Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: A5DgPsYLXxcB/vYiQ/SqJSziMDdB2Mt2PSVGbcDcPf8=
Subject key identifier: 76:66:EF:8D:B1:37:56:EE:76:64:7A:63:F3:DC:D3:B9:D5:CC:6C:8C
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 0197782EDA8B55B79F6CAF60FA0AF80B75BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 10:00:25 +0000
Manifest this update: Mon 16 Jun 2025 10:00:25 +0000
Manifest next update: Tue 17 Jun 2025 10:00:25 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: 8yTNFHXU3aUMs76v5YCCQMX/JskbPQnV8kEW9Io2lyg=)
2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:da:8b:55:b7:9f:6c:af:60:fa:0a:f8:0b:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Jun 16 10:00:25 2025 GMT
Not After : Jun 17 10:00:25 2025 GMT
Subject: CN=7666ef8db13756ee76647a63f3dcd3b9d5cc6c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:39:fd:67:a7:01:7d:15:df:e6:44:0c:22:
b3:fa:4d:f7:04:ac:05:2f:b1:8a:5b:63:bf:75:a4:
0d:08:4e:7b:2e:7e:a6:86:33:1d:95:ef:51:97:c6:
4b:d2:50:48:28:67:75:cc:cf:56:7a:7a:cd:4d:ce:
46:20:a7:31:52:d4:8c:21:64:71:87:1e:ba:9a:a7:
7a:e3:26:0b:dc:42:9a:31:09:4e:48:5b:ad:79:9b:
6c:9a:d4:a4:14:08:c9:ea:a7:1f:c0:30:1f:a6:dd:
07:9a:ad:ee:cf:c0:27:48:6c:6a:9e:65:a2:6d:a2:
13:b2:17:9b:62:20:7b:b5:a8:f5:00:b0:c9:61:87:
83:07:18:dc:a8:70:bd:bd:97:a6:f5:cc:d1:8b:ce:
ce:db:4b:d3:ad:61:7c:09:ca:60:79:b2:9a:d5:30:
03:1c:78:75:10:c6:44:7b:14:ad:b1:06:f6:f7:bb:
3a:48:dc:53:98:60:59:8c:7b:ac:5c:ea:b9:15:ae:
bc:97:77:ed:b6:f9:bf:0d:6a:13:f8:74:09:b8:28:
2b:db:0e:40:cc:eb:a4:c1:0f:fb:70:10:39:6e:58:
e9:80:27:60:cb:ab:c0:d5:4c:a0:fe:2d:30:c1:ba:
5e:bc:b1:9a:0d:33:e5:66:4c:84:24:91:d0:ad:a5:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:66:EF:8D:B1:37:56:EE:76:64:7A:63:F3:DC:D3:B9:D5:CC:6C:8C
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:14:36:4a:6c:bc:4f:a4:d1:b7:82:90:39:c2:35:87:9d:92:
20:5f:97:ae:0d:eb:57:5c:f6:42:df:f6:af:e8:9b:ca:30:23:
51:be:5a:55:12:58:ee:59:16:46:2d:7d:03:61:da:c5:e8:d4:
e3:87:99:c6:4a:34:17:6f:74:a8:a5:c6:1e:1c:27:08:a7:85:
80:6e:8b:36:d7:c2:47:5c:f6:dc:7a:e6:0b:0f:60:96:4b:68:
ef:fc:8f:cd:09:57:14:85:29:f5:af:4d:be:46:d1:d3:43:f2:
3a:43:59:8b:37:e8:97:d3:c6:48:36:2b:d5:f9:78:99:cd:ce:
70:e3:a2:d7:22:20:fa:e1:da:5d:71:d7:a2:37:b9:46:ec:5f:
a4:da:71:76:ce:8f:25:a9:da:47:57:bc:81:09:86:0c:54:2e:
c9:74:b2:09:2e:2f:93:7e:df:22:06:7e:12:e9:ac:f4:27:95:
d7:f7:9a:a7:65:52:36:04:d8:4e:b7:05:26:bf:99:41:f1:7a:
1a:55:cf:04:6c:4f:ba:c7:be:7f:36:ef:bb:48:1e:97:0d:ed:
c4:9f:53:3e:fa:15:8c:59:d7:cd:71:b8:d7:34:a0:38:64:2f:
16:43:e0:77:94:32:c0:91:56:2d:e6:86:3e:72:02:10:56:bc:
e1:c5:d2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:21 2025 by rpki-client