Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: +SoKPxef83cFRyIQx4gG2RPIVybJ8ZOYskDu8DhEFWI=
Subject key identifier: 40:A3:66:88:C5:C0:05:15:37:F0:B2:3F:3E:82:61:CE:3C:E5:BF:6E
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 01976F9A60298B2EC7CC75B08655803D551A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 18:01:17 +0000
Manifest this update: Sat 14 Jun 2025 18:01:17 +0000
Manifest next update: Sun 15 Jun 2025 18:01:17 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: PF3MGVi2Ef7PiYqgZD00PXhMY+rdDsUeboqBUGwEG28=)
2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=)
3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:60:29:8b:2e:c7:cc:75:b0:86:55:80:3d:55:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Jun 14 18:01:17 2025 GMT
Not After : Jun 15 18:01:17 2025 GMT
Subject: CN=40a36688c5c0051537f0b23f3e8261ce3ce5bf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:0c:3c:85:04:98:31:f6:1c:54:8a:a8:ff:
6f:f1:4c:33:41:f2:4a:f2:3d:a2:bc:1c:d1:bf:5d:
a1:10:7e:96:62:74:f8:c4:0b:97:f7:64:5c:f1:6f:
f8:32:55:ba:08:42:83:b7:d1:a1:07:5f:24:20:6b:
4e:79:c6:c2:a7:1b:1f:3e:7c:14:a1:9a:b4:b9:b2:
dd:66:0f:e0:cc:4c:5b:7b:3a:13:2d:71:35:6a:de:
c5:6f:4e:a2:dc:77:d5:96:e0:72:cc:db:9a:1e:31:
81:a6:97:a6:4d:f0:d3:b9:cd:82:a0:5e:81:6b:73:
52:bf:f9:24:0e:7e:bf:8d:d4:93:5d:dd:0c:37:30:
1c:91:cb:4c:0c:4a:d9:aa:b3:9c:cb:0f:e2:c2:cb:
4d:88:86:84:49:07:d4:0a:83:4e:83:4f:86:27:f8:
35:ec:e8:73:67:14:f0:fe:a0:18:4d:ac:37:e2:b4:
3b:69:4b:7b:e8:5e:4a:1c:04:93:52:fe:a5:2a:bc:
90:1f:34:80:65:89:d7:f1:1d:74:b4:69:a8:16:54:
0d:17:21:17:c7:67:1e:f0:e3:25:8a:58:07:c7:45:
a3:5f:79:35:37:77:0e:e9:a6:39:bc:f4:01:2b:56:
39:3a:a6:6f:64:ed:ab:56:a7:5c:98:f5:81:41:52:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:66:88:C5:C0:05:15:37:F0:B2:3F:3E:82:61:CE:3C:E5:BF:6E
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f5:ee:93:ab:91:25:29:63:ab:ef:d5:3a:62:7f:47:89:ae:d9:
86:f7:d6:14:56:35:21:8b:06:1f:3e:a6:a9:9b:e2:4a:cd:a8:
5b:65:b8:99:91:a7:52:28:34:ea:d2:96:4d:13:e9:41:7a:34:
f0:08:9b:53:ef:c3:4a:be:ea:5f:b0:72:cc:85:17:60:35:bc:
36:28:64:e0:75:72:25:04:cb:f6:c1:00:8d:fd:1e:0a:ac:0c:
6f:17:8c:f3:9c:12:dd:42:e4:0a:ec:a0:bb:7f:94:fb:3d:b6:
be:19:14:24:bb:24:d2:7f:32:18:4d:48:63:de:25:52:bf:e7:
9a:a3:7a:1b:66:58:60:59:fa:1a:21:bd:35:0d:a7:e1:24:4b:
ee:45:14:90:e5:2f:bd:20:fe:22:ca:d5:25:8c:83:9d:f2:66:
5f:5f:98:2d:2c:3b:bf:5e:af:76:47:cd:2c:57:25:d3:6e:21:
3a:3f:39:29:7e:37:ba:02:be:63:1c:5d:dd:20:0b:f7:d8:a7:
86:ca:b7:16:f1:10:aa:a4:d9:8b:a4:18:06:b3:f3:da:a1:e3:
60:22:03:a1:ba:aa:d1:1e:58:20:08:73:2e:e4:25:20:06:21:
5d:21:27:df:d9:a5:4e:49:6d:d2:97:e5:dc:49:5d:90:52:55:
50:8d:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:13:40 2025 by rpki-client