Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: acvOaAYrYFyZBTmkD7lhi14CC+oib5OivvafuCuOuqg=
Subject key identifier: 51:9C:1A:35:94:36:A7:26:C8:80:ED:1F:0F:D2:A3:92:2B:E0:5F:8F
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 0197C537C5AC007FC6C9E70A834A4EE0834A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 154F
Signing time: Tue 01 Jul 2025 09:00:56 +0000
Manifest this update: Tue 01 Jul 2025 09:00:56 +0000
Manifest next update: Wed 02 Jul 2025 09:00:56 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: vxYtorwHVW/sQ2yZnzXh+AQC8lIz5TZef4uQNhJ3bek=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:c5:ac:00:7f:c6:c9:e7:0a:83:4a:4e:e0:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Jul 1 09:00:56 2025 GMT
Not After : Jul 2 09:00:56 2025 GMT
Subject: CN=519c1a359436a726c880ed1f0fd2a3922be05f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:90:07:95:45:c0:81:8c:7a:2d:15:9e:21:
05:fe:71:26:a4:64:61:19:15:bb:db:2a:ac:5c:11:
90:ac:6b:75:04:66:39:66:4a:fc:30:4c:08:82:f0:
29:87:ee:e4:5f:04:87:66:12:12:d0:88:42:62:87:
2e:6f:3e:19:36:34:63:9f:a8:56:5b:35:14:76:d2:
9d:6d:b9:ce:c7:49:51:81:d0:94:18:aa:73:8f:ed:
aa:bb:f7:23:77:3e:9b:a5:02:3d:09:f4:31:09:a6:
f9:e6:4e:79:7a:c6:cc:94:cf:9c:84:6c:cc:77:38:
62:1a:b2:e5:80:45:ee:07:1c:37:6a:8c:7a:05:d7:
04:96:2b:22:c2:2b:f7:eb:0d:2b:ab:a3:47:dd:73:
85:49:2d:39:6c:aa:db:30:20:f2:87:db:9a:82:47:
ab:67:9c:6f:ff:d1:db:89:2a:a5:b5:32:52:d0:f5:
c7:2a:e3:b1:21:6e:d5:e4:c6:dd:b8:ec:58:ea:29:
f2:8f:2b:d0:b5:c6:de:e1:c2:96:6a:25:9b:a9:37:
12:b4:b8:5e:bd:9a:ac:b6:f5:f7:25:c9:12:fd:58:
cb:7f:d5:c6:b5:44:fa:e3:e2:e5:2a:52:dc:65:c3:
f9:9e:dc:8d:6f:d1:76:6c:52:60:36:0b:43:df:bd:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9C:1A:35:94:36:A7:26:C8:80:ED:1F:0F:D2:A3:92:2B:E0:5F:8F
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e2:50:aa:c5:3a:1c:d4:fe:0a:a5:83:84:f0:06:d1:62:ab:
f8:7e:27:64:e3:f3:5d:8e:f7:75:e5:3f:bd:34:f7:21:f8:8c:
88:a9:50:89:9d:59:32:dc:8b:e7:5f:5b:6f:cb:fc:0e:04:b4:
d3:12:38:32:8f:38:50:33:9a:d7:92:51:95:9d:9b:46:91:1e:
10:cf:04:ad:29:70:d3:81:80:2d:b8:9f:37:93:c3:20:04:b1:
72:e5:44:bb:79:f7:ec:8c:99:e0:72:83:9f:84:a3:f1:04:76:
c5:3b:6a:2d:a6:bb:01:a7:ff:b6:71:20:06:6c:07:4c:e7:ab:
fe:a6:0d:d1:e9:68:94:cf:7d:62:fa:a3:c7:15:3f:e1:e1:03:
77:14:cb:85:b4:6f:22:49:7d:31:99:dc:69:69:b9:bc:ea:22:
be:ae:f1:04:e8:31:3d:c4:c2:8a:a8:9e:21:d8:65:ce:e5:a1:
1e:0c:42:45:27:02:e8:13:7b:c5:e0:b9:04:5a:2d:e4:2e:6c:
13:aa:f5:5c:05:a3:d9:0a:61:d2:1d:da:c0:80:41:5e:6e:f6:
d0:5d:87:7e:5f:56:28:05:87:f7:94:87:4a:4c:d9:ad:cc:11:
cd:df:41:16:f5:ae:58:7b:0a:0f:72:04:53:59:d4:26:18:f0:
ce:47:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:51:11 2025 by rpki-client