Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: RlAgv+98OzZNYeq86zeT4m6RbyWIGZtblF73F8OS848=
Subject key identifier: 9E:5B:F0:C8:9C:4B:31:E4:C4:0A:BC:20:77:5D:81:84:D8:3F:ED:F1
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 0197B6D751C355325402649C91E38A5E4490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=)
2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: Wx6lOz6zAYswQOnwXEm6Drq+eCdByKKVlevplvr7Sc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:51:c3:55:32:54:02:64:9c:91:e3:8a:5e:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=9e5bf0c89c4b31e4c40abc20775d8184d83fedf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:d9:2c:25:3d:7e:c2:a8:84:17:26:d0:e1:
19:5a:53:ea:3c:96:96:c3:e6:0b:c0:cd:af:39:55:
fe:ce:9e:c2:99:24:45:9d:b5:16:7e:62:3c:4c:24:
e4:47:36:1b:2f:a6:93:ef:65:46:78:67:db:c2:3e:
ad:ad:b4:16:98:ab:08:ee:40:49:e3:60:3a:30:44:
34:37:b2:55:c8:6e:81:62:ff:14:dc:8e:72:2e:0a:
0f:a4:ff:ea:a0:26:6b:69:9c:63:37:fe:12:bd:82:
21:a4:ae:95:d6:92:e0:63:e9:89:45:87:e7:b8:24:
f0:e1:94:9c:c9:a4:c5:ff:94:cd:dd:73:33:f0:c5:
7a:41:75:11:4d:a0:db:9d:4c:7e:9a:45:48:fe:59:
5e:6d:ac:78:20:61:17:e1:75:7c:f5:e1:42:68:c2:
02:76:e8:4a:f9:ba:22:56:de:db:ca:9a:e6:b4:e0:
e9:58:39:7c:00:b4:8d:12:92:7c:cf:b2:ca:4a:7c:
09:86:59:eb:2d:79:23:51:3f:33:dc:90:6b:e5:dc:
96:ef:1b:8c:1f:35:a7:4d:a6:3a:57:56:0e:77:36:
40:4e:54:cb:b8:4d:c0:72:a5:41:c8:d3:a0:19:56:
81:4b:12:3f:37:15:cc:82:ed:6f:82:e0:5e:73:27:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5B:F0:C8:9C:4B:31:E4:C4:0A:BC:20:77:5D:81:84:D8:3F:ED:F1
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:94:3d:69:be:62:9f:9f:e6:94:62:86:b5:b6:67:b8:c6:50:
21:58:4c:96:34:4b:d6:d7:72:68:5d:20:7b:7d:6d:2c:44:06:
c6:25:71:58:11:75:1d:f1:1c:60:be:9c:6f:f1:2a:19:5c:5f:
03:b1:f3:7a:c6:af:f8:25:fb:eb:ad:81:1b:f2:5c:d6:e8:c8:
c5:d7:5e:8f:16:67:88:11:35:f5:f8:8e:c4:6e:3d:5d:1c:9b:
a2:7c:f7:5d:a8:b7:c6:e1:2d:11:b5:60:8e:63:0d:0e:ed:09:
a4:fb:e5:5a:58:c0:16:00:8c:02:67:96:61:f0:bf:65:91:8e:
2c:15:aa:2d:f5:dc:f8:2b:15:66:1a:62:f0:93:19:8b:60:d9:
d0:ee:94:70:86:cd:47:a9:1d:c3:44:82:d3:a8:bc:18:6a:74:
1c:26:6a:ed:28:c1:cf:09:32:c0:7a:39:5c:fd:f3:dd:af:93:
fc:a9:7b:84:2f:2b:dc:cc:20:45:b8:58:8b:5c:45:48:8f:96:
01:21:b0:06:92:e0:db:41:87:22:14:65:3d:e2:c6:a8:07:4b:
b7:bd:40:56:97:4a:bd:d4:fa:26:32:d5:34:70:97:65:38:af:
b4:12:f7:fb:21:5b:e4:a1:5e:9c:c9:cf:26:44:ea:86:01:cc:
1d:d3:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:13 2025 by rpki-client