Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: PoEKBO1rzQBo0ac2VlqK1OwZAXA/cYaXoLJzHhpB+S0=
Subject key identifier: 8F:42:8C:6A:B5:B8:37:FB:73:62:28:AF:21:85:AA:A0:A2:36:54:91
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 01977D8CE130899DA57C13DC1DBA19D2A2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 0D4F
Signing time: Tue 17 Jun 2025 11:01:13 +0000
Manifest this update: Tue 17 Jun 2025 11:01:13 +0000
Manifest next update: Wed 18 Jun 2025 11:01:13 +0000
Files and hashes: 1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: SYfHZt9IJ/39ENhjOtUoXthPaVEY/sslLwr7VGOKP/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:e1:30:89:9d:a5:7c:13:dc:1d:ba:19:d2:a2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Jun 17 11:01:13 2025 GMT
Not After : Jun 18 11:01:13 2025 GMT
Subject: CN=8f428c6ab5b837fb736228af2185aaa0a2365491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:57:68:cb:72:e6:6c:54:00:93:92:a6:a9:
5c:a1:db:ca:aa:d9:f5:d3:06:7b:6d:9d:46:39:ac:
c6:42:49:ff:77:a4:0f:b1:5e:f6:54:4b:26:24:fa:
0f:2b:09:b8:12:99:26:6b:c9:14:41:89:2f:a6:e8:
b8:51:35:d8:36:8d:88:cb:1f:6c:b6:cd:f3:0b:ab:
59:ff:d3:52:8e:7e:f9:e3:48:8a:cd:4f:4d:34:c2:
e8:aa:85:1a:30:c3:9d:4b:cf:4a:89:9f:f5:9b:fd:
95:77:87:82:c9:ef:44:8b:27:e1:c3:c6:77:73:75:
4d:46:91:48:0b:f0:51:c9:d5:61:2e:e2:15:f5:84:
c8:86:f2:e8:8f:fa:26:a0:5b:f9:3e:1c:76:76:01:
4a:2a:a1:97:df:ef:03:e3:6c:1f:4b:13:e8:41:42:
79:b3:e1:69:af:91:65:6a:c1:5c:53:5d:57:c2:3c:
59:8a:4f:59:67:28:42:e4:77:c4:6a:a0:d2:09:81:
3e:18:d0:69:f2:fa:6e:7c:47:ae:e2:20:4f:4a:b2:
2b:55:7c:ac:e6:24:79:b1:90:67:75:0f:fe:ab:e1:
e3:2e:8c:6f:31:d8:ab:47:fb:89:8c:62:54:d0:63:
0e:e9:93:59:1f:90:be:42:1e:54:a0:e7:19:3c:06:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:8C:6A:B5:B8:37:FB:73:62:28:AF:21:85:AA:A0:A2:36:54:91
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e0:e1:b3:c3:6c:c1:97:14:ec:59:d0:be:bf:b4:55:15:54:
ea:4f:bc:a9:c2:79:33:02:f2:c8:2f:28:a1:c8:de:86:f0:47:
68:fa:23:b0:b2:5a:f2:ed:59:53:ba:84:1a:02:5c:9d:42:99:
f0:04:44:dd:47:80:dc:a0:bf:8b:f7:a1:ae:96:19:fe:98:c8:
be:f6:8d:36:76:f6:60:f0:b1:fb:80:ad:a4:5c:a0:cf:af:1f:
76:73:96:b5:50:62:d1:3c:11:59:fb:a2:f6:3b:5f:41:ed:df:
4f:69:dd:c8:40:b2:54:94:ef:f5:20:af:2a:47:8c:1c:3c:d1:
69:c5:d1:e8:46:b6:3a:a0:40:a3:69:32:39:1d:00:c6:13:45:
e5:56:a2:94:a9:b1:59:e8:2d:1c:12:c8:77:1b:ed:fb:07:63:
67:62:03:44:d7:29:26:b6:ea:b9:fc:7f:a7:3e:8c:01:7e:20:
b4:39:da:25:59:2b:3c:1f:16:7c:14:f2:e8:b0:8b:1c:5f:93:
9c:40:f4:ac:bf:c7:07:00:8c:3a:ab:e1:54:4c:ab:50:ef:b0:
2a:8a:4a:b8:ed:12:ca:6f:e6:bd:6a:ca:00:b6:7a:2e:bc:04:
22:e1:81:a6:5b:5d:58:00:bb:ef:b3:99:1c:5b:a8:3f:67:61:
b5:98:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:54:03 2025 by rpki-client