Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: Pw4AG4IEYX9G1yvgHeOeNGJzwmUbL4MlI8oppqQtXcc=
Subject key identifier: 51:58:8E:60:2E:52:88:02:C9:7E:86:20:04:AF:FE:70:28:58:25:62
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 0197B77CA35462DEEF1931AC17CB9AADFE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: NlR1/Sc6JnFZMfxgynp0Z5f8ANFl2FK735twVtqwUKI=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a3:54:62:de:ef:19:31:ac:17:cb:9a:ad:fe:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=51588e602e528802c97e862004affe7028582562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:7f:51:bc:c4:c3:f1:db:28:b7:40:be:9f:
0f:7f:72:0e:8e:5f:da:d7:49:dc:72:2d:ff:1e:59:
2b:09:5d:d8:2b:97:82:12:9c:97:62:88:8b:bf:8f:
64:dc:f9:7b:44:0d:4a:bd:04:bf:0b:d5:d2:47:5d:
73:65:d8:6b:5b:30:f9:ea:b5:bb:9d:e2:c3:a1:f7:
3a:93:e1:6b:55:e7:52:e8:05:fa:94:59:a5:09:28:
30:9a:d0:34:ba:69:de:5c:47:dc:fe:bb:83:18:b9:
6c:8c:22:7c:4b:db:6c:5f:8b:87:8c:fd:d7:3e:b5:
05:b1:70:70:ac:3b:44:3d:b2:d5:73:d0:09:87:b0:
17:dd:dc:0f:6a:29:9c:de:17:4e:30:35:76:61:3a:
5d:8d:1b:39:15:12:3c:26:d6:f8:ef:64:4c:bf:1e:
ae:45:d2:90:a9:dc:6d:62:dd:f9:34:2a:42:f2:6a:
eb:d0:40:f2:51:9b:8d:9e:05:29:d3:3d:7a:12:8a:
ef:97:5d:2c:c0:51:e7:00:4f:f1:47:ff:1a:09:ef:
63:ae:c8:1e:a4:3c:88:0c:0f:00:b1:2f:56:97:1d:
9d:e7:b7:0f:d3:56:49:df:46:c8:79:73:d3:77:65:
3b:54:22:b6:33:80:bc:86:b2:4f:3c:e1:92:a4:d6:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:8E:60:2E:52:88:02:C9:7E:86:20:04:AF:FE:70:28:58:25:62
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:40:58:7a:9f:7a:28:98:3e:3c:66:49:cf:41:69:6d:fa:
ab:16:38:5f:eb:96:7c:ed:27:71:c4:df:5e:ba:cb:82:ab:23:
f4:da:62:1a:e4:ed:98:4c:bd:12:83:d2:74:1b:63:c0:5d:77:
99:33:3a:02:74:a6:11:f6:59:4f:60:43:52:4c:a5:94:8c:21:
95:d6:55:e2:61:a5:2a:d8:03:3e:67:66:47:4b:27:78:fd:e0:
6d:0e:7f:45:b5:18:c0:4f:7e:d4:3c:cb:bc:07:8f:09:46:3e:
e8:36:a4:b7:8a:3e:c0:78:ce:44:21:23:ff:ab:01:d1:9e:b1:
b9:e6:48:91:6b:06:81:f7:fe:e6:fa:4e:2f:b4:63:3a:93:89:
a4:d8:31:b3:0d:d1:80:cd:12:30:31:cb:e5:f4:04:bb:e1:07:
dc:da:d4:38:92:5c:51:05:b6:13:13:a8:f1:64:ba:a6:39:e5:
4d:f5:f4:01:80:13:89:84:17:b4:e8:cb:3f:e9:aa:34:56:ad:
17:b1:0c:84:07:f6:8d:fc:50:50:5d:f0:6e:71:22:a5:c8:7a:
0b:4f:53:96:d0:b2:f2:ca:ba:43:4a:57:20:c3:47:2c:45:a9:
a7:c9:e4:9a:5f:15:79:2b:67:d9:5f:54:17:d2:53:13:09:ea:
9d:e5:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:10:58 2025 by rpki-client