Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File: 1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier: 3Q8g1VscBs7g38NsTMzWUFq08xREm4dna8wpHiey1zg=
Subject key identifier: 00:B3:D4:C9:53:FC:95:09:A6:43:20:C5:DA:0A:C2:F5:7D:C9:EE:E9
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 0197BB9022A957686FA6F93062E5C846DABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number: 102C
Signing time: Sun 29 Jun 2025 12:01:14 +0000
Manifest this update: Sun 29 Jun 2025 12:01:14 +0000
Manifest next update: Mon 30 Jun 2025 12:01:14 +0000
Files and hashes: 1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: xIj26MZzQv9XWKHTaNJjBHwEy+aYLP7Hh5l8YrzNZLc=)
2: EjxEvyFrbjIutBBjgjTn5G6eW5c.roa (hash: dmAYBtW0oaeyULNatDjSeKws5fd+ZFknimkAFUD4KMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:22:a9:57:68:6f:a6:f9:30:62:e5:c8:46:da:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Jun 29 12:01:14 2025 GMT
Not After : Jun 30 12:01:14 2025 GMT
Subject: CN=00b3d4c953fc9509a64320c5da0ac2f57dc9eee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:8e:45:da:e8:76:fc:5f:80:e8:14:ec:b0:
97:92:50:ea:cf:6e:58:16:28:49:6a:d8:cb:5c:f4:
35:8d:f5:55:8a:a5:1a:9a:63:4f:9d:8a:19:3b:35:
0f:f4:01:6e:1b:c4:c8:62:ae:ec:70:ad:7c:46:84:
a8:4f:a2:d7:51:5e:5d:5f:da:da:1f:e6:3a:11:5b:
a3:5b:6c:b8:bf:89:bf:10:96:93:ad:e0:aa:cd:e7:
2a:2f:9d:a0:14:66:6e:6e:d5:8b:ec:66:03:d5:bc:
5e:7f:30:c5:d8:f2:48:3d:2a:ea:e8:71:55:dd:f8:
7b:58:7c:a3:0c:36:cd:11:34:3d:d5:64:a2:38:87:
66:5c:26:b2:fa:b7:52:44:00:6e:e9:09:fc:a1:5d:
b4:93:12:57:01:86:b6:7c:6c:c4:38:6e:63:1d:9d:
a6:83:53:c4:d1:c9:e0:4a:b0:30:0f:38:97:52:ff:
01:ee:1e:4c:3a:b8:f5:72:5f:ec:1e:01:ab:b8:a9:
d1:c6:6b:67:83:98:47:96:64:c2:81:43:0d:03:f4:
14:59:e7:f5:54:ef:8a:38:ca:4a:14:f6:bf:ef:b0:
0a:8f:3f:50:08:49:9d:50:20:69:26:d5:cf:9e:4c:
27:3e:6d:06:89:94:e6:14:27:36:dc:b1:97:2c:82:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B3:D4:C9:53:FC:95:09:A6:43:20:C5:DA:0A:C2:F5:7D:C9:EE:E9
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8e:94:2b:f0:f5:e6:18:2d:ed:c9:8d:b6:58:24:cf:6c:0d:
40:8e:21:09:59:32:63:ff:38:52:7c:35:24:16:0e:b8:43:04:
74:a9:33:d0:95:b0:29:ac:26:9b:fd:e3:49:cf:ef:d6:2d:ef:
57:da:b6:92:58:2c:72:ad:11:05:5c:0a:82:6d:1a:ea:bc:ee:
d8:26:10:13:18:84:a7:8f:60:07:4e:c0:5f:4e:e9:23:9c:8a:
ae:ce:fa:4b:3f:0c:17:83:6c:39:76:e7:fc:1f:93:32:27:1e:
16:3f:41:6c:4c:4d:1d:3d:16:02:79:34:2d:85:11:e4:1a:b9:
0a:9d:f3:c9:cc:30:fc:24:f6:21:be:c1:ef:76:35:22:2e:a3:
02:5b:19:2d:09:69:a7:f9:d6:3c:51:cb:29:ee:2c:aa:94:8c:
c6:a9:c0:41:7c:9e:ae:81:bd:ce:09:26:d3:fa:f0:a5:5a:04:
c0:53:cf:cf:94:03:56:80:e0:27:ed:6f:e9:65:02:8e:30:80:
d5:15:9e:3e:47:d3:6c:75:be:64:78:15:fd:80:c9:8c:40:55:
89:fa:5e:38:08:00:9f:c1:1d:7f:e9:d8:2d:1f:25:74:4e:43:
30:4b:9d:76:55:aa:41:a5:e4:fd:f3:91:90:1d:e1:65:96:c8:
1a:1d:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:45:05 2025 by rpki-client