Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File: ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier: ZE/Jpi5apADaZM1l6EozszZFF0Qthi67lha5s0cqZRw=
Subject key identifier: FB:5B:DB:39:34:56:0C:45:FE:91:B8:1A:76:E4:59:15:C3:66:73:E4
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 0197722CFA2093B429B6BE50F5EEC03B9ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 06:00:39 +0000
Manifest this update: Sun 15 Jun 2025 06:00:39 +0000
Manifest next update: Mon 16 Jun 2025 06:00:39 +0000
Files and hashes: 1: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (hash: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=)
2: TzCEbM_FX1C8Etsgv1SpL73BfwY.roa (hash: 0+du4/EByKMALnvia/65AUVyk52kmBip6bBqdirNoQM=)
3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: 640oBalAvvUW9SYff1EpyVmZtWAgDggkeJiSDIteuTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:fa:20:93:b4:29:b6:be:50:f5:ee:c0:3b:9e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Jun 15 06:00:39 2025 GMT
Not After : Jun 16 06:00:39 2025 GMT
Subject: CN=fb5bdb3934560c45fe91b81a76e45915c36673e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:95:f1:14:9e:7e:f1:1c:5e:92:96:2c:d3:
2a:7d:06:b2:e6:21:99:7d:34:2b:42:54:96:ae:63:
e9:22:ba:11:09:6b:52:0e:ec:ad:be:e8:04:7b:32:
6c:e4:ce:6a:a0:6d:d6:8d:72:be:ce:3d:7a:74:a8:
46:e6:90:75:da:30:db:e4:56:05:f3:00:ea:6f:b6:
72:a1:a6:6d:07:5b:cc:01:cd:a9:3f:46:2c:97:8d:
4f:d8:5f:04:73:63:c6:15:88:e2:65:8e:4a:3e:5a:
8e:4e:dd:21:5c:4c:39:94:7b:e9:14:81:e6:c9:1f:
ed:07:31:73:49:0e:da:9a:33:c3:39:00:d5:4c:0c:
72:23:0f:d3:5e:2f:d0:c4:ce:8c:d7:4a:7d:bf:ea:
da:c5:59:ca:51:5b:1e:b4:d3:61:0b:19:c8:0c:42:
c0:16:81:74:98:e2:a9:19:25:3b:df:81:5b:61:b8:
8d:2b:c7:6e:06:7c:15:48:04:76:12:15:a7:79:85:
6d:04:f9:f1:b4:31:fa:3b:99:d2:fa:c5:ae:dd:aa:
81:73:91:0f:ed:5d:98:f0:3c:23:b3:3f:50:bc:2b:
b5:c8:f2:4c:b7:66:2b:43:6c:26:49:d5:27:25:95:
c5:39:ea:00:7f:04:d3:7f:7f:d0:a5:7c:97:b4:23:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:DB:39:34:56:0C:45:FE:91:B8:1A:76:E4:59:15:C3:66:73:E4
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:4f:a5:a1:95:5b:fc:7f:33:14:06:63:60:7c:f7:75:28:df:
f6:45:31:44:cd:29:c6:7d:d2:be:0f:b6:78:fb:6c:0f:5b:82:
ae:2f:22:95:67:53:7a:9b:c6:21:f4:84:99:b0:e0:0b:01:42:
3f:02:11:f6:d3:dc:a5:e9:77:81:7b:58:8f:3e:25:7f:5f:49:
16:a6:b9:f0:70:8b:eb:15:1a:d2:fb:9a:b9:a7:17:9b:53:72:
f5:88:23:d6:5f:a4:d4:37:9a:4a:a0:9c:dc:9a:e7:86:b3:bf:
d9:57:82:da:52:5f:db:4d:a9:c0:8f:53:d9:a8:41:3b:5b:ec:
63:7b:e7:ce:4e:6c:39:36:f6:9c:f5:6c:a0:a5:de:6f:96:db:
36:9f:5c:84:79:f9:75:f8:aa:43:44:6b:fd:85:f9:9f:aa:6c:
66:51:62:61:16:c3:59:1d:13:47:f5:e2:77:3d:b1:71:1a:9f:
e8:2c:59:a5:ea:8b:2c:9b:ae:8a:fc:e2:8a:02:94:a0:80:f4:
46:48:be:45:aa:53:c2:88:3a:d2:27:1a:37:0f:e0:1f:97:4d:
ed:84:ae:ca:59:6d:eb:3e:79:19:c7:a8:4a:fd:05:93:20:dd:
1e:7a:5c:0a:fd:7f:0b:f7:0e:04:b1:87:26:54:18:df:ce:94:
e2:67:96:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:56 2025 by rpki-client