Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: 4/F/zgv/gQ/lfwFyvWbY0ylUNZHLfjNLpmbNniXbU0c=
Subject key identifier: 91:00:52:3D:59:77:3A:8A:E8:2D:B6:BB:8A:E0:A9:6C:B2:D9:11:71
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 01977D1E8B255C7EF1D8E7DAFD7595C00E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0695
Signing time: Tue 17 Jun 2025 09:00:42 +0000
Manifest this update: Tue 17 Jun 2025 09:00:42 +0000
Manifest next update: Wed 18 Jun 2025 09:00:42 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: SnlRiFOrV/+ooelazm1J/MSvU0OrJ217FyOoQ+dgAkM=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:8b:25:5c:7e:f1:d8:e7:da:fd:75:95:c0:0e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jun 17 09:00:42 2025 GMT
Not After : Jun 18 09:00:42 2025 GMT
Subject: CN=9100523d59773a8ae82db6bb8ae0a96cb2d91171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:1e:df:dc:d4:8c:a2:47:74:70:68:c9:78:
3b:31:c7:08:0e:3a:05:87:48:1f:b7:d5:ff:9b:da:
e4:db:3c:76:22:d0:26:01:43:f5:1b:da:c5:81:99:
9b:e5:15:b7:97:7c:31:c0:be:4e:14:e5:44:56:97:
5a:c1:61:e3:f9:f7:a2:39:33:54:99:ac:23:87:7a:
ac:46:0d:c4:57:aa:e7:c1:37:c1:7a:8a:14:42:1a:
e2:e8:1b:94:76:7d:f0:e7:dd:d9:79:2f:00:63:7b:
b1:e8:6a:61:4c:93:e0:fe:b9:81:72:a5:2e:a1:48:
6a:36:e4:ec:6f:f7:db:4b:0f:f1:b1:ea:f1:2b:90:
57:ac:0b:cc:7e:6a:c3:cc:29:54:6b:41:59:fd:72:
22:c6:39:77:87:44:51:eb:d9:70:3e:7e:86:f8:33:
ee:ca:8d:34:73:15:9d:4c:75:3b:9f:50:27:b5:40:
80:c2:4c:da:3b:50:c0:9e:d4:6b:c6:f3:bc:25:f0:
9c:c3:3c:3c:c7:6d:cd:ad:9e:5b:87:78:06:44:4c:
05:6e:c1:f9:c9:b7:f9:17:92:b4:2e:54:1f:f1:37:
94:76:e4:1f:a5:13:f4:40:37:4a:e9:1c:c2:a5:66:
d8:1b:43:7d:3a:d4:73:a3:5a:20:91:c8:f1:c5:c7:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:00:52:3D:59:77:3A:8A:E8:2D:B6:BB:8A:E0:A9:6C:B2:D9:11:71
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:91:cb:bf:de:91:3b:78:11:1d:22:8e:58:17:a4:b7:bb:2f:
e7:e8:e6:5a:7c:5e:94:af:b1:3f:72:e7:d7:83:3d:bc:04:8b:
81:ed:2c:38:f4:cc:50:3e:0a:e7:dc:91:0a:a0:97:42:9d:6f:
0d:fa:32:30:c5:cb:5d:97:86:1c:d5:09:cf:8f:bb:a4:40:34:
f8:b4:b4:dd:ee:87:97:73:62:8a:05:f5:50:f0:15:5d:e6:83:
3a:d8:88:4a:ba:4d:ab:45:87:41:84:db:8e:2d:21:c7:d4:84:
af:16:3e:ca:5e:ff:b2:4b:94:fb:41:40:f2:7b:56:4c:b1:11:
9d:80:42:2f:e0:05:b6:b1:39:e9:86:c0:83:34:9c:5e:38:2f:
65:c1:a2:64:f6:01:66:00:28:02:9a:8a:50:a1:5c:de:35:b5:
b9:0e:e3:7e:ae:b0:2e:86:fc:90:bf:b0:2f:42:a7:2a:0f:f9:
29:68:12:90:f9:4a:f6:bf:74:0a:5d:17:c5:34:46:84:f2:e3:
b7:4c:52:d9:66:e4:61:8b:a8:0b:08:39:2d:9e:01:5f:54:15:
81:e1:15:11:ec:dc:f3:73:e3:f7:45:57:36:51:50:27:64:c0:
84:ac:94:1e:97:8f:8c:e9:ad:76:da:5f:4b:b2:f6:6b:00:e8:
86:4f:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:55:13 2025 by rpki-client