Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.mft (raw, json)
Hash identifier: e2IfIA3kl2kebBtamSnX0/8TOdxRnn3cn8aeyyr1O1o=
Subject key identifier: 62:F0:51:B1:D1:29:D9:6A:06:D8:9B:93:67:4C:49:21:09:C2:EC:53
Authority key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Certificate issuer: /CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Certificate serial: 01976BBD456434D750DC9D6921455B3AD762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 00:00:55 +0000
Manifest this update: Sat 14 Jun 2025 00:00:55 +0000
Manifest next update: Sun 15 Jun 2025 00:00:55 +0000
Files and hashes: 1: 1-cSsxnpLABNVenTs5mQfT5R1_y0.crl (hash: acbL267lQQguoM/RCaRy3gnYY8BtE+e6p0Q1DcjFwhc=)
2: 9KxQR6j2axabNDMZ1-8dgcNiaM8.roa (hash: 2rUs2SoRDiW7TeHLXoH00fOWIiSClvCYzvEbW1LWNms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:45:64:34:d7:50:dc:9d:69:21:45:5b:3a:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Validity
Not Before: Jun 14 00:00:55 2025 GMT
Not After : Jun 15 00:00:55 2025 GMT
Subject: CN=62f051b1d129d96a06d89b93674c492109c2ec53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:84:6b:70:71:52:aa:60:71:56:62:7f:c2:
93:af:41:7e:83:61:bc:8e:16:f2:46:fe:e9:42:d0:
ed:f6:cc:dc:4a:de:be:e0:ed:54:19:08:f2:13:82:
5e:b9:40:c7:91:97:0c:61:41:5c:38:28:be:f4:05:
92:2a:cb:f8:58:25:e5:80:84:1e:cd:f9:21:b7:b9:
5f:64:97:bb:5c:5f:bc:4e:19:d0:1f:a4:51:72:1c:
5f:88:97:8b:30:0d:06:9e:b9:25:0e:b7:49:6f:10:
f5:23:2d:3b:a6:6b:d0:ac:29:f2:c4:f8:bb:6d:80:
dd:49:10:1c:a8:0b:9a:05:9e:2f:4b:7a:68:6f:6e:
72:72:32:22:cf:8f:54:a8:22:9f:63:dd:da:ae:03:
e8:46:24:82:cd:0f:a6:7d:9d:7a:e6:34:78:96:0d:
ee:a6:98:22:82:15:ab:c8:45:89:c7:3f:e6:52:1d:
e6:5f:d8:51:92:11:3e:66:22:e5:5b:89:cd:93:8f:
fe:8b:fe:ba:ee:34:38:b2:16:21:fc:86:8a:64:54:
78:fe:95:3b:8d:71:c5:d7:89:44:86:e1:0d:53:d2:
c8:19:3a:7b:9b:d2:94:c4:88:7a:21:98:f7:5e:13:
7a:c8:60:f4:01:ee:e0:03:f1:40:a7:f3:07:10:c8:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F0:51:B1:D1:29:D9:6A:06:D8:9B:93:67:4C:49:21:09:C2:EC:53
X509v3 Authority Key Identifier:
keyid:F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e7:10:c7:a7:6c:32:64:8c:39:fd:ed:a0:67:e5:ed:0e:17:
aa:cb:b9:83:16:82:81:f8:88:2d:b9:b8:09:44:6d:fd:d6:ac:
2a:3c:7e:67:d9:74:f5:c7:b8:10:2c:c6:3c:6a:99:6d:74:44:
bf:ea:dd:7a:a6:4b:5c:0a:17:a6:75:5c:f1:14:2f:4a:73:76:
a5:19:5c:8b:16:1c:e5:04:d7:be:3d:23:6a:43:8b:d5:e6:6c:
03:8e:48:12:10:ab:71:f2:aa:60:3a:55:9d:c7:8e:dc:75:95:
a7:42:46:f1:d9:24:3a:3b:02:62:78:cd:b5:0c:6e:4d:6e:48:
4d:11:ba:13:78:ab:2f:84:83:36:ae:1e:61:58:c9:3a:9e:97:
3f:48:d3:a8:32:eb:c9:d2:a8:cb:e6:11:6b:bc:87:32:25:35:
bd:cd:8c:c5:9c:8a:65:44:07:f2:c6:15:3a:6d:9d:a9:33:df:
85:29:5f:4b:93:67:73:79:6c:23:a5:5c:67:3c:b5:21:45:4f:
49:70:4b:1a:67:99:81:0d:d1:21:33:37:34:be:67:d4:ef:df:
e5:6d:94:4a:7d:7c:14:28:b3:23:ae:95:73:11:0e:63:e9:9a:
41:4d:52:f5:0e:83:e8:c6:4e:54:8c:55:b9:d2:b6:d8:9d:33:
51:57:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:38 2025 by rpki-client