Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: oW1OQoPUHhgLMpOCfWfaXMzuCNvWmuHXQcmpC12to5o=
Subject key identifier: 35:51:77:AA:D3:F9:6F:EE:F4:EC:2B:E3:22:43:7E:A9:0A:68:7B:5B
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 0197B70E71C3023754EAC6163A0B3ABCA3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 06B3
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: M+KBkM/Ev9WDPzpsoCzsPEAnUHjjTJIlXKoC8Hbsthw=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:71:c3:02:37:54:ea:c6:16:3a:0b:3a:bc:a3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=355177aad3f96feef4ec2be322437ea90a687b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:20:37:f9:23:64:75:c9:f6:d3:58:ce:07:
4c:31:01:37:13:23:6e:9e:84:85:2d:6e:7e:c0:8d:
d0:d5:be:a4:81:ea:1b:48:8e:98:05:83:db:40:88:
16:be:53:41:d3:e3:c1:10:8b:e9:7a:e6:f4:40:3a:
7d:14:1e:46:cf:c8:41:19:e7:ec:9a:9e:ef:24:d1:
32:0f:33:62:bc:fc:48:04:f2:0b:51:7c:bd:86:1d:
34:67:50:1d:f3:12:88:b8:59:35:05:5b:a2:9c:35:
c8:5d:14:5a:39:ce:6f:f5:a6:81:87:cc:1f:78:42:
bb:45:9e:de:33:3e:75:c8:f5:42:62:9e:67:07:17:
44:04:63:e6:19:8d:33:61:58:8c:bb:f8:09:26:e0:
24:ad:29:56:cf:b8:58:08:12:cb:5a:9f:3b:79:6d:
88:bf:eb:62:42:79:05:52:06:a7:b9:9d:be:2e:99:
22:2f:4d:cb:83:a3:5b:31:7e:1f:b2:18:22:cd:c0:
a7:07:16:67:1a:c4:60:9c:34:a5:84:6a:2c:95:b6:
a2:88:29:26:d4:80:c6:6d:3a:41:77:3e:54:58:b6:
d1:73:b7:30:8f:d1:43:67:ed:c2:d0:b4:d3:fc:fd:
d0:65:33:1b:22:76:cd:2d:c1:ea:60:78:60:58:be:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:77:AA:D3:F9:6F:EE:F4:EC:2B:E3:22:43:7E:A9:0A:68:7B:5B
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:18:4b:ed:1c:ba:5c:06:e9:61:88:fe:3a:26:74:61:72:5f:
24:5e:fa:c4:4c:21:4e:c0:db:a4:c8:89:c3:8e:5f:5e:02:e1:
cb:e4:77:52:70:fd:33:1b:ef:71:b0:85:f9:31:07:d9:7d:10:
4d:75:56:db:67:1c:82:8c:2e:05:89:4c:f0:ec:52:aa:18:03:
fc:24:11:3d:77:5a:fc:9d:8c:e6:33:1f:82:7b:8c:b1:91:f3:
09:45:92:aa:cd:67:57:e3:6c:f5:83:a3:2b:47:75:93:86:e5:
82:87:88:35:90:35:d6:35:f0:71:90:93:90:72:2e:4e:b5:4b:
e2:e3:dd:3f:bf:50:02:a1:98:2c:3e:ff:67:af:c3:5e:f2:ff:
af:5f:e5:cb:f8:e5:80:fb:67:0d:3f:56:de:27:12:14:d9:8d:
8e:13:71:f5:5d:19:79:13:eb:ff:91:f4:b1:43:dc:40:90:9a:
2b:43:3a:87:6f:2a:c9:e6:44:a4:24:db:e1:ec:a0:ad:a6:fd:
52:ae:c3:f9:c6:37:fb:85:8b:6c:72:d9:9d:97:33:db:67:6d:
11:d3:99:1f:3f:bc:73:03:39:9a:ab:e5:b5:c9:5e:92:22:8b:
ab:c7:e3:a5:e3:b4:1a:2f:cf:4a:32:93:4f:cc:03:17:e3:be:
ea:1a:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:41 2025 by rpki-client