Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: nTUkJu3kmDvoIk20ZNZzIc4PnRMNDo6Z85kT6lZzU9M=
Subject key identifier: 67:94:57:5D:C1:B4:59:14:2A:78:1B:81:89:76:46:91:46:11:29:E9
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 0197B7EAC9B0A232DD988E957E075AE6A20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 10DD
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: 4CivjZk/fFAyOyAXpYYJvX1OwjnyPgq6dz4Y/3U+rZw=)
2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c9:b0:a2:32:dd:98:8e:95:7e:07:5a:e6:a2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=6794575dc1b459142a781b8189764691461129e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:6d:6f:44:0f:5c:68:15:18:4a:d9:21:bd:
95:68:c3:d1:24:37:48:f7:7d:80:87:c5:a6:01:7c:
f6:f3:28:6e:5b:fb:9d:84:b4:b5:3f:3a:c7:72:b0:
dc:5f:7a:5e:07:e1:0d:4b:79:54:b2:78:3f:70:7d:
e2:20:6f:41:95:7b:c8:b9:63:49:e6:07:03:0b:a0:
77:1f:41:73:f3:aa:f7:19:3e:63:87:8f:46:31:e1:
73:48:86:1a:f6:9c:f9:f8:ce:2b:2a:2b:ee:94:5a:
33:15:96:82:08:40:19:5b:aa:35:11:50:07:21:71:
f9:f5:4e:2b:05:68:28:d4:de:36:fb:ce:c3:63:25:
3c:87:24:17:fa:d4:20:7c:46:73:c4:df:4c:95:e0:
f6:a1:f3:60:2c:bc:2b:52:ac:c7:3e:95:a7:71:02:
b7:90:4e:21:a4:a8:b7:9c:7e:cc:9c:a1:92:8a:77:
6f:de:24:21:18:cc:37:63:f5:40:63:5f:82:53:e8:
3e:a0:11:19:8a:f7:77:03:f3:1d:17:dd:97:e6:88:
3f:f1:e7:ec:b6:ae:70:29:3a:48:e4:f8:d5:ad:2a:
f7:68:42:a5:de:91:b7:82:48:1b:e3:cc:71:e8:7d:
c3:b2:40:5b:91:55:2e:cd:55:9d:86:96:c0:0f:1f:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:94:57:5D:C1:B4:59:14:2A:78:1B:81:89:76:46:91:46:11:29:E9
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ae:8c:74:fb:ac:06:7a:5a:07:2d:64:89:c1:53:75:50:a0:
d4:06:6a:57:0e:5e:cb:0a:39:be:a9:1d:59:d6:5f:f8:5e:12:
6c:a8:3e:cb:d5:34:cb:19:b0:c9:ee:25:a2:2d:93:85:a6:83:
a9:b1:25:1b:aa:a2:72:52:fb:00:b3:66:f7:91:01:70:e5:99:
c9:27:ea:93:06:d2:f4:bf:45:40:84:bf:12:c2:e9:36:2a:c1:
37:12:d8:a4:ff:05:c5:5b:c0:f2:7f:22:07:9f:1f:8f:57:62:
42:1b:29:e2:dc:0a:66:23:f2:d4:25:58:35:b5:73:cf:19:0f:
02:ba:f0:d7:11:b0:ce:81:8f:1d:a5:78:6a:da:64:fc:3e:b3:
04:2d:5e:79:a8:2c:c5:05:15:12:87:cc:40:c5:89:44:7c:f8:
82:c2:95:73:09:f1:ce:25:4b:ff:4a:20:1c:b3:5b:49:dc:4f:
00:ae:87:1d:5e:e3:4d:2b:5f:45:2f:8f:f7:b5:61:91:f9:81:
a7:ba:2b:93:d6:65:e7:40:9e:c9:75:d4:a3:54:0b:ca:fe:fa:
bb:8d:8e:01:05:2d:37:7c:fa:ee:e3:75:1e:b8:89:d3:fd:6e:
7e:0f:d6:97:42:e0:16:07:d5:1e:6e:29:95:1c:01:eb:68:c3:
ae:c7:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:11 2025 by rpki-client