Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: y4twol7kyrlhWNXWkpTHlwTVMjJ7Spoiuf6GxVuw770=
Subject key identifier: 97:01:B1:A3:FF:88:C7:71:FF:6A:1E:76:8C:FD:9A:66:BB:1F:4B:77
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 0197B70ED82F436199A8EE729246B6426AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: LXpeSGkabce2xMtxzKQygglqRpMPoVczuiDEO+9QZV8=)
2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d8:2f:43:61:99:a8:ee:72:92:46:b6:42:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=9701b1a3ff88c771ff6a1e768cfd9a66bb1f4b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:dc:6d:8d:70:88:df:20:96:d1:17:af:80:
5b:52:a4:ca:c4:b4:ff:26:fe:2f:9c:92:fe:0a:04:
02:92:ce:e3:f1:23:9f:f9:57:eb:67:eb:ad:fd:53:
0f:30:30:32:cf:7e:07:af:71:db:cd:bb:7d:59:ed:
97:bb:a0:9d:26:9f:12:ca:24:a1:0e:2f:49:b5:5f:
5d:8c:e4:42:e7:c3:f1:61:c2:3c:2f:9c:98:7a:e5:
dd:ca:97:c1:b9:1c:b6:f4:89:b7:ed:b6:f5:5e:0e:
ea:d6:b5:d4:cf:00:e8:a3:c1:2c:cf:20:99:b3:f2:
e6:b8:03:b8:a5:41:be:3a:cb:13:4c:81:af:44:84:
31:3d:db:cb:f2:c9:ff:c5:59:31:33:2d:8c:c1:69:
39:e6:c5:c6:e4:b0:cc:ad:34:7a:75:f3:5d:7c:81:
8c:d7:69:60:94:2a:71:bd:84:e0:77:78:84:f7:27:
70:2c:d6:38:78:66:00:16:a5:b1:a7:f5:d2:3a:10:
fe:b6:cb:e9:48:0a:1c:58:8e:b6:bd:dc:4c:c4:70:
df:41:91:55:cd:57:2c:bc:19:6e:2d:99:e1:71:18:
6e:e3:05:78:6b:83:fe:35:99:d2:1e:c5:02:e6:fe:
26:b6:58:97:bf:3b:0b:0b:00:0a:4e:1d:5c:98:77:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:B1:A3:FF:88:C7:71:FF:6A:1E:76:8C:FD:9A:66:BB:1F:4B:77
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f9:91:b0:0f:d7:be:fd:67:1a:c3:f2:a2:5f:9f:f9:eb:7e:
bf:76:36:7a:d4:01:cc:e8:8f:5e:b7:76:7f:3e:84:fa:7b:6c:
09:f8:ce:8e:8a:e4:d8:a8:89:92:b6:cf:d0:3e:d4:2b:ee:bc:
a1:6d:d4:37:6d:02:f2:df:aa:3d:3d:5c:e7:a5:39:18:be:43:
6a:8e:dd:31:ee:ac:b7:40:07:f2:fc:2a:b7:cd:04:55:f6:bd:
61:00:68:ba:a4:58:27:aa:98:a4:3c:09:70:8a:16:64:f3:1e:
97:66:dc:9d:a5:da:bd:14:66:30:8c:59:20:3a:00:f3:37:1d:
cb:b3:0c:4a:16:0e:37:5b:95:68:d4:84:c3:50:b9:fb:10:46:
3a:93:1d:ba:e4:03:d3:b4:07:10:7f:65:9d:bc:ed:ff:45:5b:
2e:5c:b9:12:cd:58:ba:9f:e1:4f:c4:23:3d:e1:20:18:35:2f:
f5:74:66:8f:4f:c6:8a:d2:06:d1:c0:c4:d5:50:0b:c5:87:4c:
75:3b:6b:40:4b:3e:04:b2:b3:96:84:b6:8f:10:c3:f4:14:e3:
80:37:53:31:61:0e:57:73:e4:73:aa:a9:f3:4f:a1:63:dc:5e:
fd:c2:ea:16:4f:f0:0c:ec:f8:dd:f2:c0:5c:e5:05:ff:72:77:
9f:af:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:05 2025 by rpki-client