Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: ZtEfC6JncMJcw2n1dOrYRN/EYxHkNkTjOH9F2CsMbV4=
Subject key identifier: 6F:3D:74:31:C8:26:F1:D2:3A:FF:BB:1D:D3:D3:0F:73:70:C5:B7:85
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0196C3BA0328A29706195FDA2F2D038A5A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 102E
Signing time: Mon 12 May 2025 09:01:09 +0000
Manifest this update: Mon 12 May 2025 09:01:09 +0000
Manifest next update: Tue 13 May 2025 09:01:09 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: zMKfUJmnn0ylpFdnc4FQ/bG4GancqEWuSqA0opGjanQ=)
2: 59tRD3uqVaacfvjHXHYi92MaFhY.roa (hash: ux9P4oihcogCzRuXGICOJuqp+Eh/j68654s9FrT8h3Q=)
3: CsxLtBLWM8Pmns5SWZf40-eGOOU.roa (hash: rUwofVDJEMTSS274xS+jm4HkdoblsLXgH6qdPdvIYa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:ba:03:28:a2:97:06:19:5f:da:2f:2d:03:8a:5a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: May 12 09:01:09 2025 GMT
Not After : May 13 09:01:09 2025 GMT
Subject: CN=6f3d7431c826f1d23affbb1dd3d30f7370c5b785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:ff:10:ed:50:64:63:e4:6d:18:38:72:bb:
21:cf:13:8d:89:47:74:9f:50:ab:08:cd:be:a3:25:
66:50:20:b5:e7:e8:ca:e0:c2:6e:66:cb:d8:1a:db:
57:6a:86:55:2a:89:79:03:29:16:9f:bd:a5:8f:50:
46:ed:31:9d:dd:42:ae:d0:2c:c0:be:bf:1d:11:7d:
d9:60:b3:37:c5:14:fe:e3:24:91:9c:55:f7:a5:07:
14:b5:c5:fe:c9:43:3a:3b:4a:fb:34:7a:f9:76:69:
7c:a3:e0:52:06:d6:da:e6:af:6b:93:0d:4e:94:7c:
10:c0:ad:5d:43:4e:ed:12:ee:a7:69:52:73:45:42:
0d:36:d0:b2:82:09:3d:3d:d9:b1:70:9b:f5:3b:d7:
80:95:c1:e7:bf:e7:25:b3:57:7c:e8:47:61:f2:36:
9f:92:3d:5d:d4:67:49:4b:8a:c9:16:3a:c6:5b:12:
4f:1d:e6:72:94:96:a4:36:89:08:77:df:3d:bd:6b:
87:88:55:9f:d7:68:79:cd:c6:b9:88:60:e1:5d:09:
b9:9a:2e:cd:e8:3f:2b:55:ad:0d:16:6c:f9:b6:c9:
7f:61:db:27:e4:d1:bc:ec:65:de:02:fb:bf:89:9f:
92:68:54:cd:b6:fa:66:db:83:36:04:73:ed:df:0d:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3D:74:31:C8:26:F1:D2:3A:FF:BB:1D:D3:D3:0F:73:70:C5:B7:85
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:71:7a:eb:e9:6d:ff:37:34:02:0c:ae:e8:1e:f7:3f:e4:ec:
26:0f:81:a7:55:c3:12:61:12:1c:f7:3c:13:9d:03:73:93:c9:
ac:4e:40:7a:41:73:ab:c5:6b:e9:af:45:aa:b8:db:33:49:4c:
36:36:77:96:fe:4e:c3:72:c8:c5:83:b2:3a:a6:6f:6c:7e:77:
39:ab:45:70:4f:08:81:86:40:ff:0f:42:5c:3f:7d:19:e0:61:
27:17:11:f9:78:78:44:ae:5a:9d:b9:21:7a:7a:c5:57:d2:d3:
92:0f:1b:ca:6d:94:2c:cb:c8:b7:86:91:40:1b:9a:97:14:5a:
29:46:f3:0c:cc:17:37:aa:03:27:5c:fe:ee:15:ae:2b:40:d8:
03:c4:01:32:04:46:d4:30:03:8c:ec:e6:16:93:c5:78:dd:0f:
da:35:37:63:8e:43:13:fc:c0:53:06:f4:bd:e5:a2:00:1c:d4:
5e:8d:02:f2:58:e1:a0:fc:b5:6d:7b:cc:9b:39:55:2e:38:3c:
ba:c0:87:73:e0:29:98:f5:e7:ef:98:64:37:a6:43:05:35:95:
84:98:a7:00:7c:0c:7f:26:b8:fa:6c:b5:7f:bb:06:bf:50:5f:
ea:48:17:d3:95:39:41:1a:0f:1f:75:1f:9d:b2:51:fb:70:1c:
96:85:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:17:17 2025 by rpki-client