Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: E/fcN948zt9r52b6a+eBQCy0oVzO/YxJDtIYoTXGpBg=
Subject key identifier: 7C:B9:07:45:10:BE:84:AB:8B:C5:C8:68:34:DA:73:78:DA:C8:CD:53
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 0197B7EA23126ADFE822CD99A95E2EC06FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 01D8
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: nu/Lp5itpzQZe5QSV5m0WNH8M/lKdGCuXG1PbGiCD2s=)
2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:23:12:6a:df:e8:22:cd:99:a9:5e:2e:c0:6f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=7cb9074510be84ab8bc5c86834da7378dac8cd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:f5:a8:2b:f2:43:4e:bb:f8:0e:09:be:9a:
3d:cb:91:03:23:aa:42:27:b6:9b:09:44:fc:6c:83:
72:47:e1:62:db:5b:fb:28:68:65:ff:6a:16:2c:ba:
0e:4d:9a:6a:5d:4b:63:ab:53:34:80:bc:e6:69:3f:
2b:d9:ad:e3:a6:e3:7b:b8:22:8c:cd:01:1f:ed:bf:
66:0f:68:8d:f8:11:b8:f1:30:3a:86:dd:0a:a0:a5:
c0:4c:0d:bb:10:ca:96:a3:17:1f:d5:f7:6b:cf:1c:
e0:31:c6:4d:e1:cd:1b:e1:ce:20:82:84:e5:e5:47:
b8:1c:2a:7c:6e:db:6a:37:d8:da:3c:f7:00:41:6a:
96:ca:24:53:61:d6:dd:0e:36:a7:42:02:97:4d:dd:
14:99:cc:c8:50:10:52:b9:64:e4:72:41:b1:3a:7e:
3b:5a:d7:02:14:d0:8e:5c:42:d0:cb:ef:cc:5b:3d:
1d:97:55:3c:b6:04:36:16:3c:75:f5:29:c9:1f:2f:
29:bc:33:01:5c:28:00:3a:e3:8d:67:d1:a1:7f:8c:
93:5f:9e:94:6c:8b:a5:6b:54:24:36:48:27:40:bd:
20:e2:fb:d7:79:e8:fc:6d:80:2e:7b:c1:16:c9:0a:
7b:05:90:a2:a6:9d:fd:43:6b:61:49:9f:a7:14:ae:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:07:45:10:BE:84:AB:8B:C5:C8:68:34:DA:73:78:DA:C8:CD:53
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ba:e5:dd:66:5e:39:be:05:5c:be:f4:55:3f:57:d6:17:b5:
c7:83:6b:0c:a4:54:ca:04:1b:09:30:fd:f1:03:1f:d8:d4:f6:
c9:23:0e:d1:03:64:b5:a4:fe:12:e5:1c:7d:9e:45:c2:e4:59:
c8:21:19:f7:72:97:ed:45:d1:3d:71:c7:a4:29:cd:4b:6c:a5:
66:fb:16:b2:77:20:bb:84:d5:32:0e:dc:02:5c:6a:b5:7d:44:
33:57:cf:43:4e:24:66:98:e3:32:f5:9a:9e:27:24:d5:e8:3e:
4b:3c:02:c9:30:16:01:e6:32:7d:ba:92:ab:e4:45:98:b7:d9:
5a:35:51:5e:13:5c:8a:72:0e:dc:0b:de:4f:97:02:17:fc:37:
fe:43:67:12:23:0c:b5:b7:fd:fb:cd:40:e0:ef:82:31:94:0e:
ae:1f:3b:4f:52:72:4c:55:75:84:99:32:de:a2:46:07:b3:64:
24:b9:c9:22:ab:6b:8f:4b:7f:3b:f1:eb:21:43:3e:ce:f2:16:
0d:d7:3b:3b:c3:bb:87:41:d2:b4:e9:b3:f4:36:d5:0d:de:e4:
dc:8b:15:f0:1a:2f:68:fe:2c:6c:ea:1d:64:93:c5:a5:cd:fe:
52:1a:44:93:02:64:52:12:b0:63:81:42:72:f3:58:96:4d:26:
34:df:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:06 2025 by rpki-client