Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: joTSoZgrcgA7fxoICnj5KpGzJDBJctb++rCcecQJdyk=
Subject key identifier: 49:DC:5E:3F:ED:C8:E2:D7:99:52:3C:15:A0:CC:09:2E:16:B7:0E:F8
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 0197B5FC4FABFB313DA3F531D53AC706DD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 10:01:40 +0000
Manifest this update: Sat 28 Jun 2025 10:01:40 +0000
Manifest next update: Sun 29 Jun 2025 10:01:40 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: GAM7JUwJbkARvpD7ae0bkrGyKBN4YUmZTVKPwN+Bncc=)
2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:4f:ab:fb:31:3d:a3:f5:31:d5:3a:c7:06:dd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Jun 28 10:01:40 2025 GMT
Not After : Jun 29 10:01:40 2025 GMT
Subject: CN=49dc5e3fedc8e2d799523c15a0cc092e16b70ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:5e:d5:9b:d2:66:d9:bf:c3:45:02:32:d9:
99:6e:8a:43:8d:29:5d:f1:41:f0:ba:4c:35:c7:e6:
dd:6b:e5:8b:a4:a3:6b:8f:1d:1e:02:ac:d3:84:4d:
ec:38:4f:15:f4:e9:3c:f6:58:65:3c:69:4a:d9:10:
08:8c:77:e7:21:19:b8:15:0e:7c:f4:97:9f:25:fa:
01:92:26:b6:96:32:fe:0c:fb:3a:f7:74:77:a8:ea:
eb:77:cf:eb:a1:ae:f3:76:76:dc:43:c2:f9:6a:35:
71:0c:62:e3:ba:12:27:5d:37:b7:c4:7c:69:a0:2f:
ae:3c:fd:b3:ef:8f:2c:54:1e:1f:97:a8:5e:05:ec:
d7:4c:9c:13:cf:1f:e7:9d:b8:56:88:ba:0b:13:a0:
2c:d7:5b:1d:00:ba:f0:f9:fa:40:6a:74:08:a6:24:
94:be:bf:1d:c3:5f:8c:18:e3:3c:11:42:76:1b:23:
90:5b:41:64:26:d8:21:0c:59:e4:76:96:48:31:62:
93:65:03:53:4d:0d:ff:e6:c6:7d:4d:2e:ce:8a:45:
8d:0f:27:35:dd:fb:60:f5:8e:4a:84:85:01:b9:2d:
ed:3c:e8:bb:64:76:4f:75:b9:0d:89:8a:38:06:9f:
c7:f1:b8:5e:79:95:94:2a:87:7f:9c:74:d9:d1:c3:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DC:5E:3F:ED:C8:E2:D7:99:52:3C:15:A0:CC:09:2E:16:B7:0E:F8
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:68:78:04:a1:d2:64:de:52:63:90:2a:b7:b3:44:f8:55:ae:
f5:9f:b1:cd:8c:eb:ea:d6:26:f4:9c:53:8c:24:24:ba:4c:b7:
bd:aa:43:e0:8b:75:ac:92:00:db:74:6a:ab:d5:7e:5b:40:6d:
67:6b:b4:24:d0:a2:bb:25:6e:d0:ed:ba:fe:57:ed:ef:32:87:
4c:ae:cf:58:af:70:fc:9f:26:e1:e4:5d:4e:94:b0:a3:1a:44:
59:1b:5f:5c:7a:e0:d3:3a:9f:45:4e:7d:18:2d:3c:04:22:8c:
f4:f7:60:53:a4:5b:5d:95:8c:9e:0b:6e:42:e1:0d:d5:d8:2b:
2b:b7:2b:7e:55:22:54:5a:7b:19:cf:1e:d4:b4:0d:a3:62:c7:
ab:4f:17:34:a5:76:35:00:e3:74:f0:d1:c2:bb:9f:a4:27:48:
7d:ec:05:dc:12:ba:19:f1:1b:b4:0d:c2:ce:90:d5:4f:1d:38:
aa:fe:08:43:27:77:13:73:f9:b9:9c:a5:82:bd:9b:4f:74:12:
fd:2d:66:14:f3:82:19:c3:46:70:04:a9:00:50:8b:b1:d3:98:
6f:ef:ae:14:6b:f2:ab:a5:d4:3e:87:d8:58:0c:e1:cb:b1:73:
a3:be:77:c5:b2:62:ad:b2:ac:e4:b2:a6:cf:68:fd:ed:c1:34:
6b:54:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:54 2025 by rpki-client