Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: ly2ntCBM8Oxlab87xSxqck1YFo2beWIjH0Qwj/j0320=
Subject key identifier: 19:96:0D:14:65:71:CF:D9:DE:D9:C2:47:6E:81:56:45:37:4B:00:DA
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 0197B8C60DE20EE3BFA0C832A20E4B755F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 01F9
Signing time: Sat 28 Jun 2025 23:01:16 +0000
Manifest this update: Sat 28 Jun 2025 23:01:16 +0000
Manifest next update: Sun 29 Jun 2025 23:01:16 +0000
Files and hashes: 1: TCiOUS2lOe-d-inEeAtaNF22X3k.roa (hash: H5jxU1+mIYAsjzlbjYeTvSFiOWLCAxpo86ZAHMuzEhY=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: 9kgxpEqJm3RdflAF1CDpUSgvnr7SLEjS2wtFj9YAQe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:0d:e2:0e:e3:bf:a0:c8:32:a2:0e:4b:75:5f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Jun 28 23:01:16 2025 GMT
Not After : Jun 29 23:01:16 2025 GMT
Subject: CN=19960d146571cfd9ded9c2476e815645374b00da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:b8:8a:f4:09:23:dd:c1:77:74:c6:0f:b8:
91:8d:da:47:0b:0b:25:2d:04:e7:50:ec:22:b3:b1:
60:60:a8:b3:a6:f8:3e:4a:45:0d:2e:40:e3:c9:40:
6d:55:49:42:8f:9c:8b:e7:55:14:51:fd:3d:bd:77:
72:dc:15:0f:ef:f9:0d:46:d4:db:db:73:cb:75:04:
b0:09:26:a6:f1:8c:a8:c0:46:2e:29:f3:75:17:a2:
a2:1c:21:85:93:32:20:4d:6b:37:3a:26:ee:7a:61:
94:76:33:05:e0:a5:c4:90:0a:43:b9:56:a7:c2:8b:
87:c6:4e:aa:d7:12:59:a0:31:4d:64:2c:e8:58:b6:
0a:d9:98:95:9b:ef:b4:cd:45:a5:30:e1:1e:4e:68:
da:32:c1:a7:35:d8:65:df:20:50:9d:67:11:a3:45:
29:d3:25:ff:24:c5:6e:09:14:2f:cc:ce:c7:97:56:
1a:40:27:11:3f:a4:3f:2b:de:03:04:01:b7:7c:dc:
33:94:2e:7a:43:a4:ee:68:7e:e4:58:fb:94:06:f4:
59:2b:9c:ae:4d:70:e7:26:33:a5:ed:27:89:f4:f6:
cd:91:5a:63:69:63:55:dd:9f:a8:c9:89:fe:97:46:
c3:9b:8d:c3:7e:aa:68:94:90:e0:3e:52:c3:48:6e:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:0D:14:65:71:CF:D9:DE:D9:C2:47:6E:81:56:45:37:4B:00:DA
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:02:b1:9b:7c:45:1f:a4:17:dd:2a:6c:fa:88:25:88:24:ff:
3e:64:f5:c2:d9:8f:d0:41:07:a7:36:28:03:35:2a:00:01:90:
4f:37:75:34:5a:d7:d9:65:db:85:cb:d8:38:26:21:dd:72:0c:
18:8e:96:99:85:3c:f5:e8:43:3f:c8:d1:fa:b5:bc:54:f3:2d:
ad:2b:31:44:91:3c:a3:b2:95:2c:c1:75:52:0d:84:2e:b7:8a:
4a:15:90:53:40:4b:a5:56:72:86:dd:c7:46:01:0f:27:59:ca:
44:f0:79:d9:8d:d3:8c:37:d9:77:e5:7b:b5:a9:4b:a4:4a:74:
90:63:4c:df:2f:6f:db:e0:58:20:e7:5a:7c:0f:16:5a:43:f0:
53:5c:2c:9e:39:75:67:2c:e3:66:e2:4f:c0:f3:2b:5d:e3:d2:
40:e7:ce:1b:10:5b:7b:26:7a:65:2c:ef:b4:c9:63:75:17:59:
6e:94:4c:3d:bf:b3:05:18:a6:3f:21:d2:e3:a0:eb:8f:7e:95:
a1:35:f3:86:9d:a0:e9:0f:3f:7b:7d:62:41:3c:d1:75:6f:e2:
c4:f6:8c:28:14:1a:22:64:d5:32:87:f7:24:46:89:49:1b:4a:
b5:02:14:58:b1:16:aa:3e:f5:3f:e7:ef:b8:65:bd:c0:b3:4b:
32:bb:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:42:43 2025 by rpki-client