Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: 1tcMuXakQ8uWEO9PRlsS/uc/h5gM7a3v2WEA9ZdivOw=
Subject key identifier: C1:A0:32:9E:03:9C:2B:08:30:99:5B:CE:26:AC:28:95:01:D7:A1:9A
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 0197B7458A89486594987764B60729CBC46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: RR6vWb/J7ELhPXUdwWzk+DfLAm2IdIgy5K8pseG7rxk=)
2: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8a:89:48:65:94:98:77:64:b6:07:29:cb:c4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=c1a0329e039c2b0830995bce26ac289501d7a19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:96:32:34:cb:08:d2:15:46:99:c5:3c:31:
67:4e:1f:53:aa:af:c1:2a:7c:ca:53:2c:d3:fe:1e:
4e:08:ca:9d:99:3b:a5:9b:a8:80:60:ff:bc:a1:c0:
ba:31:3f:c0:8a:f7:cc:2c:df:08:1c:05:28:52:82:
2d:0a:19:3b:cc:d2:43:be:eb:52:10:88:0a:df:d8:
6e:54:d8:a1:00:de:0a:d2:af:ee:96:48:34:67:2f:
f4:f9:fe:14:53:60:34:6f:79:89:7f:d0:d1:d7:d6:
95:0b:8e:2b:98:a4:31:60:58:21:9b:cb:bb:a9:d7:
36:b0:4f:57:19:7e:4a:3b:e4:df:6c:65:f4:18:96:
30:d3:6e:8f:fd:1b:9a:4d:93:3e:b3:37:4b:b1:62:
6b:32:05:2a:99:34:cb:1d:ed:23:e7:ab:51:2a:51:
f6:69:d8:25:45:cb:37:85:cc:91:e5:9d:32:59:a1:
1b:c8:c0:74:71:6e:71:b5:c7:74:c7:3b:38:bf:d4:
34:b2:82:d8:9b:e0:f5:eb:bd:81:ea:0c:4d:52:55:
ba:35:15:93:52:50:8a:38:2f:83:06:bd:f1:d7:33:
34:ca:78:ed:eb:e3:23:d6:4b:e1:df:f9:37:35:c8:
1e:ab:53:2e:0f:ec:e8:7f:bc:b6:70:e9:af:30:25:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A0:32:9E:03:9C:2B:08:30:99:5B:CE:26:AC:28:95:01:D7:A1:9A
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:43:b6:07:97:70:97:4f:05:95:6b:54:b8:e3:c2:dc:20:3c:
cd:ad:bb:97:73:87:cc:74:be:20:5e:6f:0f:72:15:85:49:52:
12:9a:39:cc:95:2e:ed:c8:1a:e0:55:60:d9:2e:90:ab:42:3d:
12:0e:76:de:2b:d6:18:fa:c8:09:e1:28:8a:1d:7f:27:fd:03:
41:e6:84:66:0a:e4:5d:f1:5c:2f:ca:73:bf:a6:03:9c:53:ba:
f9:f7:39:64:a5:bc:00:dd:3d:50:08:2f:f1:5a:a7:09:41:77:
e9:a6:a1:5c:c7:7b:b6:dd:d3:b3:5c:1c:21:58:25:4b:fb:c1:
2c:2a:a1:90:65:e5:bd:6a:f4:2c:7e:fd:d2:a5:34:7c:96:f1:
58:db:34:28:37:ca:95:8c:49:47:cf:2f:ba:61:12:5f:ab:a4:
60:7f:79:22:30:9b:5f:34:05:8b:2e:4d:f0:1c:43:df:50:96:
c8:ed:da:75:af:e6:9d:ee:95:49:10:38:ba:e1:9a:39:ab:92:
d9:c6:82:88:70:cb:49:d6:90:a9:96:a7:66:77:32:20:a7:63:
e2:2d:69:8a:41:0d:07:0e:c6:5d:31:f7:d3:11:f2:d6:19:ea:
7b:f9:84:7c:51:bc:43:e4:80:b5:9f:33:8b:43:f6:bc:da:ea:
10:84:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:53 2025 by rpki-client