Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: wx4P5L4vlhQ/pcFr0t5JVQgzLxYq/k2ngqdIquBQH7Y=
Subject key identifier: 2B:E1:4C:F7:DB:6F:4E:FB:A9:34:84:55:80:73:13:5E:09:E6:3D:7A
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0197B77C9544173C2A6EE5527A7188D7751E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 12F0
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: oG0kt7ZxxBqQJVwU+284m4vBBtQUYvH+cTj3cEZTndU=)
2: skjABuaYQdSyDecgxOrBPzscPeU.roa (hash: kzk4xU92DAB+Vcg2V/rYHygGxD8dQRxlWxtwdylCcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:95:44:17:3c:2a:6e:e5:52:7a:71:88:d7:75:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=2be14cf7db6f4efba93484558073135e09e63d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:90:ae:14:6d:b9:19:c7:ac:7a:ce:01:56:
32:c3:fc:63:46:3f:dc:99:0f:5c:aa:3d:79:39:1c:
bf:60:37:b6:da:cc:3c:e5:9f:44:d0:53:8a:18:13:
38:23:5f:06:dd:ad:51:d7:35:64:8d:1f:ed:d0:6d:
08:d4:88:16:f2:9f:31:75:72:36:f4:cb:16:34:6a:
d8:98:15:95:b3:4e:0b:9f:82:98:1b:7a:ff:59:55:
8f:05:e6:7b:9c:08:23:4f:64:7e:2c:f9:49:90:30:
43:11:3d:eb:db:56:d8:b6:b4:e7:ed:ca:66:95:76:
8f:76:7f:c2:33:9f:21:39:ff:06:e1:f4:e3:3c:27:
2d:82:ca:2b:ef:b2:a2:83:0e:bf:01:c1:8e:d2:a2:
f2:49:7e:0e:15:a3:c4:0f:23:43:95:c5:5f:aa:4f:
bc:f9:e3:7c:1b:8e:6b:c4:c2:83:9f:5b:98:fe:04:
33:79:48:7e:a1:c2:10:fc:4f:dc:e5:9c:6a:3f:e0:
a1:c1:de:2f:b0:c9:a8:c3:c7:c8:b1:9a:6d:88:88:
38:d8:f9:90:00:da:28:3b:97:4a:63:29:7f:d1:92:
87:3f:61:2f:59:23:ad:4b:30:53:36:53:2a:97:c3:
72:62:0f:42:fc:f2:e7:2b:6c:e4:b2:f4:b8:52:71:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:4C:F7:DB:6F:4E:FB:A9:34:84:55:80:73:13:5E:09:E6:3D:7A
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:25:ee:61:26:e4:ba:58:92:4b:2c:3a:09:df:eb:3f:7e:43:
d4:dd:3a:42:1c:7e:d1:bf:5e:a2:55:0c:2a:f2:a6:15:d7:d4:
b3:12:a0:19:e5:29:c3:b7:09:dd:51:bc:24:f5:2d:3f:d2:16:
99:61:52:59:82:cf:ab:dd:b2:79:8b:5e:5d:ab:26:26:b4:1a:
04:ba:6f:ab:83:a0:c7:2c:30:61:11:ab:8a:af:ef:d1:66:67:
a8:23:6e:90:02:d9:7f:d8:fd:cc:4d:9b:5f:dd:60:74:a3:ba:
76:83:96:d7:ec:54:cb:95:ab:f8:80:00:49:0b:a8:7e:03:21:
95:36:a8:77:37:53:58:8e:b4:65:38:07:e9:dc:8b:a0:ec:18:
67:3a:8c:09:9e:56:20:6f:2e:19:80:ac:5b:b7:82:9b:e3:fe:
21:80:ce:fc:5b:21:1b:ac:db:99:dc:72:1d:2e:11:c8:bc:91:
07:f2:d7:42:c3:07:e7:75:d1:9f:04:c7:2c:0d:5c:90:c3:86:
db:a8:22:62:44:29:67:f5:b4:21:a3:56:05:01:26:18:18:4f:
a7:74:48:8c:c5:90:da:6f:f5:46:4a:94:04:0b:3c:b5:97:12:
c6:1a:f0:fa:ed:c1:da:2a:2c:9a:be:4e:78:85:8b:a3:cf:2b:
f2:d1:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:05 2025 by rpki-client