Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: zLaczCrKD+jy/qTZK46ZuQp9ZVEfnaypG4uo8Xqwu/4=
Subject key identifier: BA:F3:FD:43:3C:63:2D:B6:E3:77:63:9D:34:BF:4A:0E:27:A0:A9:22
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 0197B96B045E00C61F22A425577BBD4E7131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0D98
Signing time: Sun 29 Jun 2025 02:01:27 +0000
Manifest this update: Sun 29 Jun 2025 02:01:27 +0000
Manifest next update: Mon 30 Jun 2025 02:01:27 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: /iisY7JdyTlgF2WvCqioPN7gXp3f7ZTCoCtg7nh+OJY=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:04:5e:00:c6:1f:22:a4:25:57:7b:bd:4e:71:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jun 29 02:01:27 2025 GMT
Not After : Jun 30 02:01:27 2025 GMT
Subject: CN=baf3fd433c632db6e377639d34bf4a0e27a0a922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:fd:d4:43:63:c2:87:28:67:aa:52:3b:20:
6b:89:d0:f2:6d:a9:3d:36:b8:6e:5e:7f:ac:51:8d:
7c:26:bb:ea:df:03:f6:2c:0f:dc:07:9c:a2:ce:3b:
96:8d:cb:d3:53:c1:10:90:31:2a:21:f5:e6:da:05:
23:70:10:8a:b0:5c:d7:60:e3:d2:36:cd:75:39:a1:
93:e2:fd:c2:cf:65:31:2b:89:ad:65:4e:e4:56:37:
87:a5:bc:57:94:53:55:9b:81:a0:5a:3e:c2:9b:4a:
ef:a3:c3:cc:6c:78:2d:fe:94:f2:aa:c7:ce:d8:42:
42:7b:15:2f:89:8d:cb:68:e1:cc:96:4b:2b:9d:37:
bd:6c:f5:c9:16:88:4a:02:01:d4:b6:12:3d:95:fb:
ed:9e:fb:ab:94:c4:90:0c:70:5e:89:2a:4e:42:94:
41:58:87:94:b1:73:51:09:ce:d2:31:93:c5:8a:4d:
78:9f:ae:9b:ba:c7:de:be:d8:e8:b7:5d:3a:87:02:
87:92:5e:ea:2f:e2:72:f1:0c:85:33:7f:f2:be:25:
c6:e4:22:16:12:de:01:be:2b:af:69:38:bc:a6:ba:
fd:6b:7f:ff:4a:3a:24:6a:39:3c:85:e2:a1:ff:f9:
16:df:25:2e:bc:1c:da:ee:30:b7:ff:d2:de:c2:7e:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:FD:43:3C:63:2D:B6:E3:77:63:9D:34:BF:4A:0E:27:A0:A9:22
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:53:3a:9c:2a:e0:02:22:17:9e:00:cd:20:40:8b:83:0d:d2:
ac:6d:87:b8:7d:bf:a0:6a:7f:ed:b9:67:57:1e:2a:1a:33:e5:
58:28:30:50:fd:75:23:9d:c7:7b:7b:2f:92:23:b8:f6:7e:64:
da:b9:4d:a9:08:1d:65:23:58:7f:c5:a8:c8:13:37:2c:18:54:
99:47:30:e9:26:55:7b:47:2a:91:22:43:fd:15:9e:ad:51:c5:
15:0d:0c:7f:40:7a:a6:27:98:e6:ae:a2:66:94:0a:3d:1d:e9:
ff:0e:8c:b5:27:98:7e:c5:c5:3e:dc:f6:07:44:24:b6:41:84:
9d:ad:bf:b9:3c:cf:df:e4:ed:a9:5a:89:a1:7f:a4:ed:71:23:
bd:c3:9e:39:f1:96:89:2c:82:b4:6b:5b:25:4a:61:ad:3e:c6:
47:c1:a3:62:cf:4f:5d:c0:f2:85:11:00:ad:95:7f:3c:be:f3:
09:e2:9e:14:c1:ca:a9:29:d1:ec:db:2e:cb:18:5d:b8:51:58:
ac:85:93:a7:e6:14:1a:22:4a:d4:cf:9b:62:0e:23:9a:07:f0:
29:b5:fc:82:61:22:78:13:c4:20:07:20:3d:71:28:f1:9f:82:
a9:aa:90:a6:dc:4c:25:74:58:5c:d9:49:03:ed:f7:30:32:6f:
a4:89:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:27 2025 by rpki-client