Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: +dF/zoCRisMMQ4iU7qxTeuN6+JxSsmC587XfvSXcN3k=
Subject key identifier: 05:9C:92:21:AD:F2:95:F8:4B:53:01:2D:E0:72:A7:A1:38:91:3D:F9
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 0197B6A1240237D2295EA7C0F83159B7EECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 12DC
Signing time: Sat 28 Jun 2025 13:01:43 +0000
Manifest this update: Sat 28 Jun 2025 13:01:43 +0000
Manifest next update: Sun 29 Jun 2025 13:01:43 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: 7mleNpTBDtnWzNXcBAkdZYUS/SJkANXm5B8nkGkupZc=)
2: tZasuPD6JQA_ahjp5Ij5d_DOYcw.roa (hash: m55Anp1468NYkjmZHCfthwEnWOmLpA6A1Rbb77d5auw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:24:02:37:d2:29:5e:a7:c0:f8:31:59:b7:ee:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Jun 28 13:01:43 2025 GMT
Not After : Jun 29 13:01:43 2025 GMT
Subject: CN=059c9221adf295f84b53012de072a7a138913df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:ab:56:b9:f8:fd:52:d1:95:8d:86:49:a3:
e4:0f:83:d0:b9:85:f4:73:74:3e:fb:12:c7:5c:bf:
59:85:c2:2a:e6:31:04:fe:21:01:c0:31:69:39:23:
63:d1:df:74:71:16:eb:60:38:1c:c8:fb:ed:61:5c:
9e:a8:29:d5:97:40:1f:0b:fc:4e:f5:42:de:af:a4:
8e:d3:80:d5:d3:ab:8e:4d:0b:66:45:8c:6a:73:6b:
87:64:26:d2:cd:42:97:f4:02:86:3c:e0:da:98:db:
3b:55:00:a1:28:ef:b9:35:64:e8:0b:ae:c4:36:7f:
b0:51:88:9e:83:90:ce:71:ba:9f:e8:65:e4:27:9e:
85:fe:82:a1:c9:77:af:21:1c:36:1c:c3:b0:4d:bd:
0b:b6:92:be:6b:31:4a:da:03:bb:41:8c:3d:b2:26:
21:45:a4:84:ae:35:b7:43:47:96:40:39:fb:fa:e5:
dd:4b:59:d5:66:f8:06:0c:1e:8c:98:9d:3a:44:08:
3b:96:c1:d2:82:55:2b:d9:62:77:6f:fe:e5:68:bd:
47:e2:ed:66:f4:93:01:1c:2d:4e:79:a9:51:1e:c5:
e0:6f:20:36:29:a3:7d:6f:ee:02:75:0e:e4:3e:08:
50:af:29:63:cf:32:02:c9:0c:cc:59:a6:c6:4a:89:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9C:92:21:AD:F2:95:F8:4B:53:01:2D:E0:72:A7:A1:38:91:3D:F9
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:26:eb:3f:50:88:bc:15:75:16:9f:0c:0e:24:1c:2e:d1:
6a:ad:30:b3:63:4f:0d:1b:eb:d4:87:db:36:2c:12:84:ab:a5:
b4:10:a5:d6:1e:e7:0c:80:53:b4:05:f4:19:fe:80:42:f6:a2:
29:79:bb:97:b0:aa:c0:45:8c:ba:6e:d3:fd:6c:86:50:43:ac:
3d:58:05:8d:59:91:fe:75:8d:a4:0c:35:77:62:2c:a3:ea:f0:
0d:0d:e7:9e:57:9b:da:47:f1:8b:91:97:40:e2:89:d5:08:e3:
c7:ef:c1:de:7c:4c:1b:b6:95:48:aa:64:12:ea:63:b2:27:cf:
85:28:52:b9:ed:ac:f7:b2:c0:d6:7a:4a:84:ec:75:74:ef:b1:
e5:86:af:75:16:11:5a:f7:67:f5:88:c1:d7:de:4c:de:47:10:
07:09:30:c7:c5:24:b0:a6:a8:8a:d6:34:9d:66:ff:05:0b:ab:
32:c2:5a:48:0f:a9:d3:65:1a:83:32:72:a3:ed:65:b8:13:c4:
30:7b:d0:19:83:5f:6f:47:5f:51:98:2b:4c:16:f1:64:d4:f9:
06:96:01:19:78:93:4c:82:a6:42:1a:ca:ba:c7:20:43:e4:f8:
10:26:1c:fe:41:b1:a3:33:74:c6:04:3e:37:78:3c:f7:46:03:
6e:ee:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:12 2025 by rpki-client