Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File: S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier: rpb32j4BMkGl08EYDaDGf+4xPEoGJPIWompyI0heYbA=
Subject key identifier: 6B:CD:42:9A:A7:42:E3:CC:B3:E3:50:89:D4:D8:0A:50:72:C1:EA:85
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer: /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial: 01976BBD6A18C6022B9C3A2FB8AE85862E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number: 1068
Signing time: Sat 14 Jun 2025 00:01:04 +0000
Manifest this update: Sat 14 Jun 2025 00:01:04 +0000
Manifest next update: Sun 15 Jun 2025 00:01:04 +0000
Files and hashes: 1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: qNDqh6xyphSPUvyn+x0VXAg9NO7fFvoVz2p/fJtSBaE=)
2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:6a:18:c6:02:2b:9c:3a:2f:b8:ae:85:86:2e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Validity
Not Before: Jun 14 00:01:04 2025 GMT
Not After : Jun 15 00:01:04 2025 GMT
Subject: CN=6bcd429aa742e3ccb3e35089d4d80a5072c1ea85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:54:1c:5c:2f:d6:e9:c2:a4:1f:2c:4b:d3:
02:a2:8b:9e:8e:a8:c4:d3:42:73:9c:f4:4f:93:ca:
a9:2c:16:89:1d:57:95:c6:9d:f7:8e:b7:8d:1f:e3:
4e:c1:c3:b8:70:e7:35:b6:56:2f:d4:bb:3a:a4:4b:
82:93:2a:48:14:ef:f1:72:10:82:8c:96:f4:1b:48:
c5:d2:17:42:24:1a:55:9c:dd:80:3c:fc:f5:1f:6c:
31:8b:44:a5:0f:00:7b:92:d0:ad:4f:12:4f:0e:c7:
e9:0a:58:a4:ee:0d:0b:28:1c:cf:58:3a:c6:fd:c5:
c0:3b:2f:46:e5:bb:42:ab:fe:b0:51:5f:04:ac:a5:
11:18:99:30:9b:ac:05:91:e6:6e:6f:61:51:c9:3f:
2b:ce:78:73:8f:0b:9a:f5:3c:7d:6b:58:19:e0:2e:
3c:f1:4d:53:00:7c:a2:de:8b:8e:f6:10:a4:ff:56:
90:24:eb:03:7f:92:a6:01:0e:36:4e:20:4d:2d:5a:
d4:79:d6:59:c0:ed:9d:6f:4b:28:53:a3:b8:94:1b:
e9:da:04:56:8b:85:8c:50:48:24:91:5c:2b:0d:ab:
40:2f:93:33:c9:06:8c:e1:4b:75:bf:fd:81:2a:aa:
4e:7a:36:1b:a0:b4:e4:2f:f4:4e:7b:d9:bf:3e:5f:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:42:9A:A7:42:E3:CC:B3:E3:50:89:D4:D8:0A:50:72:C1:EA:85
X509v3 Authority Key Identifier:
keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:05:ca:d7:d4:40:3c:0f:2a:68:03:26:74:58:0a:7a:1b:31:
f0:72:a3:44:24:45:99:0a:0d:8e:9a:09:34:c4:3f:b5:17:b0:
2a:b3:58:94:75:ed:96:67:cb:b7:ea:31:48:92:41:a4:e7:ed:
76:51:9e:15:d8:e2:f3:66:20:dc:fe:1b:37:be:31:9a:13:f0:
d6:39:8c:99:af:ea:a7:36:01:46:89:1b:a5:fa:c8:78:b3:eb:
48:7d:93:a8:3a:42:c8:b0:8e:22:35:68:31:64:07:6e:94:f0:
b4:45:2b:fc:51:c4:90:e6:a5:e5:8d:92:6e:7f:c1:31:27:32:
8f:5c:f4:16:1a:af:39:3c:a4:6c:3b:0c:67:ab:05:6d:3f:77:
8d:85:2b:0a:ac:59:4b:10:8b:db:46:ac:db:ff:15:01:8f:6c:
7a:98:55:bd:e8:44:73:21:98:bc:c1:1a:60:f1:14:49:2a:fa:
7c:f8:e5:98:41:04:20:c6:1b:bb:bf:a5:a1:89:9f:06:55:b3:
b8:a5:90:63:1f:a7:32:1b:56:87:33:34:65:f0:a1:5e:d9:50:
0b:6e:10:a9:89:55:46:f6:e0:bd:34:67:25:40:e3:a3:6a:4e:
b5:db:73:a8:23:00:c7:8c:70:40:c8:d4:11:d3:8f:aa:04:e0:
1d:29:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:03:35 2025 by rpki-client