Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
File: 1V0PiIjtySCGjGYWIvZDdE5uVsg.mft (raw, json)
Hash identifier: 1u+v0lbcX0MtytnXrsihKCGOkRGPtEirMqQv8HhwKKs=
Subject key identifier: 06:2C:A6:FF:B5:7F:7D:26:6A:D9:12:E7:35:DD:09:D5:B7:55:4C:A7
Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
Certificate issuer: /CN=d55d0f8888edc920868c661622f643744e6e56c8
Certificate serial: 0197B7B37CCDEED63DA940EA2FC5E004AAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
Manifest number: 061D
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: 1V0PiIjtySCGjGYWIvZDdE5uVsg.crl (hash: lRSXExs37yTnXc9LIxxSJ4xh6w9fN9LznSpFpzWG/js=)
2: A4__EnOrPLl7kNPioZRAoADCUG8.roa (hash: j1tmGfrA6af9fNUjjjOcwfDjish7mieiLkXoaO5wFfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7c:cd:ee:d6:3d:a9:40:ea:2f:c5:e0:04:aa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=062ca6ffb57f7d266ad912e735dd09d5b7554ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:e4:c3:92:85:50:60:b4:69:69:91:14:2d:
e3:df:bc:e3:9c:8c:88:1a:79:9c:3b:b3:14:21:e0:
26:e1:11:da:6d:22:46:95:e8:d9:56:df:ba:4d:bc:
8a:cb:e2:de:a0:f5:df:98:f1:e9:74:d6:f6:8d:6c:
5b:7e:1b:43:db:bc:62:8f:d9:e8:25:b7:97:06:bd:
d1:07:16:4e:7c:aa:14:e9:0d:92:da:fd:7a:4d:35:
23:da:08:22:d5:1c:3d:7b:44:e0:d6:85:7f:68:a5:
2f:2b:76:29:51:72:a6:f6:77:d0:0d:ac:bc:95:51:
94:84:bc:52:98:70:2c:cd:ed:99:0e:20:39:b8:4a:
a3:a9:cd:96:c7:86:28:e1:b5:f1:42:49:7c:80:77:
b8:f1:aa:e7:23:c5:55:dc:b9:cd:e1:1d:a9:85:c8:
50:9c:cd:b2:19:28:d2:90:d8:70:fd:b9:e3:77:84:
13:9f:96:32:4b:54:64:45:47:5c:6e:00:bf:c5:26:
22:93:ea:55:56:36:5d:74:70:98:57:21:11:dd:0b:
63:f1:9f:e2:06:ae:5d:79:59:24:a6:bd:03:82:75:
02:f0:04:2b:89:d5:99:08:e9:5d:e2:cf:9a:71:6d:
f7:ac:45:60:ac:cb:1f:b1:03:8a:47:dd:44:50:ad:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2C:A6:FF:B5:7F:7D:26:6A:D9:12:E7:35:DD:09:D5:B7:55:4C:A7
X509v3 Authority Key Identifier:
keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:db:74:1a:d6:17:9a:0b:09:97:b9:72:18:6a:b8:55:39:
e9:4d:ad:15:a3:98:6f:a8:2f:f6:6a:6c:05:00:28:8f:68:c6:
59:94:ca:e2:03:11:c6:c7:b3:f8:72:e9:be:9a:00:27:86:f2:
f1:08:b4:d1:23:98:e9:82:bf:65:89:75:b9:7a:b1:f3:22:0d:
06:38:ce:79:d1:c0:fa:f5:75:41:50:da:b5:75:44:39:0a:c9:
31:24:fc:95:93:1f:cb:7a:a7:b3:a7:6f:23:5f:b5:32:83:0e:
95:1d:e4:c9:9f:84:84:e5:1e:a4:70:1d:8b:50:95:17:95:27:
89:fb:6c:d1:cc:0b:2a:51:d3:1a:21:00:74:ec:f8:21:41:dc:
65:d7:64:9a:04:e1:cd:0b:85:a9:32:bb:69:71:7b:d0:82:b7:
39:4e:d1:26:e4:04:02:aa:e3:f1:99:76:c6:e3:a3:60:86:33:
f0:53:60:45:c6:00:8d:ab:40:07:d3:2d:1a:b1:84:8d:7c:ea:
a1:76:52:24:c6:86:3f:ce:3e:86:1a:cd:40:34:8e:87:f0:52:
b4:78:26:ee:3a:2f:c5:22:44:f5:35:b0:f4:99:b0:00:3d:28:
e5:89:60:ed:83:85:d0:ba:5f:69:ea:21:5e:67:1d:5b:1a:89:
8e:59:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:44 2025 by rpki-client