Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: 3i7aJnpRzk8/y6cppGgGbS3Br2Fc/ejwTMbrWGSQM7Y=
Subject key identifier: 34:6B:65:84:ED:71:CF:6C:D3:35:9B:B8:60:80:07:E7:1F:9C:5D:86
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 0197B6A0DB3B4EB9EC690E0950E1871364C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: gQDlnjRTElE5vDeGUT5R6nFdDh27sKmJmK9CE7f3Yvk=)
2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:db:3b:4e:b9:ec:69:0e:09:50:e1:87:13:64:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=346b6584ed71cf6cd3359bb8608007e71f9c5d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:57:08:f4:5b:b2:c0:f0:0a:f4:62:d0:93:
cf:6e:93:71:6b:8d:2c:e8:6e:11:ff:ca:a3:ba:0a:
38:58:ca:48:48:7f:f6:22:39:ee:a6:31:89:de:1a:
fb:fe:8e:55:d6:fb:7c:26:b1:cd:09:58:ce:de:e3:
a0:27:65:2c:db:cb:20:64:93:db:8f:83:ac:b0:af:
b8:39:d1:09:c8:c7:d0:2f:48:7a:6f:44:aa:47:2b:
43:c0:24:07:0c:85:4f:1e:c1:97:c3:a0:e4:ca:c1:
80:18:27:38:0c:58:63:05:31:3d:ba:47:db:44:87:
41:5b:78:ba:62:0c:ea:fa:32:53:49:f0:80:39:18:
fd:e9:ec:2f:0a:d5:1e:06:1f:c9:18:bb:17:02:c0:
86:4b:28:c6:fe:07:46:c2:70:b4:7c:86:ac:81:76:
71:29:1d:4d:f7:7e:67:4b:21:d4:da:e4:ec:fa:64:
f6:c6:4c:be:75:3e:17:db:0b:19:83:24:11:2c:76:
41:de:7c:ee:f7:2c:0c:01:30:c3:f7:9b:71:07:f1:
de:0e:c1:6f:44:45:08:66:45:57:6e:14:11:4e:19:
2d:cb:5e:1f:8e:fa:d8:3b:e2:d9:05:a9:e7:67:d3:
b2:de:30:39:9f:99:b8:30:60:ac:da:9a:49:5f:af:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6B:65:84:ED:71:CF:6C:D3:35:9B:B8:60:80:07:E7:1F:9C:5D:86
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e2:ec:bc:9f:24:47:01:a2:9a:80:7e:58:2a:3c:9e:93:ec:
b6:11:06:fc:a4:59:18:9a:ee:b1:19:a1:9c:fe:c3:31:06:6c:
68:9a:fb:f0:88:85:8b:d4:59:0f:f6:b2:b6:00:87:7d:1d:a7:
43:72:be:6a:ca:1a:d9:11:9c:df:ea:ea:d8:f6:42:85:a2:e0:
5d:f6:17:c5:68:14:ab:00:7a:22:a4:00:ae:00:6b:34:2b:80:
18:fa:70:3e:23:dc:4b:a2:96:cb:0d:0d:b5:dc:80:4a:b0:db:
ec:de:3e:9d:44:3d:75:95:8c:c1:99:2a:6b:2f:0d:4d:57:06:
4f:04:a8:2f:62:08:63:20:d6:8d:c0:ff:07:ef:a5:7a:47:ff:
20:dc:e8:e1:68:98:5d:af:c8:6d:a9:77:4c:c1:84:18:d2:52:
e4:93:f5:fb:08:6f:1d:4f:e3:5d:de:73:c2:1f:3b:54:df:a4:
63:01:88:50:73:21:0e:c2:70:66:c8:25:0f:bf:eb:dd:ba:2a:
19:ba:1e:53:18:dd:17:c2:1b:59:f2:ba:0e:6b:31:66:65:e1:
b1:67:cd:f3:16:e0:89:ae:f8:02:7e:cf:68:72:c1:12:2d:81:
e7:75:a9:0b:5a:d9:d5:5c:3b:46:4f:c2:4b:54:45:fd:0c:76:
ee:55:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:23 2025 by rpki-client