Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier: ngzS+VOd6aM21COPqDhHgYWo1T8tQkKFJyhJj/wRJIo=
Subject key identifier: 8F:5E:A6:7E:18:E4:C7:28:0A:5A:82:C0:78:E4:83:99:F7:D0:EE:CA
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 0197B6D772C22D6DBCF95FD5A7393F43B80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number: 033B
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: VM8iNIPAK1gceHYBC6UTJ0oubJk.roa (hash: mqZXcR34R810uEv+4/cBz9V4eZISHr2d9EqXL39avwo=)
2: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: nX9Y7ToxyISjdTJiV2Zg0fJ1CeiM73a3yNpTbMMJwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:72:c2:2d:6d:bc:f9:5f:d5:a7:39:3f:43:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=8f5ea67e18e4c7280a5a82c078e48399f7d0eeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:5e:e3:d5:cc:6f:9d:31:02:99:a8:06:d0:
d2:25:52:96:96:ce:2b:2c:d5:0c:f4:27:f0:5b:3c:
24:22:7e:89:6e:8f:a7:26:f9:7b:09:9b:7c:87:9e:
5b:0f:de:ef:ce:3e:75:89:59:1e:d4:98:ca:76:e6:
1c:57:01:2d:84:e7:a1:76:37:e0:4f:27:d9:27:7a:
13:ec:cb:67:a2:c4:22:d3:6a:4d:39:d0:af:6d:74:
42:72:44:5a:0c:97:0f:2f:25:17:72:b1:94:1a:cb:
81:4d:ee:a3:81:e2:40:6f:4a:7d:66:51:1a:27:d1:
5e:f2:39:39:7c:37:b9:46:de:93:db:63:82:d0:77:
4f:f8:eb:6b:8e:cf:cd:93:01:6a:b4:4b:bf:61:fd:
50:c3:49:c0:f6:72:db:22:89:7f:d3:f2:84:cf:04:
bb:58:f0:50:2b:bb:34:19:80:ab:a6:73:6f:e2:13:
37:e7:b9:ba:a5:a0:6c:a3:15:c7:57:e4:6c:e1:4b:
66:ca:50:97:e2:81:f1:2b:3f:8f:02:1c:be:ce:30:
f2:77:47:b8:c9:07:6f:ba:4e:be:b3:a8:11:b4:94:
76:dc:38:1e:3b:bd:5e:30:4c:b7:c2:0a:b7:d4:44:
b8:da:6e:b7:7c:8b:d4:dc:89:bd:2d:d3:89:6c:fc:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5E:A6:7E:18:E4:C7:28:0A:5A:82:C0:78:E4:83:99:F7:D0:EE:CA
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c4:2c:e0:83:9d:24:de:4d:c9:77:8f:cf:f4:61:3c:6b:cc:
02:b0:a0:cd:24:6c:7a:70:40:d5:f9:0d:ff:06:18:83:a0:ea:
e4:14:7c:8a:d0:ae:f1:9f:cc:3e:2e:87:4e:3f:00:c5:e9:f9:
6d:73:02:25:52:78:20:08:39:34:be:9b:93:d1:ff:d0:37:f0:
4c:58:48:e3:c5:5d:42:33:71:c1:05:ef:6f:38:c9:51:fb:85:
b2:26:a0:78:cb:57:ed:35:cd:c9:4b:ac:fd:c4:ce:e3:29:0f:
03:fa:8d:db:16:4c:bf:01:34:54:98:f7:c3:63:e5:f7:87:67:
80:2f:10:d9:5d:2d:e4:e4:f1:d0:ed:af:31:8e:2e:90:a3:19:
01:4a:20:8d:42:2e:35:42:b5:ff:47:9b:ec:ae:7b:05:69:f0:
27:cf:ad:b7:38:46:a0:71:3f:f0:0b:3e:44:c3:1c:5e:db:76:
05:c5:89:41:bb:29:3e:eb:4a:4b:6e:21:79:78:ab:fc:0f:4c:
0a:b7:b8:0b:49:1f:96:23:b9:f4:29:82:4b:11:44:0f:9d:d2:
cf:39:bd:27:8f:44:bd:02:2e:d6:2f:92:8e:8a:4e:25:92:eb:
e4:69:4b:df:3a:90:71:1a:80:d2:99:cb:84:e1:41:15:72:8d:
51:cc:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:10 2025 by rpki-client