Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: M8+gv9BwEmfEzj7JuJRq/bbFRNIQt5M7QLuoTw3n8rY=
Subject key identifier: 63:F4:AA:65:32:F9:24:C6:6A:2E:B2:0C:15:B3:C4:1A:03:3C:70:C3
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 0197B6A242D0538B25EBB7E117F3D4674EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 06EC
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: dKBKgn7wkRK7yygAoDpyGR5Sw3LndhnG9B3ZGoNwrsw=)
2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:42:d0:53:8b:25:eb:b7:e1:17:f3:d4:67:4e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=63f4aa6532f924c66a2eb20c15b3c41a033c70c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:b8:7d:90:67:d6:e0:84:9d:56:95:93:89:
78:86:ad:a7:ee:fd:e2:aa:b0:dc:8d:7a:97:3f:5d:
1f:0d:0f:d7:0d:8d:74:89:dd:22:04:58:03:be:47:
86:69:8b:3e:13:64:23:dd:a3:1b:e0:fd:f6:d9:53:
45:6b:e6:5b:4b:cb:2e:e1:63:28:b4:9e:39:36:03:
da:2f:74:75:7f:73:77:96:d0:74:99:d5:58:fd:9e:
e0:43:7a:04:71:f3:7e:95:fb:31:96:bd:70:58:e7:
e0:ad:7c:bc:66:5e:26:23:15:24:96:1c:1a:b1:3a:
7f:b4:be:02:d0:e7:73:7a:65:be:f2:a3:02:75:ab:
a5:2d:3e:64:38:0d:42:38:c5:06:c3:0d:99:a6:ba:
54:b0:62:7e:b9:bc:b5:7c:2a:f7:bd:39:64:bc:fe:
7a:fe:a4:51:d5:85:2c:46:22:d1:a5:48:a9:2a:ba:
4e:91:88:47:ce:44:38:ae:f7:ce:79:a6:82:2d:72:
8e:2f:69:b6:ec:20:58:a8:2e:07:44:65:a7:13:a9:
6c:db:b3:bb:b7:ab:66:f1:f3:48:35:eb:c9:f6:6d:
cf:4a:46:92:3c:5a:87:b7:b0:43:7f:6c:b7:74:5d:
46:ef:56:52:50:41:23:08:82:3d:ac:33:10:8f:a7:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F4:AA:65:32:F9:24:C6:6A:2E:B2:0C:15:B3:C4:1A:03:3C:70:C3
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e7:de:12:4c:a4:e8:bc:f2:8f:cc:92:78:cc:3c:98:e0:58:
ec:48:82:6a:1a:9d:7e:10:ca:d9:1e:47:93:3d:43:4a:84:ee:
01:d7:1a:0a:93:f2:6d:76:dc:a9:05:63:34:cb:22:ec:8b:fe:
4a:9f:a4:a6:8a:73:3f:20:eb:7a:8a:07:bd:f4:ab:d8:21:8f:
d6:95:d2:4d:a0:57:66:b8:04:c6:21:90:34:45:54:31:f9:b5:
21:8d:36:ea:12:1b:ab:ce:52:19:b3:d5:ab:86:f7:ef:f3:2f:
c4:2a:53:41:e8:d2:9a:31:d4:92:b3:87:30:20:34:ff:3e:31:
af:5f:e9:6d:14:dd:7a:07:01:e2:0a:70:af:08:26:be:30:76:
8a:fe:77:05:84:97:b3:e9:5c:5c:0b:59:7f:ac:6a:bb:90:30:
c0:4e:64:f5:79:90:b6:99:d3:1d:10:71:74:b7:b4:7e:9c:b1:
da:36:6d:31:0e:6a:75:80:d5:98:c0:a3:54:96:4d:3a:98:35:
69:05:9a:a3:05:99:6a:2f:4e:5c:1a:5a:ed:f6:8f:84:4d:b4:
e4:9d:13:d1:ba:7c:85:1f:5c:36:a7:ea:89:29:4f:6c:50:61:
41:1c:6e:73:99:bd:6b:68:4a:db:73:6b:3c:83:ce:15:57:b7:
a0:7e:32:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:23 2025 by rpki-client