Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: 3JlpVM4Hsg6M2ASlkoeVW7KVWiMTcTnk19hdftSZEqs=
Subject key identifier: 4D:B3:80:B8:61:86:34:86:17:77:24:38:F7:31:D2:F2:B2:94:56:50
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 0197B77C0F4CFB84BC61EAF46AC2D5190B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 14ED
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: qstwyRv3P32XafWegs1RR9IgPFL3yokd1+jpzAoJMcs=)
2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0f:4c:fb:84:bc:61:ea:f4:6a:c2:d5:19:0b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=4db380b86186348617772438f731d2f2b2945650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:e7:c4:94:cd:0a:ce:56:46:03:44:fa:68:
07:9f:b6:71:80:a0:4f:89:c3:66:8a:4d:4b:6c:3d:
07:39:57:c0:cb:f0:f8:4c:91:dc:77:a9:03:de:bc:
5e:a9:df:3e:63:d5:ca:ee:b6:70:b0:22:dc:dd:9d:
a4:e6:9e:b2:ab:99:30:57:e5:78:8d:19:d6:53:36:
b4:dc:a9:b4:ff:04:ee:5f:4b:ee:a1:70:3d:57:3a:
5d:32:94:72:d7:78:17:ad:4d:c6:f1:00:db:93:58:
82:a2:e6:cc:8b:b6:f6:01:2b:5f:4f:dc:c0:a7:f3:
39:05:63:6b:e0:84:43:4f:7f:68:23:99:b2:6b:60:
b0:ba:63:63:b3:b3:82:03:14:cf:6e:5e:03:df:e0:
7c:ca:95:72:cb:58:80:34:c9:bd:03:4f:b5:1e:31:
37:49:d8:ca:a5:b8:61:87:a9:ea:d4:cc:e6:1b:f3:
34:66:9c:49:29:3f:b3:99:07:d1:18:65:84:7b:ec:
b0:d4:63:c5:e8:3f:a6:65:5a:21:fd:be:da:85:a0:
4a:61:c4:81:14:cd:ab:05:04:a6:7b:04:32:e5:ad:
28:d7:07:da:d1:67:32:1a:30:ec:30:42:d5:b7:40:
4d:f3:e0:f8:68:82:64:e3:0e:7d:26:a0:ec:57:2b:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:80:B8:61:86:34:86:17:77:24:38:F7:31:D2:F2:B2:94:56:50
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7b:8d:e3:6b:83:56:3a:e8:66:b0:c5:33:35:f3:0b:15:a5:
df:85:e0:92:35:ab:0e:38:18:72:d1:95:d0:38:7c:22:e2:e9:
55:b8:ad:5a:49:ed:a0:41:07:bb:6f:19:f1:19:4c:14:6b:ce:
35:87:bd:db:bb:20:90:ab:b1:9a:e1:4a:e1:41:09:c6:1f:5f:
65:9e:cf:6d:de:1c:56:6b:76:44:9e:de:f2:65:0f:67:e9:bc:
f9:4c:b6:b2:f9:57:c9:10:d6:5e:66:95:de:12:ed:80:31:c5:
82:bf:81:3f:26:94:85:51:8f:b0:09:53:25:de:68:e5:4b:6e:
d7:89:24:f2:ef:89:dd:47:00:2d:3a:b7:f4:cb:fb:9b:2c:e9:
3c:96:e8:04:fa:64:9f:cc:fb:b7:51:77:69:d6:40:22:87:e5:
80:1f:d4:89:61:ee:34:3a:89:66:86:0d:7a:a3:05:43:a3:97:
d4:c1:5d:c8:f1:1b:9c:2a:5a:0b:66:15:1d:d6:61:39:ba:02:
47:94:fe:fe:e2:09:e8:32:c6:0d:aa:ec:ce:37:78:cb:23:09:
72:4e:35:e4:a5:be:46:c6:f7:b3:95:0f:4a:77:12:4c:45:3d:
2a:80:32:5a:73:1a:b0:3d:59:bc:01:58:38:cc:19:aa:c3:8a:
23:e6:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:42 2025 by rpki-client