Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: Ysx1qrCqohTiMb2YXkAQwtaFQ2+i7AtQMcvcOeLMqyE=
Subject key identifier: 37:37:C3:44:00:4F:CB:30:87:D1:53:EA:22:31:3A:64:A1:DE:24:E2
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 0197BFA4583A761DF47DAEB505D5A347CC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0CAC
Signing time: Mon 30 Jun 2025 07:01:48 +0000
Manifest this update: Mon 30 Jun 2025 07:01:48 +0000
Manifest next update: Tue 01 Jul 2025 07:01:48 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: jTdLKc+LkkzMdIUhE3OLixKTSrHKugwglyqunYRLix8=)
2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:a4:58:3a:76:1d:f4:7d:ae:b5:05:d5:a3:47:cc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Jun 30 07:01:48 2025 GMT
Not After : Jul 1 07:01:48 2025 GMT
Subject: CN=3737c344004fcb3087d153ea22313a64a1de24e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:43:20:f2:f3:fe:2c:56:0b:a6:72:21:f2:
90:d9:0c:43:32:64:04:14:83:6b:d3:e0:a3:3a:cc:
9b:be:8b:e9:04:f8:aa:fa:46:7c:13:97:84:a9:71:
02:05:66:74:5c:5a:48:6f:dc:14:4c:d1:c4:a9:4f:
d0:49:74:29:d6:18:5a:2c:cf:94:d9:d0:5a:01:79:
f3:7a:c8:08:2f:cf:c7:cc:6b:75:63:60:35:b3:08:
68:38:6b:1d:62:48:55:6e:05:f2:8a:88:05:57:63:
85:85:03:a0:4a:89:33:b1:1f:c1:34:8b:9a:05:6b:
4c:0c:c6:99:6d:bc:de:e2:d8:dd:79:d4:6d:8d:a5:
63:cc:34:0a:5c:3d:0a:c7:3b:03:80:d8:91:6d:d8:
c1:48:cf:36:90:66:8a:0b:9b:89:4e:73:ca:de:42:
2a:dc:da:88:4c:b2:34:d2:ad:87:d8:be:72:79:41:
cf:9f:85:16:6b:70:30:71:d5:df:11:f2:30:94:8c:
94:02:32:41:d4:d1:25:01:e3:54:ac:35:b1:32:f6:
07:9b:7a:a4:fb:03:59:08:4e:96:d0:73:8d:79:ec:
1b:fe:b5:0d:c2:4c:9d:37:87:1e:dc:65:25:15:bb:
4c:4f:29:ac:2b:a8:45:ff:9f:39:38:e5:3a:c9:71:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:37:C3:44:00:4F:CB:30:87:D1:53:EA:22:31:3A:64:A1:DE:24:E2
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:38:6e:45:87:ff:b5:86:36:f9:f3:90:88:40:67:27:2a:3d:
4a:66:0a:7e:fd:3d:be:ba:1b:51:ea:e1:e3:77:f8:44:b7:ae:
07:f8:84:fc:52:7c:57:82:6c:94:21:fe:6b:b9:66:04:08:dd:
09:6d:f5:91:a2:17:40:16:ea:6f:9f:c0:d7:2a:f2:59:fd:4b:
25:8a:72:63:ac:e1:aa:cc:c2:57:ff:54:e4:e4:63:7c:f6:55:
62:85:88:4e:a8:aa:5a:d3:b5:5c:89:95:ad:00:e8:f6:4a:05:
d4:bd:c1:2b:d9:fe:1d:1c:63:51:8f:99:e5:7c:7d:ee:87:79:
b0:d2:dc:8a:10:23:92:07:5d:b7:cc:45:fd:a7:88:c5:1a:28:
34:52:73:f0:e4:d7:00:c9:01:a5:90:bb:bf:ec:60:7e:ea:b7:
16:0f:5c:58:c5:b0:38:67:31:78:af:5a:63:ef:6d:48:cd:8c:
93:7d:1c:51:89:2c:e5:88:3a:a8:fb:c4:c7:c7:e1:51:62:87:
17:2e:0a:e4:86:82:0c:ce:c7:21:85:e1:6b:6e:c5:ba:fd:ff:
70:ae:61:60:3f:47:b1:17:11:a4:0c:86:1c:50:33:41:00:3b:
95:14:b6:43:81:06:fd:83:d3:c3:16:d2:af:4c:ef:05:cd:7a:
1c:23:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:12:58 2025 by rpki-client