Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: mwEHMjl784gkKUnTDDlppzUSMnXGsVp+yojutsD9ykk=
Subject key identifier: E3:27:3F:55:10:A0:6F:7D:41:BB:68:5F:DF:55:FC:C9:66:DB:2D:4B
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 0197B70E8CE4AD97B303335D79B5ECEE0666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0A05
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: KbpPM/VE0HRrAXwJTf3EwBxtukHfPvAm/gdLgYPaudE=)
2: axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa (hash: L++63wCXKAgo0Nta63++qRFUhLIAbDFglc5Q/4n9sQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8c:e4:ad:97:b3:03:33:5d:79:b5:ec:ee:06:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=e3273f5510a06f7d41bb685fdf55fcc966db2d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:1d:dc:a9:d4:31:a8:a2:56:4c:f6:f1:d3:
f6:0e:e6:c5:47:2b:f1:2f:cd:19:a1:3a:dd:44:1b:
e8:55:e4:2e:7f:7f:68:aa:dc:f2:1f:1f:cd:61:df:
85:e6:64:4d:be:9d:92:f6:75:7e:ea:f5:10:74:cd:
17:57:77:40:99:c8:81:c2:59:6b:4d:ba:b9:54:2b:
a4:0f:3b:c2:e6:03:f5:76:e1:a7:32:9f:64:83:2c:
de:c2:01:98:72:59:8a:f1:48:be:c8:9b:7d:30:cd:
78:53:92:c2:81:8f:87:cd:3a:4d:79:07:64:e2:d8:
55:95:c0:15:f2:f7:a7:81:7c:77:14:45:d8:b9:11:
17:95:47:b7:d1:22:83:7e:c7:df:da:fd:fc:25:29:
e8:0a:27:12:ba:14:e6:78:34:e0:dc:a8:7d:cc:27:
e1:ef:6b:e9:d4:fe:05:6c:70:8c:23:6b:33:32:2d:
20:14:94:ba:a6:a9:75:8d:ad:36:3f:a9:c1:ff:f3:
c8:c9:9d:f9:f5:5c:fd:54:95:5b:0d:5c:02:f6:55:
3a:0c:11:14:3b:7b:f4:02:cc:cc:e5:05:46:fd:8a:
6a:c2:c9:36:cf:15:ea:a8:ac:2c:f6:04:9a:a2:f1:
8e:07:ed:45:e3:98:6a:ce:ad:4b:0b:2f:3f:6a:36:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:3F:55:10:A0:6F:7D:41:BB:68:5F:DF:55:FC:C9:66:DB:2D:4B
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:62:c1:16:15:f9:7c:f1:8c:ad:14:c8:6d:2c:f5:da:03:a6:
c5:80:53:83:04:2a:c5:71:d2:35:67:ed:44:54:9e:86:13:6c:
54:90:f7:86:63:b8:57:5d:f3:f8:55:f3:34:66:0e:b9:62:a4:
8c:7c:7b:2b:1f:32:48:87:bf:ac:b6:af:25:17:8e:32:7e:28:
45:7c:b6:6d:8e:b8:5e:97:30:5c:3f:eb:9d:92:b3:97:01:90:
38:0d:4f:38:51:38:85:5f:7d:cb:ff:19:fc:23:46:2b:0c:38:
30:ff:4f:06:35:69:b0:d4:12:82:68:3b:e2:07:61:d9:02:0b:
44:6c:a8:ee:77:39:00:cd:d2:29:aa:bd:d9:97:45:6d:72:74:
01:45:5f:01:ce:b5:ea:db:d7:c9:03:d1:3b:34:9d:b7:d4:0c:
59:fd:e8:09:e4:77:a8:9f:fd:31:0a:b4:f8:36:95:70:9b:4a:
0a:e1:44:cd:18:dc:47:cd:a5:45:16:67:5e:99:b3:1e:fc:5b:
ea:2f:98:48:86:01:47:79:02:a4:19:43:04:74:68:c2:a4:86:
06:ed:25:52:46:97:80:3d:a1:66:3c:07:b5:a5:e7:d5:92:a2:
2f:d5:ec:e8:17:4f:73:98:74:b8:89:98:d6:49:f4:8c:84:67:
4a:c2:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:13 2025 by rpki-client