Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: Tm+mzCPU4yXtGnYsKRLniUTjxsTTxPSvHIkYsL04z1g=
Subject key identifier: 1C:40:62:DD:80:97:84:5E:D7:87:7B:34:E2:F3:37:E0:13:3C:D7:56
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 01976B8646F7F4F22B70DB234423950A8DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1521
Signing time: Fri 13 Jun 2025 23:00:51 +0000
Manifest this update: Fri 13 Jun 2025 23:00:51 +0000
Manifest next update: Sat 14 Jun 2025 23:00:51 +0000
Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: epdO7Vfydf+fP5F1aquYCIFvr+dgVbDlBL4q9OEVAYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:46:f7:f4:f2:2b:70:db:23:44:23:95:0a:8d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Jun 13 23:00:51 2025 GMT
Not After : Jun 14 23:00:51 2025 GMT
Subject: CN=1c4062dd8097845ed7877b34e2f337e0133cd756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:42:17:47:4c:d2:95:72:fa:b2:6f:7c:5a:
7e:16:06:52:48:90:6e:20:0d:ed:26:88:ce:00:19:
2c:22:05:ed:34:34:79:2a:2a:0d:94:79:25:ed:01:
6e:44:5c:a5:74:c5:a4:5a:b6:9a:4e:8c:7d:bd:79:
3a:80:43:58:41:00:dc:11:e8:76:77:54:cb:c1:93:
d5:7b:52:f9:30:d6:0b:48:14:0f:91:da:b8:13:47:
03:16:b1:c2:a1:53:be:26:e4:02:d5:44:d1:0a:bd:
df:50:f7:ad:e8:c7:82:7d:4b:fa:70:a4:ce:62:82:
c8:4d:e6:f2:4c:58:a7:72:96:d8:70:94:60:f6:56:
56:61:dc:88:0f:c8:3d:71:6d:87:0b:5b:49:8d:72:
88:e0:b5:ec:28:d7:49:b6:79:be:8c:9d:36:76:11:
8c:48:af:fa:1d:27:b4:8f:e8:9e:0f:6b:19:2e:00:
c7:5a:fa:9a:2b:0c:d0:50:15:56:fe:dc:72:10:e5:
a3:8b:43:a5:d0:b5:5b:bd:95:86:9a:72:9b:1f:cb:
b6:5e:6a:17:fa:21:ac:ef:dd:36:9c:01:21:69:23:
8b:a5:b7:03:e1:7f:eb:e1:cf:a0:46:44:8e:77:16:
a7:f1:c5:f4:5b:35:f4:b1:b9:8d:18:a4:64:85:ce:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:40:62:DD:80:97:84:5E:D7:87:7B:34:E2:F3:37:E0:13:3C:D7:56
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:02:e8:61:ad:31:61:69:ae:79:59:3d:0a:83:e8:be:d9:b4:
eb:34:c7:6a:56:0b:74:28:39:25:1d:72:cf:6b:02:e0:cd:b8:
3d:57:42:69:b1:fd:f5:ef:e6:ac:2e:df:f1:d6:b5:ef:67:0d:
61:0e:87:90:a4:4c:c1:84:0c:2b:9a:57:fb:06:9d:c5:f6:5a:
b7:51:90:af:da:30:32:9d:9c:a1:85:89:f0:09:92:68:48:bc:
53:38:0f:61:28:42:aa:93:bf:40:76:1b:8f:56:a4:f4:bc:75:
dc:1a:28:51:29:2a:07:d3:a8:ad:f9:46:a1:86:d7:a3:6a:ae:
8d:c4:47:f1:f2:4f:5e:de:79:9a:13:3d:cd:90:61:99:ac:f3:
09:15:01:f2:e5:61:bd:78:68:cc:3e:01:98:72:67:a8:5c:14:
bc:4f:4c:38:2b:05:b7:45:c1:cc:c8:4d:4b:7f:3f:93:e6:12:
36:bf:f9:e6:1f:68:de:ea:d9:d6:70:43:5a:87:7b:49:8a:44:
2c:cb:94:e7:0f:0f:85:97:67:5d:3a:13:ea:37:a3:0d:6b:ac:
65:6a:78:9b:db:69:14:b4:77:e5:15:24:e5:90:69:75:d9:95:
ba:45:0a:c6:a0:35:1f:75:d2:7c:59:46:f2:be:d3:16:36:66:
99:c1:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:50 2025 by rpki-client