this update: Sat 28 Jun 2025 20:01:21 +0000
Manifest next update: Sun 29 Jun 2025 20:01:21 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: SL/Wa4sHoYUzIb8AOQLJWeKpd2TQeMc6t2osRYTJMDE=)
2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
3: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (hash: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:56:3b:de:38:67:67:c3:52:62:9e:4b:27:cb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Jun 28 20:01:21 2025 GMT
Not After : Jun 29 20:01:21 2025 GMT
Subject: CN=956b12fb88df60f95f06e6ed64923466a36e512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a3:39:81:11:13:1b:22:da:f6:f0:8a:1c:64:
69:78:f0:20:6b:9a:e9:0e:65:82:f5:b3:5a:c8:61:
9d:98:af:bf:62:5b:9e:58:d5:d2:94:03:08:66:d6:
90:cd:a3:16:c9:c2:8f:c7:c2:62:2e:7d:9d:11:af:
3a:01:ef:1f:d4:5c:69:50:aa:0f:a6:c2:9d:49:1e:
2c:d3:a3:da:3f:b2:90:9d:23:bd:0d:24:af:9e:52:
83:8d:1e:6e:2e:7c:9c:2b:25:e7:5e:c0:ac:3e:81:
d3:52:d2:1e:a8:11:3d:d9:2b:c9:7f:4e:e5:13:24:
51:2a:ea:51:ce:b1:2e:86:f7:04:a4:d3:a4:ae:66:
05:d4:6a:72:75:c1:3d:f7:86:46:20:03:bf:81:7a:
9e:ba:2a:6b:53:b5:ad:54:61:29:95:16:f6:aa:23:
74:9e:bd:91:2f:e6:0c:f4:ac:6a:08:1f:a7:33:70:
b3:2f:17:f5:8e:70:41:dd:fc:64:59:11:17:4c:ea:
c9:1a:d9:33:25:72:60:39:dd:87:d7:1e:3f:bc:6f:
a8:b3:da:56:bd:02:04:db:a9:9b:58:20:3a:ec:f0:
bd:52:b5:9a:59:f1:4e:ff:7a:03:87:2f:a0:d6:29:
27:2b:31:90:28:bc:a3:2e:e7:6d:4f:91:14:b6:43:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:12:FB:88:DF:60:F9:5F:06:E6:ED:64:92:34:66:A3:6E:51:2C
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:41:4f:87:32:bb:20:97:dc:20:50:24:50:35:8c:af:44:42:
cb:24:e1:57:aa:d4:34:10:dc:cb:83:17:ca:4a:69:21:42:cd:
eb:5b:4c:8f:0f:5b:8a:9a:81:54:34:f0:1d:0b:b5:fc:56:03:
1f:b5:6d:67:0f:1c:ef:79:51:00:84:73:b2:5e:2d:f6:90:11:
cb:1c:85:c4:df:09:aa:04:d4:8a:eb:4d:c6:80:c1:af:f7:40:
ec:f9:eb:fd:35:2c:b8:07:8f:a6:38:18:1e:dd:da:58:cb:87:
7e:ba:15:a7:2d:42:67:c6:a6:f3:21:f2:1a:7e:45:40:ed:e8:
d6:6e:cc:04:4b:cb:80:63:2a:a4:34:8e:c9:19:b8:d9:90:70:
ce:26:32:a5:8b:28:c4:d6:f4:8d:89:8b:9d:4c:01:1b:a4:4a:
ed:36:bc:9f:a6:e1:e5:51:d6:0d:64:d9:1c:f3:e7:39:71:c4:
8b:9e:1c:2e:7a:68:63:fc:b5:58:af:09:31:7d:35:77:83:af:
b8:ed:96:3e:ec:a0:20:4d:e3:63:d5:af:8d:c5:a8:6e:00:55:
34:bd:b7:3d:d7:69:19:6d:ec:80:e1:91:db:0c:a1:20:3f:4a:
05:e2:54:7c:1d:08:06:04:9d:e9:c5:8d:be:88:e0:20:41:42:
1a:25:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:37 2025 by rpki-client