Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: gxdle+/Gkyg1Z7qkpRnVJmULXFzLSqh0/9px2QIBNfE=
Subject key identifier: 36:9F:F0:C7:8D:E4:0D:DA:73:59:F9:CE:C5:02:2B:53:E5:3C:12:ED
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 0197B6D7985779E127703870825E1885331F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 0596
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: IyRxNQJWH0K1zMONju2iFDpJEveCJyLugRzOSUXrtPk=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:98:57:79:e1:27:70:38:70:82:5e:18:85:33:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=369ff0c78de40dda7359f9cec5022b53e53c12ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:05:c9:22:70:ba:5c:83:fe:88:db:b2:22:
60:7d:25:d9:ba:12:5b:98:04:fa:38:27:a2:b2:f5:
5e:18:1f:b0:fe:2e:33:fa:b0:8f:98:47:ea:0d:60:
ee:c8:0f:8c:d1:5c:8f:12:ff:52:62:59:fa:05:26:
a4:28:58:78:ca:fb:c0:e7:76:9d:7d:ab:74:74:91:
8f:cf:b2:95:90:b4:8e:a3:2c:d8:8e:a2:56:ae:04:
cc:9e:64:c2:ec:1a:e8:af:71:ac:e1:b1:49:db:f0:
21:1d:ab:67:3d:cb:92:5a:5f:b4:5a:19:0b:92:1a:
81:39:5b:74:26:af:a8:a4:5a:22:79:13:ff:fe:7c:
7f:a6:79:fc:b5:8f:3b:83:49:2f:b4:41:7f:aa:41:
52:a2:ef:2a:ca:56:0c:b7:41:eb:6b:21:b8:cc:b9:
49:6a:7a:0f:53:a7:b8:85:54:ca:ca:47:f7:3c:d5:
cb:0c:fd:97:6f:22:4c:93:c2:70:36:43:af:1e:06:
17:94:ed:26:61:06:9b:23:bf:93:48:a1:b3:51:82:
26:1d:be:44:4c:73:af:84:df:e2:a6:69:55:3b:4a:
93:41:89:cc:17:de:75:6c:25:d7:cd:01:9f:b7:4e:
af:11:98:63:af:8d:e8:b0:d8:93:09:68:6e:23:38:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9F:F0:C7:8D:E4:0D:DA:73:59:F9:CE:C5:02:2B:53:E5:3C:12:ED
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:42:1d:39:20:76:5d:ee:04:0f:0c:6b:e0:73:ac:71:2f:8e:
aa:2f:07:6f:52:e0:23:98:d3:6f:30:e8:f4:3f:19:53:d6:22:
d6:c9:fd:ab:c4:4b:d8:58:d2:fc:b1:d5:51:af:d8:dd:fc:e3:
07:e1:3e:0d:12:af:14:ea:09:d4:c9:6b:ac:73:c9:d6:22:0d:
92:10:d0:b6:69:6f:22:bb:62:d6:6c:b2:1b:71:0c:1a:8f:c3:
d4:61:c0:89:b2:63:10:67:97:0a:52:36:4d:b7:25:cf:eb:52:
23:9c:df:6c:0c:cd:a8:6a:1c:77:8f:7c:a0:f3:82:94:8e:bf:
86:b8:1f:4e:bd:a4:49:15:c0:e1:ca:7a:a7:31:ec:5a:26:34:
73:0e:4c:a4:d6:f5:be:e3:6e:f4:9f:79:f4:80:1e:32:fa:a8:
72:33:a6:94:c3:4a:6e:15:2c:b8:34:b1:8c:73:8d:fc:68:59:
aa:2a:a9:96:9b:a8:73:fb:74:15:09:54:67:0d:60:9f:a9:fc:
a5:92:f7:c0:c3:7d:1e:da:68:d1:db:93:a6:bf:75:d8:99:c4:
b5:e9:2a:cf:8d:9d:e2:c4:24:08:94:5d:51:b7:55:8a:71:23:
52:e7:48:91:72:98:52:6a:93:e5:53:af:c9:7f:7b:0e:a8:c9:
5b:35:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:27 2025 by rpki-client