Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: +1m9JLq1Gr4QsONaTJ0DOBUttlfqUH5s8NCOOEmGofg=
Subject key identifier: D7:B0:72:42:73:EF:3C:64:88:FC:4E:D4:63:30:C9:E9:A9:6E:81:DC
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 0197B82133ABB807F93AEA597D8D3A5791A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: octCgvaSGbgEzyX6y9/LvaD/qICjkgu0L13+Dq7cyl8=)
4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:33:ab:b8:07:f9:3a:ea:59:7d:8d:3a:57:91:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=d7b0724273ef3c6488fc4ed46330c9e9a96e81dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:b3:0f:84:a1:44:a3:20:66:a7:48:0e:f1:
c1:08:e1:85:09:7e:83:85:88:69:37:0c:8a:6a:71:
af:f5:18:7c:20:52:26:41:50:37:80:4b:b8:43:5b:
4d:7a:e6:e8:f4:7f:63:e0:8c:30:45:f8:e6:c6:00:
b5:ec:00:47:78:94:c9:07:a4:a5:99:d9:74:3f:a1:
ec:07:2f:e8:21:cc:2b:14:60:f4:3a:5f:eb:97:59:
06:7a:c4:fe:f1:92:be:64:e8:78:0c:58:e2:63:07:
6e:0a:d5:dd:75:0d:3f:44:27:01:91:89:d0:b3:d3:
c7:ef:3c:65:74:ec:87:2a:fd:46:d6:57:45:dd:81:
e5:e0:6c:ea:80:be:87:3c:9e:7b:6a:9b:95:c7:2f:
2b:e9:f7:29:09:26:89:6b:bd:35:a9:1a:57:83:67:
08:67:2d:4f:4c:13:be:2a:f3:4b:71:94:20:26:ff:
eb:cd:6c:f5:86:ab:56:b9:e4:01:dc:83:6f:7c:1c:
71:0a:ad:db:46:02:bb:eb:e0:40:5c:1a:30:cd:d5:
1e:49:24:b9:c3:f5:2c:34:df:e2:0a:34:61:1f:e0:
38:94:f4:16:37:9b:9b:17:8e:f8:09:37:28:bc:55:
48:fa:f3:0d:8a:9f:56:09:17:c7:4e:81:89:6a:15:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B0:72:42:73:EF:3C:64:88:FC:4E:D4:63:30:C9:E9:A9:6E:81:DC
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3f:61:96:e8:30:87:60:5d:e6:c2:fc:b7:c5:90:ad:8d:30:
cc:6a:8e:f2:7b:5b:bb:2e:84:f6:57:2a:21:fc:f8:c8:9b:6a:
c9:71:08:4c:aa:10:07:05:2b:02:12:cc:42:7f:56:3a:0e:0f:
9f:17:d0:9b:0a:c9:92:0a:91:d7:72:f0:35:59:39:04:e4:ae:
1b:92:b5:99:01:11:68:81:fe:52:3d:81:34:a2:c4:dc:6a:fa:
79:38:b7:41:65:0d:72:83:8f:76:29:58:4c:93:de:67:8b:4a:
d7:b1:25:fa:c3:93:38:62:80:82:01:35:78:54:64:d9:d8:a8:
21:30:01:ca:38:39:49:a9:18:dd:f0:90:b1:2e:d9:0e:57:d6:
44:f3:a3:69:cd:5b:3a:47:ed:21:ca:33:55:51:8b:d0:ef:50:
93:2a:5e:6c:e4:e4:4a:9f:4a:a0:d4:30:26:9b:96:c4:7d:7f:
e1:36:f5:d4:82:14:9e:37:7d:42:77:41:5e:a7:fe:e7:8f:3e:
34:b8:73:6f:33:13:30:5b:9d:28:5a:95:08:33:31:9b:52:98:
99:14:74:f1:af:c8:20:1b:12:81:8d:23:0e:8e:98:3c:89:3d:
75:84:91:a5:41:37:5a:ca:3d:27:b3:9e:a8:bc:6e:ce:94:f3:
b2:6a:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:27 2025 by rpki-client