Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: p4xvaZbdrF8kr+zpDx1ivn6/+eYFkUjecygkpNjvPnI=
Subject key identifier: A7:F1:D0:66:28:5E:30:7D:35:EB:D8:7F:90:A6:3B:70:F3:29:F9:5D
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 0197B6D729CF9A106A8474D5018EF899AF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 06FC
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: aSEGBmN/Fs7yUoXcDW/eCyCy3TSw6u8HZTexjKmMc/s=)
2: 6r4H1bkA6HQBHKzqndzkbGN-fLc.roa (hash: aHRcxKC7eM9v241orSIrtl55ETVWmoxd9czIqtemS2Y=)
3: yZKr3MkjOL236i5PxJm5JOrjeZQ.roa (hash: P3Sg9X6HUsmoHVeRhUz452rlFrDzI8l8SS7MoZsVvQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:29:cf:9a:10:6a:84:74:d5:01:8e:f8:99:af:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=a7f1d066285e307d35ebd87f90a63b70f329f95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:1e:31:0b:56:1d:8c:35:08:52:eb:ba:d5:
5d:ec:82:2b:c9:9a:b9:2a:1a:98:88:85:74:7d:1a:
5b:28:a3:b8:3e:f8:47:2f:ed:eb:36:ec:4a:68:c1:
6d:c4:80:8d:bb:a0:e6:56:89:47:43:98:86:d1:da:
b8:5a:d6:43:a8:7d:9a:84:70:dd:ea:5f:44:d2:e8:
1c:bb:5c:0e:9d:dc:44:70:49:30:a0:82:4a:d5:fc:
89:69:a2:a7:ff:0a:cf:0a:17:e1:a4:28:04:9c:69:
69:17:3a:dc:2b:02:eb:ac:e2:84:bf:f9:1f:30:4d:
8d:26:f3:cd:8b:c7:92:c2:58:51:53:47:ea:9c:d0:
78:57:2b:df:f0:49:9e:9d:32:00:02:98:f8:fa:24:
a7:dd:2a:04:7b:c1:3e:12:80:33:90:06:39:c8:cf:
a4:33:3e:f9:44:f6:11:83:d5:61:1b:05:08:62:22:
ca:78:26:9e:b8:35:b2:c6:ee:66:7c:3a:3d:50:c0:
3a:d6:a8:36:bd:80:05:56:36:cc:18:d5:63:5c:ba:
a5:c8:00:87:4b:a7:18:d5:9a:3e:6c:63:65:4b:2c:
1a:be:c1:6b:ad:4f:11:00:34:d1:83:7c:ed:3f:6b:
c7:36:82:44:ff:0e:9f:d7:08:25:54:74:78:e5:9e:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F1:D0:66:28:5E:30:7D:35:EB:D8:7F:90:A6:3B:70:F3:29:F9:5D
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:36:60:ed:08:13:17:d2:00:8c:50:6f:8c:09:8a:10:ba:10:
a5:3c:74:fc:e7:37:53:20:4e:23:ea:d0:0f:91:ac:f7:fc:d3:
cd:a6:1c:a1:b5:b5:01:be:e2:d5:58:b3:18:43:58:16:6b:2a:
0b:8f:c8:cf:d5:5a:66:2f:e7:01:98:bf:99:76:73:d2:b8:a1:
bf:db:58:aa:73:56:a4:62:eb:7a:3b:fd:31:ae:e7:f5:c2:e9:
ae:33:77:a8:62:8e:df:1c:1b:6a:d4:75:f1:b5:90:6d:d4:f1:
a3:89:fa:f2:81:d8:d8:4a:13:64:30:65:db:e6:71:13:c0:84:
39:7a:8b:d3:41:97:56:c3:ff:2f:bc:e6:a5:13:5b:e6:37:0a:
d7:c0:06:c9:54:90:33:bc:93:9b:56:48:cb:be:66:0a:f8:28:
5d:ec:d5:0f:cc:8b:78:7b:a4:dd:c9:78:8c:c6:5d:6b:18:0b:
f9:e4:4d:7f:84:37:68:d0:8d:d2:48:73:98:88:6d:64:31:bc:
ca:64:db:01:5d:da:4e:00:e1:38:73:28:73:33:c7:3b:9f:54:
fe:c0:f2:e4:55:6a:37:ad:60:17:69:98:a1:15:ba:d7:05:7c:
af:bb:74:cc:b9:f1:05:b3:0e:31:56:b7:53:58:09:d0:b6:28:
58:f9:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:12 2025 by rpki-client