Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
File: 1sSAuslyYH_atgVZOoS4NkxqsbA.mft (raw, json)
Hash identifier: pqOZQk2XiavABxObTlgFZIDgSBb6kqAypHjwHux1CVo=
Subject key identifier: 84:F8:60:02:C5:90:28:EF:F9:46:D8:7D:58:81:C5:55:12:B5:37:36
Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
Certificate issuer: /CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Certificate serial: 0197B96AD0917412A1B917AA896E6A92E167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 02:01:14 +0000
Manifest this update: Sun 29 Jun 2025 02:01:14 +0000
Manifest next update: Mon 30 Jun 2025 02:01:14 +0000
Files and hashes: 1: 1sSAuslyYH_atgVZOoS4NkxqsbA.crl (hash: xTYCyEXteJwBmEQXBtcR/m8FWpujQ4e4iXmy4T4f4QM=)
2: qSALXGZS-mStlLpg8jjf75z_AxA.roa (hash: JTmyN1Wglwwaiz8Y4z1qxOyBmB8F9ra5LEBRhnN+ctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:d0:91:74:12:a1:b9:17:aa:89:6e:6a:92:e1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Validity
Not Before: Jun 29 02:01:14 2025 GMT
Not After : Jun 30 02:01:14 2025 GMT
Subject: CN=84f86002c59028eff946d87d5881c55512b53736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:a9:14:db:7f:e7:d8:9b:8b:db:23:4c:06:
03:71:0d:3d:02:57:35:f8:18:3c:0f:bd:2c:d3:66:
30:26:b9:5c:f5:7a:c8:d1:31:d0:17:3f:f7:c6:1d:
97:58:b3:78:d4:ac:47:61:4c:5c:55:db:cd:f5:60:
c7:2b:bb:53:82:d6:5d:15:c2:a1:b9:25:57:ba:20:
3d:3c:06:33:c4:9c:8c:59:be:a7:cf:b1:e0:62:58:
92:b8:38:41:bd:d8:e9:48:92:fb:82:a2:51:21:c7:
b3:a4:8f:8a:af:8b:30:2e:bc:83:fb:f0:09:b0:95:
42:fc:3b:f5:19:b4:73:ab:27:85:d5:36:86:7b:c6:
3c:ec:a0:9e:bd:53:a3:3f:02:a9:09:cc:11:fd:6d:
3d:79:b1:bd:3e:3e:d7:c6:07:93:5f:1e:6e:b7:1b:
c9:8e:8d:8f:00:e1:e8:73:a1:00:a2:7a:76:1b:64:
21:26:a8:48:d4:e1:07:40:ae:d9:a2:16:f8:1e:60:
e2:16:3f:6a:b6:0d:13:da:dd:2a:30:2b:15:98:b9:
d3:d9:e5:7e:0a:00:fd:a0:52:53:2e:d4:a2:ed:1f:
3e:fa:70:9f:54:a2:63:5a:40:09:e0:58:73:a5:8a:
78:54:37:c2:4a:cb:35:6a:d5:3b:a0:a1:f0:f9:64:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:60:02:C5:90:28:EF:F9:46:D8:7D:58:81:C5:55:12:B5:37:36
X509v3 Authority Key Identifier:
keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d3:69:de:e0:d3:e1:fa:44:1a:ae:f7:e4:39:8f:bd:f0:af:
55:fb:af:06:b4:d0:ec:48:49:58:62:bb:5f:9d:56:fc:b5:32:
c1:a8:c4:98:fe:64:9d:96:46:d3:62:69:24:42:dc:49:00:cd:
67:8a:42:26:e5:bc:98:6f:9d:b2:75:8a:3f:3d:17:ba:91:78:
d5:a6:56:8a:d0:80:88:9c:11:b8:86:d5:e7:d7:5f:0d:00:f1:
b5:af:c7:86:72:0e:2a:9a:f4:9a:d4:5e:47:ba:a8:c6:3f:7e:
3d:9d:16:32:35:35:16:69:36:93:b5:43:85:3d:61:04:e0:34:
55:b8:19:ce:57:54:ab:a8:04:74:cb:10:94:32:5f:fa:df:42:
ed:7e:db:8d:a7:b1:2c:25:32:18:7a:e3:b0:93:c3:27:c3:0b:
9a:e8:0a:0c:3e:68:4f:43:0e:c2:f3:11:46:ba:82:e7:39:0c:
79:55:83:1b:a9:a8:26:ec:94:89:5e:37:82:e2:68:c0:bd:7c:
36:8a:a7:de:d6:be:66:a0:18:95:01:93:e1:c4:cc:2c:8c:99:
59:08:dd:00:3c:5f:42:0a:4d:e1:89:e2:25:27:84:91:47:88:
81:ec:c8:c5:07:e8:ab:49:53:12:a4:16:9f:05:47:37:3c:3b:
d0:4d:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:10:16 2025 by rpki-client