Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
File: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft (raw, json)
Hash identifier: c61S/AhTPL44v+c0VOUq6qhy50upNOA3hNOMYIxS5rk=
Subject key identifier: D5:32:EF:C5:6C:CC:41:D4:16:D1:14:1C:82:42:51:7A:02:07:82:9D
Authority key identifier: F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
Certificate issuer: /CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Certificate serial: 01977E3110D27F87E2AAF3E4C7647655283E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
Manifest number: 01FE
Signing time: Tue 17 Jun 2025 14:00:34 +0000
Manifest this update: Tue 17 Jun 2025 14:00:34 +0000
Manifest next update: Wed 18 Jun 2025 14:00:34 +0000
Files and hashes: 1: 1-PJ8uFT3vIGcdh8Ryvstj5V11gs.roa (hash: flh68N5wBml9poaLXGZmGeNQ/HSV3CHvsWwwddNW1dc=)
2: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl (hash: 1LIA+GXWV2IR8D6vyNBD8OVgFiOqVQfdwtRusZopBCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:10:d2:7f:87:e2:aa:f3:e4:c7:64:76:55:28:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Validity
Not Before: Jun 17 14:00:34 2025 GMT
Not After : Jun 18 14:00:34 2025 GMT
Subject: CN=d532efc56ccc41d416d1141c8242517a0207829d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:a1:a2:a5:85:f0:3a:12:2d:42:6b:ec:9a:
ed:c0:6c:3e:92:24:00:75:20:b3:cc:db:d1:fa:b8:
c7:99:33:2f:ca:5a:8a:f5:26:a5:e7:9e:b6:65:02:
04:ad:da:c2:d7:2a:fd:ae:ec:af:80:50:b8:f3:ee:
b9:dc:58:57:73:12:94:eb:dc:4c:66:c5:61:c4:a3:
1c:b3:9b:49:12:86:d8:1d:a4:c5:c6:19:03:b5:70:
93:c8:1f:1b:c4:43:b4:ee:30:a9:2b:89:13:82:cb:
5d:d6:73:82:27:1d:31:f2:f2:88:95:aa:39:08:05:
b7:f1:f6:08:05:cd:c5:07:d0:8d:f3:b8:62:01:86:
8e:a8:ad:1a:e0:9f:92:5f:60:47:40:31:1f:f3:7a:
38:df:6a:10:8e:33:8a:36:70:d9:af:79:40:e2:a5:
d9:27:3f:d3:6c:44:76:c8:cc:8a:5a:23:36:34:a8:
41:95:9f:db:ef:48:6f:38:8e:c1:4a:e1:41:cd:89:
5c:13:f0:64:71:6c:1e:6c:b3:e7:61:39:f4:67:0d:
32:05:11:99:c2:59:7c:d8:6b:01:49:12:e9:99:30:
92:5b:02:63:da:e2:ca:a9:00:21:7b:8b:1a:c7:cc:
e0:ae:3f:33:6d:19:e8:ef:c3:aa:ea:2c:8b:9d:92:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:32:EF:C5:6C:CC:41:D4:16:D1:14:1C:82:42:51:7A:02:07:82:9D
X509v3 Authority Key Identifier:
keyid:F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:10:31:18:54:98:2c:b5:f1:49:1a:c1:4f:84:66:69:05:e3:
a6:52:85:1f:10:2c:81:f7:e3:9a:a4:3f:73:d7:30:7a:e1:f4:
71:66:56:43:d5:39:3b:d4:d0:b8:2d:bd:64:c1:19:4e:d8:ce:
f7:a6:c2:19:a2:34:4c:0e:5e:14:3c:81:f0:0f:d6:24:42:dc:
b2:2a:c4:7c:a9:eb:41:cf:76:e3:09:63:1b:e9:ec:ea:39:69:
d6:d7:57:53:1e:e0:9b:2b:bb:d1:45:26:64:09:ab:e6:91:79:
95:a6:d6:e4:a4:57:c8:42:dc:72:91:ca:56:9d:c4:69:4f:91:
67:f8:7e:b8:ef:a1:b7:96:6e:14:ce:b0:64:1f:80:48:6d:9f:
f6:8b:13:86:7a:00:83:96:16:a1:8a:7e:79:5f:7a:6d:4f:a9:
42:fd:5a:1f:40:6f:f0:1e:d3:70:5a:00:60:97:cc:58:b6:e3:
5b:f3:96:1f:9d:8a:8d:d9:69:c3:f5:69:6c:41:44:d3:1b:e9:
85:28:37:8e:97:43:08:48:e7:67:ae:d7:16:52:15:f4:33:bf:
51:0f:6f:aa:bf:df:47:c1:7e:31:e1:0f:e2:c2:94:a8:f3:42:
6b:0f:de:e5:44:81:02:93:7d:43:b6:31:2f:0b:f2:2a:0e:d8:
ff:b7:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:35:22 2025 by rpki-client