Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: lnF/ZuNeXsWovtTQIdjKye90f/bLVoeSG4tkfn9d48o=
Subject key identifier: 5B:AC:B8:66:11:32:FD:89:45:71:66:50:90:E6:75:7B:98:5A:06:7A
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 01976F62E22739EB9FE3738464187850F60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 17:00:40 +0000
Manifest this update: Sat 14 Jun 2025 17:00:40 +0000
Manifest next update: Sun 15 Jun 2025 17:00:40 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: vYh9D61YnRlQbgLmRqzToHuHCrVB60Hxbz2TvYs/e0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:e2:27:39:eb:9f:e3:73:84:64:18:78:50:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Jun 14 17:00:40 2025 GMT
Not After : Jun 15 17:00:40 2025 GMT
Subject: CN=5bacb8661132fd894571665090e6757b985a067a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:ed:53:aa:96:cc:1f:95:43:2a:d2:76:b5:
dd:2a:04:5c:60:b6:27:e5:21:4f:43:ac:f0:8c:07:
9a:e5:b4:61:bc:f4:9e:66:f8:26:12:77:59:c5:0b:
b6:44:0c:84:bc:6a:9c:d8:96:e2:eb:55:5a:5e:05:
22:0c:09:36:ce:dd:27:10:f0:ad:1d:73:5b:ad:20:
d8:4d:d2:23:14:61:4d:85:cf:b6:5d:c7:76:9f:a7:
45:80:59:35:8e:24:cd:fd:20:d8:c8:f2:78:8f:ff:
6d:3b:da:95:d0:c3:9b:18:9f:ff:db:2c:92:72:35:
c0:d2:73:9b:ac:64:0a:67:6a:35:be:55:18:21:b5:
ff:d4:99:37:af:b0:72:ab:cc:b5:dc:32:15:7e:7d:
08:6c:5a:21:78:48:f3:a3:8c:3e:46:cf:34:1b:ba:
b7:58:15:65:ef:d4:49:2f:43:b5:21:b5:58:69:12:
e2:c3:cc:76:f4:03:ce:fa:ae:53:ec:e0:9f:2b:b6:
02:04:fe:1f:73:62:2e:20:dd:ae:84:6f:98:cc:39:
ca:7a:62:a7:7f:45:28:07:42:a8:36:ee:cb:03:a6:
f6:1a:e9:0c:b0:ff:0e:cb:9a:e9:6e:d8:08:95:15:
c6:6a:5c:fc:0c:b3:83:4e:b5:05:bd:52:fd:23:64:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:B8:66:11:32:FD:89:45:71:66:50:90:E6:75:7B:98:5A:06:7A
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2e:5e:ec:13:a8:d7:0e:46:3f:2c:ee:c4:1d:f3:c2:de:c0:
19:95:52:dd:78:4b:19:3a:e5:00:81:ec:39:de:df:a9:81:bd:
13:a6:5f:7e:a0:6c:41:9d:8f:c2:a5:67:e3:14:4c:00:a3:af:
9e:87:fd:3d:db:a8:7a:22:8c:bd:f8:df:44:d4:56:69:0f:b2:
6e:d4:6b:4b:af:50:42:bd:73:4b:01:5b:1b:81:9c:78:7f:06:
39:c7:56:68:08:3e:19:74:88:2d:83:a8:78:03:f7:d0:83:1b:
26:a6:13:35:f9:1d:93:47:34:73:5c:9a:cf:31:db:02:47:c7:
b6:1c:82:77:60:a7:41:17:81:10:fa:62:9c:83:b0:7e:68:11:
21:c3:c8:99:17:54:0c:25:37:4b:fc:b9:28:7e:d8:c8:a9:13:
4b:c9:13:ba:1f:d3:bd:24:8e:46:57:2a:68:f8:8d:63:eb:2b:
88:91:fe:30:83:de:aa:ab:d5:14:b3:cd:91:96:f3:f9:17:b1:
e6:66:d2:1e:40:48:85:ec:ec:68:32:2b:57:64:65:e2:da:1a:
e2:6b:7d:91:59:e5:f8:f5:45:70:ef:93:b7:b4:da:ca:7b:94:
8c:6b:02:cd:d4:69:18:4a:87:bf:be:7a:35:48:51:46:ad:28:
82:e2:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:17 2025 by rpki-client