Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: ZXJO0S6wwaY7EJqYKbeRLEHkUauublYppJrCO2nfNhc=
Subject key identifier: FD:46:E0:AA:A9:D1:80:DB:69:86:5A:DB:A7:38:C5:3B:9E:03:44:DD
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 0197B7EA410263625AC413E922E7E3E19BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0D27
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: DXT+BsuVFaJUD6QvV0s1DzCBXXrZIjAQTMJkJ5YPdMA=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:41:02:63:62:5a:c4:13:e9:22:e7:e3:e1:9b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=fd46e0aaa9d180db69865adba738c53b9e0344dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:fa:df:32:e1:1e:02:4b:69:ce:8c:35:13:
92:c5:7a:f4:14:c3:30:ee:bf:38:6a:2a:7b:16:4e:
08:b6:1f:aa:0e:d3:2c:fc:c6:3e:ad:15:cc:f1:75:
90:3a:a3:e3:07:50:49:aa:52:fa:fc:5d:4a:0b:f3:
cd:ed:1d:17:c7:5b:40:42:54:9f:a8:40:9f:1a:d6:
0e:f2:24:65:c7:09:a6:49:bd:54:2d:5b:15:f0:45:
5f:63:ce:25:65:ce:1a:a7:fc:c4:17:e7:e9:e1:b4:
15:4f:59:4f:63:f6:69:72:f1:c6:58:6e:37:54:bb:
6b:47:64:2f:7c:a7:24:00:dc:93:27:19:09:af:05:
94:ca:fe:05:f8:2d:4a:d9:8b:e2:e8:f7:81:1a:47:
0f:5d:23:99:04:77:ef:88:3c:7e:91:56:3f:21:3a:
72:93:73:b5:c8:e6:3f:32:a9:a0:5e:c4:d7:6e:8c:
48:f6:fe:4d:fc:1c:27:47:9a:f9:37:e0:2d:d5:55:
be:1b:db:92:d9:af:7e:82:a6:13:1f:b2:6b:c7:d5:
7f:2b:10:46:1c:0d:ab:95:77:84:4d:e7:2a:23:18:
69:de:d6:9b:27:62:1c:13:b1:d8:37:53:98:71:5e:
1a:c5:08:c5:09:b0:01:81:e4:cf:3e:df:33:34:48:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:E0:AA:A9:D1:80:DB:69:86:5A:DB:A7:38:C5:3B:9E:03:44:DD
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9c:c5:b8:3a:16:34:ee:a0:cd:a4:d0:12:90:09:b3:49:e9:
52:67:28:9b:fa:47:d6:eb:4b:d3:c1:48:72:52:94:ac:39:a7:
0e:53:b5:42:12:e4:90:77:a7:e3:35:86:59:c3:57:f8:13:0f:
5c:c2:29:29:80:e1:64:84:73:ea:96:3a:e6:bb:fb:55:b2:1b:
81:e6:99:cd:ba:e3:ba:7d:34:c8:03:7b:c6:6a:c6:27:a5:b8:
a0:ca:d4:99:e3:9f:45:0f:51:9b:d6:ff:10:dd:d1:86:67:b0:
0a:a9:0d:83:ad:b5:2c:d0:a4:f8:85:2c:dc:4e:49:9e:59:a0:
09:ae:d5:13:de:96:50:d3:87:62:16:d5:d2:b7:79:ce:8f:94:
af:6e:8d:87:77:18:29:9e:cf:06:0a:12:83:65:02:76:ef:8e:
d9:71:c6:a9:14:86:bc:47:23:63:b4:30:70:ec:c4:39:c3:76:
c7:79:cc:ab:6f:16:c1:56:02:9e:60:9a:6e:d7:dc:0e:4f:e3:
93:78:f8:d5:16:62:56:c0:5b:31:a8:bf:29:8c:90:e8:78:56:
a8:23:ec:33:d3:be:ed:ab:ec:c0:8f:6c:b7:d9:95:35:b5:43:
f5:c2:65:75:66:cd:e1:b6:dd:a7:c1:90:cb:60:2b:f6:65:ab:
f0:d1:1b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:45 2025 by rpki-client