Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier: 3+F+dd+cXSnMdZxCA5/V3w/MziY4Q1nkdKlDm2JWxLo=
Subject key identifier: 7B:2B:14:BF:D3:EB:93:CC:BA:96:F0:80:10:D1:7D:2A:A9:08:79:DA
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 0197B77C68692BAB769906732703391E3895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: kC/TCecMEEHv4rGEFTFdoPD69lNqi7xgg/zgGaku4RU=)
2: FCnaaFMRUSsD-s93_AVnx22U1ao.roa (hash: 4tCe1gcr3PUaM9byeRkhDZQavz/cazZjqikDLI+wcCg=)
3: mAXlXNB9v-X9Wiu9xA-qkNOSmGk.roa (hash: oVGw8L/hb1uj03ZIPyJ/jrTD+46lhm6KM/O1Nxc9Los=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:68:69:2b:ab:76:99:06:73:27:03:39:1e:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=7b2b14bfd3eb93ccba96f08010d17d2aa90879da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:b6:af:09:b8:2a:17:50:d3:ad:de:38:b8:
1a:c0:31:b2:e6:c8:bf:66:bd:d6:f4:d3:6a:dd:a2:
43:9d:9f:4e:0a:b5:f3:f4:4b:03:f9:f4:37:aa:02:
34:0b:7b:d1:7e:d7:89:1e:e6:d2:47:92:3b:31:dc:
fe:19:5a:a5:be:6b:51:4a:c4:dd:9d:87:73:03:be:
3e:4c:0a:70:8d:f6:0f:5d:9d:e1:cd:74:34:2d:b9:
78:f2:5f:a1:bf:bc:f7:94:ea:e8:0b:32:ce:4e:dd:
f2:27:70:6d:60:8f:9a:31:00:9d:33:7c:6e:d3:49:
b5:06:be:67:06:4c:42:6a:84:01:4d:d8:e7:7c:4b:
d7:05:bf:64:f4:38:79:de:0b:9c:c1:f6:43:5f:96:
ec:1b:a3:48:55:e1:cb:ff:9c:0f:2b:ab:39:df:28:
7e:07:19:c9:fa:9d:54:db:b2:d9:43:bb:ae:07:58:
db:6a:f0:fc:b2:6d:85:1a:7a:a3:cf:ca:63:c2:f6:
95:e0:aa:25:ef:a6:43:a9:93:c4:ba:da:1f:a5:f3:
38:32:64:5f:7e:4a:68:e3:f4:9d:63:a4:26:7b:fb:
37:9d:3f:c2:dc:58:0f:be:50:99:a5:2f:6e:31:cd:
a7:1c:99:96:73:79:e4:e2:ed:e3:92:1c:7a:05:3d:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:14:BF:D3:EB:93:CC:BA:96:F0:80:10:D1:7D:2A:A9:08:79:DA
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:95:9d:79:99:24:ba:cc:70:7d:45:00:4b:dd:dc:4a:7d:18:
2c:96:fa:4e:c0:42:97:39:1f:32:ee:13:e2:d9:24:04:a6:2c:
f9:01:c2:32:b6:ad:b5:5b:d4:d0:40:36:b8:16:d7:03:a9:0e:
8d:8d:d7:32:1b:40:0c:79:4f:85:f7:cb:8d:46:48:0c:dd:e8:
da:18:c1:ee:bd:8c:88:61:69:63:cc:d2:aa:29:c4:bc:f8:93:
16:89:ac:61:95:10:85:62:04:dd:88:0e:fb:1f:9e:ba:36:b8:
69:2c:56:16:e5:ad:c8:8e:fb:ee:c5:18:52:35:35:a6:b4:18:
22:fa:6b:aa:98:46:91:e1:d4:8b:6f:5e:2d:31:92:b6:6a:7d:
5f:dd:3e:82:1d:d8:b3:e8:9f:23:92:01:76:47:78:67:04:a5:
2c:c5:45:71:0e:64:b1:9a:c5:7d:8d:82:57:aa:f2:26:7e:e4:
f8:4a:33:cb:58:20:21:79:d7:73:d0:33:43:5d:4c:96:e3:c8:
d5:76:34:70:42:ce:a2:60:c4:fd:67:20:07:0b:77:a0:0a:82:
39:e6:5f:e2:f0:0c:f5:0e:63:2e:b4:fc:04:e3:cb:9d:59:b4:
ca:ed:40:fe:25:93:48:f2:cf:eb:1d:65:d4:d6:42:e1:d8:37:
63:75:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:25 2025 by rpki-client