Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: jN1Ky8u4VaFnYGXr6i7LIEn2LtKwDF4GVfziMDVyVNg=
Subject key identifier: 2E:1C:65:07:64:64:27:B7:A2:A9:75:E6:7A:E1:C2:6F:86:FA:E0:9E
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 0197B6325E938488787E026DDC66C36E31EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 0F60
Signing time: Sat 28 Jun 2025 11:00:43 +0000
Manifest this update: Sat 28 Jun 2025 11:00:43 +0000
Manifest next update: Sun 29 Jun 2025 11:00:43 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: QKl40+trcguQxRi1n5SpRgI30BUR9pWgdTphSLMRXzc=)
2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:5e:93:84:88:78:7e:02:6d:dc:66:c3:6e:31:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Jun 28 11:00:43 2025 GMT
Not After : Jun 29 11:00:43 2025 GMT
Subject: CN=2e1c6507646427b7a2a975e67ae1c26f86fae09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:7d:de:09:10:3f:af:66:83:12:d6:e8:a4:
9b:99:4e:ee:7a:8a:00:db:df:d3:9e:6a:2b:9b:83:
c2:01:20:84:bb:63:c7:49:ae:2c:20:01:b6:af:67:
fa:f5:32:2e:40:8c:e7:bd:5d:10:f4:98:a1:b3:43:
db:cb:7f:c1:4b:c3:1b:f5:d6:d1:62:43:63:24:db:
85:72:4e:3e:1e:ab:cf:33:22:07:11:20:e1:63:89:
6e:30:99:43:9f:0f:28:57:b9:25:0f:e0:07:75:3f:
78:90:33:3f:66:3c:74:80:a5:ea:a4:ed:f8:aa:fa:
75:6b:49:9e:fd:2b:c1:8f:47:9b:33:75:c7:4f:cb:
cb:82:57:49:24:ae:3a:e7:8c:c7:5a:3f:1d:bf:99:
2f:9a:b8:de:8a:0b:5a:5a:28:4b:70:cb:6e:e0:34:
9e:05:79:8b:7a:9d:6d:16:a7:93:f1:16:f3:32:9c:
94:0e:fe:34:46:53:32:71:38:e7:97:36:6e:b9:8e:
a2:51:67:6e:aa:bd:74:ba:76:09:aa:12:60:9a:60:
fa:51:f1:25:43:fc:6d:6a:4f:a7:a0:42:ff:80:b8:
e7:60:73:ae:9a:8f:67:f4:88:44:93:3a:bf:ab:29:
70:22:32:34:be:05:5c:74:4c:67:e3:65:1b:44:7e:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1C:65:07:64:64:27:B7:A2:A9:75:E6:7A:E1:C2:6F:86:FA:E0:9E
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:50:b5:dd:0b:27:22:d4:b8:48:46:ac:11:99:bd:3b:92:b2:
9a:62:fa:70:db:d5:92:11:64:f6:a7:4a:5f:c7:42:b2:6c:32:
c5:b0:a2:f8:2d:9c:d5:94:49:b5:f5:fd:5d:95:0f:57:06:86:
e9:f8:81:8a:13:48:31:fb:67:69:a6:4e:68:90:f4:81:ed:02:
8b:96:db:ee:53:5f:4c:3c:dd:37:43:c7:be:53:80:2d:6c:91:
42:63:a0:3e:6d:64:56:eb:13:a9:81:5b:d5:d0:e2:e7:42:b7:
98:a4:b4:0b:02:07:d3:6d:71:00:b2:02:6c:e3:0d:af:a5:7c:
34:c0:58:23:b7:49:c2:12:32:70:06:ef:f7:dc:df:08:f5:10:
d1:2d:d3:20:f0:d5:e0:92:ed:aa:5f:9d:ff:73:de:dc:83:28:
0c:2d:85:c5:78:86:2a:48:ba:24:8b:4c:d1:96:25:79:fc:9e:
56:93:a0:f1:ac:8d:51:99:34:7e:e4:73:ad:65:6c:b1:06:f1:
d9:c4:a2:4f:6a:fb:b6:ef:b1:f5:00:48:72:d2:b3:66:8b:05:
55:70:b1:1f:98:ee:ef:77:3a:9d:bc:8f:2f:5d:0f:fe:b7:ec:
a7:3c:6e:cf:0d:e1:f8:30:8c:8d:b9:1c:9a:6b:bc:d7:7b:d7:
eb:af:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:25 2025 by rpki-client