Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: +agRmPE8SV4FEzEz+5cPpxsv4AOPzZ2HB1xNM36+h2c=
Subject key identifier: 51:E1:A8:A3:DB:A0:EE:65:59:24:EB:B4:E5:DE:E2:8B:83:E5:8F:7F
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 0197B820C92FBEA5E22637369E5E9DCE7333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 13EA
Signing time: Sat 28 Jun 2025 20:00:45 +0000
Manifest this update: Sat 28 Jun 2025 20:00:45 +0000
Manifest next update: Sun 29 Jun 2025 20:00:45 +0000
Files and hashes: 1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: KU64/oGcUPJPIHNiq6x+wsm/4D67CC0JKJFOB0Ta1IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c9:2f:be:a5:e2:26:37:36:9e:5e:9d:ce:73:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Jun 28 20:00:45 2025 GMT
Not After : Jun 29 20:00:45 2025 GMT
Subject: CN=51e1a8a3dba0ee655924ebb4e5dee28b83e58f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:1f:67:a2:93:89:44:7f:e9:d2:26:7d:1a:
7a:35:6e:24:cc:8f:48:fb:e9:14:b5:2a:dd:30:fb:
9d:fd:13:5f:11:9c:6d:ce:0f:b5:f8:f8:9b:13:23:
8b:79:b8:87:ee:4f:bb:1c:ee:fa:32:8f:d3:63:4f:
a8:84:1c:75:ae:4c:9c:cb:0a:de:48:1e:92:97:e5:
24:1d:1c:1d:a1:6a:86:2c:99:3e:03:d2:8b:f1:09:
53:04:7d:7d:60:b0:23:05:9a:f0:44:a5:4a:d2:b8:
b5:94:cc:e1:69:ac:14:fa:cd:be:64:c8:52:d0:70:
c1:7f:5b:f1:d1:7e:e2:7d:40:2f:1b:f4:e3:18:d9:
d1:fe:c1:46:14:82:ef:b2:cd:ee:b1:40:e6:a6:32:
c9:64:b3:da:9a:34:c1:cf:d5:ba:f6:e6:bb:aa:83:
07:33:55:a5:85:a4:b8:9e:69:4d:b4:79:cd:2f:1b:
b4:6c:03:d0:e1:39:1c:5b:81:1b:9b:99:ac:03:eb:
c3:0f:dd:b6:99:69:16:d1:33:11:a3:a3:9f:02:5e:
d0:0d:04:08:56:3a:98:55:a3:9e:a4:f3:36:b7:f0:
c7:83:ad:51:03:21:2f:12:3b:e7:81:22:f2:c0:99:
54:49:3e:3f:7d:a6:ad:fe:9b:19:98:bb:88:98:44:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E1:A8:A3:DB:A0:EE:65:59:24:EB:B4:E5:DE:E2:8B:83:E5:8F:7F
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c6:a7:60:2a:6b:1b:ac:8d:4d:fe:02:4c:91:fe:ad:bf:00:
b5:db:b7:3f:4d:ad:c7:7c:fd:a2:5c:eb:8c:12:27:1e:e3:8b:
06:6b:eb:3c:09:c9:39:55:69:16:d8:0a:3b:a2:e0:90:7b:a2:
21:f4:17:79:7f:47:93:5b:3a:0a:fa:ae:4d:0b:fa:95:64:0b:
61:8a:e6:30:9a:d8:81:f5:6b:32:46:b5:db:ed:05:75:f6:6a:
4d:08:28:f2:9a:87:15:c6:53:57:3e:d8:01:04:74:f2:82:63:
f0:19:18:78:13:10:7c:19:d8:d6:b0:9e:97:d2:96:c8:7a:ba:
4a:18:e4:8a:81:c5:a1:7e:d0:57:d0:9b:83:5c:51:16:b1:5b:
c8:5c:3a:cb:46:2f:de:1c:6a:d0:6d:c2:f7:16:bf:8b:4e:e7:
cb:14:b3:05:7e:ab:09:d0:00:08:cc:c8:66:02:84:03:7d:26:
1f:87:39:44:81:90:7e:97:dd:df:92:82:9b:02:c0:24:c4:d1:
5c:13:9e:00:74:0f:ff:ae:e4:49:a0:50:76:03:8b:d6:c3:80:
73:0d:d8:c9:bb:48:41:bd:9d:8f:47:f8:02:f5:ca:cb:bd:27:
f7:7c:c0:4e:7f:75:71:b8:28:98:b6:75:00:61:03:88:2d:07:
a4:ed:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:17 2025 by rpki-client