Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
File: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json)
Hash identifier: xMEI6zwspgkEdpy9Elp0Ge+vDTNENCCbtW/MLqwU2+4=
Subject key identifier: 1D:30:CC:C7:7E:01:27:C2:E4:98:BE:EA:5D:4A:41:F7:8C:5E:DA:B2
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial: 0197715142DB116FD790BFA77AB37DB78FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 02:00:40 +0000
Manifest this update: Sun 15 Jun 2025 02:00:40 +0000
Manifest next update: Mon 16 Jun 2025 02:00:40 +0000
Files and hashes: 1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: 7J3XQntWGsI9Dygvc19hXdASg53+ZIlNhxkRjnVYtLk=)
2: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (hash: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:42:db:11:6f:d7:90:bf:a7:7a:b3:7d:b7:8f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Validity
Not Before: Jun 15 02:00:40 2025 GMT
Not After : Jun 16 02:00:40 2025 GMT
Subject: CN=1d30ccc77e0127c2e498beea5d4a41f78c5edab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:ca:22:08:f3:bd:ea:df:a6:bd:d2:e1:a6:
e8:82:ee:04:bd:78:a0:05:25:b1:f6:af:3e:bd:43:
a2:2c:b6:b3:59:57:b4:4e:42:c2:e5:38:e7:cc:e8:
84:7a:41:b8:80:a1:6a:ef:85:b5:6f:43:7e:8a:5e:
b2:5c:51:35:f8:d2:93:83:b2:92:d3:15:63:2c:0b:
11:52:42:2d:e7:46:54:06:8e:40:c4:d6:1e:2b:9a:
3e:05:22:b9:ca:63:e6:51:f7:b5:f7:f5:8c:e7:75:
0e:72:ef:99:70:4f:71:7f:38:20:bf:2f:b0:3d:ea:
38:04:a8:a4:60:aa:26:69:82:a3:34:32:bf:5f:7f:
44:75:7f:55:73:c3:86:7a:0a:56:d3:5e:0d:c7:30:
8e:35:14:3c:fc:94:0e:e9:5a:5e:ee:2d:f1:fb:e1:
b0:03:ae:61:df:c2:41:c4:24:55:c4:cf:93:a1:b7:
19:0b:ac:8a:76:54:6e:67:9a:42:a9:45:d1:23:ae:
b1:a8:e6:24:3c:bd:d7:43:45:6f:dc:7e:8f:22:dc:
7e:e5:e5:14:8d:8f:44:6b:4d:bd:80:a9:4b:a4:c6:
a2:25:88:ab:a0:2f:8c:fa:f4:51:a7:9a:ab:20:fc:
54:97:a1:42:f9:07:39:9d:48:f3:8b:24:7a:c9:13:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:30:CC:C7:7E:01:27:C2:E4:98:BE:EA:5D:4A:41:F7:8C:5E:DA:B2
X509v3 Authority Key Identifier:
keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:67:66:60:b5:70:e7:c4:85:c7:fa:f2:92:1f:e0:c0:0d:5d:
67:9d:21:32:c2:d4:21:d4:25:15:26:1f:c3:98:45:49:d8:93:
77:43:f6:8e:7c:44:b6:16:26:fd:70:2b:ba:1e:7a:43:50:3d:
ce:1e:ce:36:96:a2:cd:c3:e9:7e:6b:7d:e5:5c:eb:39:8c:40:
c2:82:b5:28:5c:dc:71:17:21:61:59:25:c6:fe:de:f8:21:5e:
aa:c7:b3:5c:b7:c4:0e:4b:89:38:ec:70:48:5d:1e:85:d7:67:
75:4a:ea:56:f1:4b:3b:16:67:f6:2e:6b:fd:6c:e9:33:00:67:
9d:37:2f:f1:cc:ab:ee:a6:84:10:61:04:0c:db:46:fa:f5:85:
0f:dc:86:7f:3e:27:69:6f:c0:05:d8:46:8b:b7:5e:21:5f:22:
30:42:7e:74:de:60:bc:4d:b2:2e:b7:c4:de:31:6f:fc:2a:1e:
27:77:3d:70:de:7f:ea:43:e6:5c:7c:f1:34:d3:12:62:62:8b:
58:bc:79:e7:d8:d7:77:c2:fc:a8:70:18:e8:65:06:73:27:d1:
22:b2:29:d4:a4:86:0c:4c:56:e5:e7:f7:9b:03:eb:40:83:a0:
8e:ca:0d:53:a6:fc:d7:ba:21:9d:3c:e1:75:a0:a0:5c:7d:f1:
2f:6a:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:22:19 2025 by rpki-client