Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: AYVSDrlcYGsSvm3807LEIX/NM5dKl61TMzuQNXkZwrc=
Subject key identifier: 68:56:DA:36:27:6E:30:3F:51:F4:7A:68:E2:B6:CF:D9:D9:1F:96:4B
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 01976FD1276CE460CC47D1D332B5208C2F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 0216
Signing time: Sat 14 Jun 2025 19:01:07 +0000
Manifest this update: Sat 14 Jun 2025 19:01:07 +0000
Manifest next update: Sun 15 Jun 2025 19:01:07 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: SNd0ORpR9/g/8vWVtOrwOl/KhJK94U3GP+yDdwd8rTs=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:27:6c:e4:60:cc:47:d1:d3:32:b5:20:8c:2f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Jun 14 19:01:07 2025 GMT
Not After : Jun 15 19:01:07 2025 GMT
Subject: CN=6856da36276e303f51f47a68e2b6cfd9d91f964b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:f6:2c:78:4c:42:04:69:80:18:79:27:58:
09:49:f6:4e:5f:2c:ed:95:30:8c:6f:4f:4d:a2:75:
31:ac:10:ae:39:8f:42:a8:55:b8:48:af:e1:6a:09:
22:80:45:bd:48:bf:9a:ca:00:66:d0:83:ed:06:a5:
bb:95:06:57:c0:58:2b:e5:33:af:17:60:d8:50:12:
b6:bf:76:bc:78:22:c0:f1:b1:f0:ed:b1:dc:23:d1:
e2:f7:a6:3e:89:29:a2:76:ea:49:9d:4a:36:3a:31:
b3:b5:af:3f:b7:ac:aa:33:66:90:c2:ba:98:fd:2d:
ca:9c:b2:2d:04:c5:06:30:f0:28:1e:4e:2b:06:15:
87:c9:df:41:f8:73:f9:c8:ed:9c:3d:7f:17:03:22:
d3:16:c7:bb:11:6f:33:61:36:0d:c5:2c:fd:87:1f:
34:10:4c:9c:d8:4f:0a:14:48:2e:e8:b3:4c:d8:7e:
ef:c3:7b:0a:ed:0f:a0:f8:a1:3d:b5:57:94:b1:32:
3e:a6:6d:56:d8:5b:17:1a:24:e8:bf:9a:d9:d8:9d:
51:0a:23:19:aa:6e:29:34:15:39:f6:d6:0d:47:a8:
d0:75:ec:c9:44:29:85:a6:7c:25:0f:1d:bf:1a:d0:
2b:e5:e7:ba:c1:9f:3e:cd:32:7f:32:be:39:55:e1:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:56:DA:36:27:6E:30:3F:51:F4:7A:68:E2:B6:CF:D9:D9:1F:96:4B
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ac:f7:44:41:b6:fa:62:24:27:e1:a2:6e:d3:22:2c:b6:3d:
44:00:e1:99:d2:a2:e6:01:9a:d7:69:bc:60:e7:d4:d4:6e:dc:
7c:4e:7a:67:8b:19:a4:ba:40:f1:8f:4a:9c:27:83:f1:a1:ab:
63:14:2c:39:62:5a:e8:e8:bc:e7:09:52:ee:d0:de:60:78:59:
96:97:23:a3:a2:53:b1:ce:99:37:dc:5c:cf:38:55:7c:7b:2a:
33:31:28:1d:be:7f:c6:e1:38:3d:03:0b:3a:3f:2c:c5:61:b9:
c4:5d:6f:6d:df:3b:0d:b2:13:9d:6f:60:30:97:60:39:a2:2d:
4b:95:d9:0a:3d:b3:90:d8:29:1d:df:3a:a6:cd:bb:43:e8:41:
5f:cd:78:68:68:06:85:54:0c:c6:9a:11:b0:32:1b:d6:cd:3b:
29:cf:05:ce:42:28:21:c2:c3:ba:f6:e4:f2:e7:e1:8d:d4:75:
40:ad:81:eb:55:30:5e:4c:2a:23:55:19:c6:07:3e:33:a4:7f:
51:56:db:88:40:58:aa:db:5a:b4:3c:50:2f:42:74:34:b3:68:
01:de:09:d1:ed:f6:e0:43:5b:7d:74:b5:62:9b:5e:13:15:21:
b5:c8:38:02:e5:ee:f9:35:02:99:c8:dc:0d:61:9f:ff:98:cd:
09:95:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:52:52 2025 by rpki-client