Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: lzvu/OBUcftea6ph3USV9rAbhx65L1m9eHNRwaz/FlI=
Subject key identifier: 86:B0:2C:2B:0F:1E:CB:69:3C:9B:91:0A:A8:47:58:A8:96:14:51:89
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 01976A3C9C43A36B8EC617E7A88C6581B8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 17:00:46 +0000
Manifest this update: Fri 13 Jun 2025 17:00:46 +0000
Manifest next update: Sat 14 Jun 2025 17:00:46 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: kziyMEHPs3kHbI/KLP8LnIi0QDCleK8EzJ97Lkf0cII=)
2: oP_NZCckorWlK08uLtq1ZhjEmNw.roa (hash: TmGRTgVUIXQXGjYy9QqbbgsvjEEm+TAtLS3xKb+xEyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:9c:43:a3:6b:8e:c6:17:e7:a8:8c:65:81:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Jun 13 17:00:46 2025 GMT
Not After : Jun 14 17:00:46 2025 GMT
Subject: CN=86b02c2b0f1ecb693c9b910aa84758a896145189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:4b:00:a0:3c:c4:fe:13:f9:a6:bc:52:14:
38:d5:3c:8f:e9:a5:2c:f2:44:27:b4:d5:99:74:09:
40:6b:8c:d8:bb:f3:6b:ae:0a:3f:74:1a:e5:d8:ce:
dd:10:f0:e6:8a:10:d7:b7:8a:8e:ce:e8:46:d5:a5:
db:a2:dc:78:5d:7f:88:be:41:9e:19:0f:32:f4:26:
1c:51:67:72:86:d7:82:67:67:16:93:a8:8c:4f:33:
00:25:c0:ba:6b:2a:dd:0b:a1:3e:d8:b0:c0:74:7f:
55:95:9b:66:78:44:96:41:9b:18:93:47:a1:de:08:
e0:7c:ea:05:06:32:fe:d4:02:05:9b:06:76:1c:61:
b2:e8:90:22:d2:3d:08:a4:ea:96:aa:88:08:fb:4e:
dc:a5:f0:5b:7e:bf:d3:2e:87:14:d1:e7:81:62:d3:
56:db:d1:23:c0:5c:66:c3:20:a4:c8:21:bd:ee:f8:
99:bf:8d:8d:14:a7:c0:6b:a7:ed:c4:0a:c5:4e:27:
2f:aa:e7:ee:d1:26:f9:b5:a8:64:7d:d5:2c:ae:fb:
6f:04:f5:ed:2b:c7:56:82:83:77:5c:66:f0:eb:85:
d7:a0:ff:e2:82:47:ee:8a:f5:11:2c:a2:69:ec:78:
94:63:d1:b7:ec:4b:5f:8a:16:45:38:38:eb:25:2f:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:2C:2B:0F:1E:CB:69:3C:9B:91:0A:A8:47:58:A8:96:14:51:89
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:31:5e:d3:ff:ae:92:f1:06:5d:e0:08:ba:01:15:a2:05:74:
41:ee:f9:44:f8:77:42:07:bd:6e:d9:50:b6:9a:74:77:5b:1e:
ca:e7:b5:91:6a:40:21:de:a2:69:90:ee:2e:51:e5:17:df:29:
5f:ff:ce:6d:fb:0b:84:8e:ed:d3:e0:da:2c:5b:69:e1:80:ec:
26:29:e9:b0:f2:34:e3:c1:23:e6:05:5d:6c:28:c7:10:50:26:
a1:e8:18:06:22:4a:6f:d8:49:45:19:d5:6b:1e:e8:6f:36:d4:
50:2b:06:81:18:59:75:80:bc:28:d5:b2:bd:d7:35:bd:93:f1:
46:cf:c5:7d:06:f7:e7:73:29:38:50:9e:9f:a2:0e:bc:8d:50:
9a:d8:21:1a:df:c0:a5:e6:26:83:ff:f4:6a:91:b5:03:2b:88:
d0:08:25:19:db:97:bf:15:56:4e:aa:fd:db:bf:65:52:48:dc:
aa:17:61:96:21:2c:8a:c6:2e:55:16:53:16:09:27:70:09:35:
ab:90:dd:26:ac:1e:21:d7:bb:91:e3:cd:1b:a5:8a:52:6f:cb:
c5:e6:68:80:d8:d1:23:b7:92:e5:51:b3:21:2b:c5:d5:87:c6:
d0:62:e2:81:89:a8:a7:12:77:72:ed:1a:f0:99:81:03:5e:68:
ce:a2:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:49:27 2025 by rpki-client