Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: 8psD0CJsDW2WQ3fFh8dIpuMOdcinj1Rp7NCGb7gkj5U=
Subject key identifier: F5:46:BE:63:74:11:F9:1B:B6:54:1E:49:64:BF:90:39:09:C7:78:D2
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 0197B6D7B3037289D1992A06A31DA784785E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 061A
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: THfKjsyVAMhA1OV/EOn2XY/1RNZTvtQMoLJGnsTU0uE=)
2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b3:03:72:89:d1:99:2a:06:a3:1d:a7:84:78:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=f546be637411f91bb6541e4964bf903909c778d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:54:17:55:f3:c9:a8:ed:d9:34:30:04:6e:
c1:a4:6b:75:9d:bd:6f:31:83:2f:4d:4d:39:b9:0a:
35:0b:57:38:31:1a:e8:59:03:24:af:f4:0f:d1:23:
ef:bd:3b:e6:fa:18:87:a7:b9:58:0c:fd:12:2f:d6:
05:9f:dd:46:4f:43:55:74:26:c1:3e:37:a1:b8:13:
b7:46:a5:5e:29:40:49:b4:05:a5:26:20:ba:01:ae:
79:1a:d2:eb:5e:a2:3f:01:1e:5d:d9:5f:f9:0b:09:
c2:f2:c0:90:d2:66:36:1b:ca:0a:76:1a:75:66:d4:
81:ed:8c:06:58:1c:13:03:ee:ab:af:3b:73:2f:19:
0b:64:50:45:a6:fe:1c:e3:51:f5:18:f9:5b:a3:ee:
67:29:a3:5d:9c:71:0d:c7:52:9f:8c:b9:84:b1:75:
2a:6b:1a:aa:68:cb:80:66:13:4a:ce:8b:c3:71:25:
69:b4:0e:34:26:72:3c:10:17:11:f6:b8:06:d0:2e:
e1:48:b8:ef:97:8f:00:6c:21:f0:5b:14:3c:ae:57:
98:a3:4d:34:77:80:ce:fb:7e:d3:5a:ab:c7:67:a9:
86:3d:e2:bc:38:e0:a4:e6:f6:d8:30:af:aa:35:e7:
36:c1:9e:03:0d:ae:96:b8:cc:ae:12:0d:66:d8:9b:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:BE:63:74:11:F9:1B:B6:54:1E:49:64:BF:90:39:09:C7:78:D2
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f8:c9:9a:9f:5f:c2:45:ce:d6:5c:54:b9:14:cd:47:32:ac:
b8:70:5f:0d:68:04:dc:85:ed:5a:da:63:44:ec:c1:a9:74:02:
83:b9:a5:e7:2f:6b:93:ee:6f:92:39:47:d1:cd:8e:ff:7d:80:
3f:7f:e8:07:17:d2:43:0d:8a:bc:68:30:75:5c:d1:44:9a:c1:
61:34:4d:b7:c7:e2:f8:4e:4d:91:eb:cd:f2:f1:6f:bf:51:49:
f4:2f:f5:34:aa:03:d4:7f:00:57:1f:cb:ce:01:0a:b8:8a:be:
56:7d:23:69:73:ee:66:c7:ce:c7:ca:58:0c:5c:ac:53:47:32:
d7:0f:89:40:a7:eb:41:6a:33:09:df:87:95:6f:6b:e8:fd:b6:
86:6e:63:c9:4b:eb:89:3e:d7:a7:a8:a9:c4:c7:99:a5:d4:e8:
c6:b8:3b:ca:4d:13:00:4f:aa:38:c6:8d:05:10:12:d6:eb:77:
2d:9b:22:ae:f8:2f:44:fb:5d:c0:f6:5e:d9:d5:84:b2:d4:e3:
50:fa:73:b6:66:ea:d3:5c:fc:c4:ad:ee:59:9a:a6:87:ec:18:
44:1a:7f:67:6c:63:97:14:17:ca:0b:fb:4f:e3:38:fc:e7:6c:
1d:df:0b:68:8e:cd:31:1e:25:fc:76:39:69:73:ee:a0:1e:28:
9f:37:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:45 2025 by rpki-client