Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: NJnF8eFtgKl//DEJ83Dz0huDQ30EiashudJNnARhnmA=
Subject key identifier: F7:0C:80:05:8E:A9:F5:3D:D0:CD:AC:A4:D1:68:54:50:C0:A6:F0:FD
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 019771512173E22510CE0E739DBADDCB1AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 02:00:31 +0000
Manifest this update: Sun 15 Jun 2025 02:00:31 +0000
Manifest next update: Mon 16 Jun 2025 02:00:31 +0000
Files and hashes: 1: AkbyjYPO5ixVDwG-XwCAg4fRm7E.roa (hash: gAcIevSpRGgPBGXOjkQU47jXE5lSjh7Vwo42YLBdF64=)
2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: rJgjfKqHGIlLbEEl4jqKCXx18FRkE7ZK4K072ta39mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:21:73:e2:25:10:ce:0e:73:9d:ba:dd:cb:1a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Jun 15 02:00:31 2025 GMT
Not After : Jun 16 02:00:31 2025 GMT
Subject: CN=f70c80058ea9f53dd0cdaca4d1685450c0a6f0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:5f:ca:6d:b7:28:2b:19:5f:53:65:00:3d:
d7:61:96:8f:6e:e5:4f:6f:3e:a4:1c:3f:a8:a7:ba:
f4:ab:24:47:4e:6f:ff:aa:06:5c:46:e4:12:bd:02:
a1:95:1e:80:7b:55:01:0d:61:86:45:11:2e:9c:e7:
68:5c:c8:23:e8:95:83:41:8f:81:ce:71:6e:23:73:
4b:44:d8:db:20:9e:17:f7:7e:f5:56:3d:06:d8:79:
17:3d:92:c9:fc:8d:ea:3b:bf:52:fa:9f:73:50:59:
12:0f:ff:89:2e:c9:74:27:93:ca:00:7d:67:15:28:
c4:14:f7:76:83:bf:c6:eb:1b:3d:10:7c:aa:ec:04:
66:35:79:26:d8:b6:87:95:22:5c:0c:48:72:98:a9:
f4:b4:c5:97:0b:c4:47:9a:08:9b:12:04:39:a6:2f:
e7:fa:28:4b:80:d4:2e:f4:aa:4b:e2:2c:81:9d:70:
15:84:03:43:46:22:c3:ca:6f:89:81:7c:02:e4:01:
6b:b8:e9:8b:52:58:1b:03:dc:8f:f2:22:6d:6d:0d:
70:7e:df:cb:10:92:8b:3a:07:b1:b9:76:57:c2:b5:
f2:24:84:83:d3:c2:e0:cd:88:3a:48:5e:89:b6:de:
64:f8:a2:18:7a:e1:27:d7:2e:5c:9e:68:c2:5f:51:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:80:05:8E:A9:F5:3D:D0:CD:AC:A4:D1:68:54:50:C0:A6:F0:FD
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b5:0a:22:03:05:47:9e:39:6f:ce:bb:db:d8:a1:a5:c3:cb:
c4:0b:bf:4a:7b:d8:72:82:fc:f9:6c:98:ba:81:1c:95:e4:ed:
5f:10:2c:44:89:ca:cf:61:89:d5:09:22:9b:c8:49:02:78:41:
14:02:3f:9c:43:e5:2f:82:ca:b9:a0:e5:2f:a0:80:85:21:19:
22:80:84:a7:44:9a:dc:e3:47:b9:a3:6c:8c:31:bf:3b:10:b0:
d3:16:45:8d:04:fe:f3:bc:d8:7c:5d:28:4f:e8:6b:e7:66:27:
07:73:cf:0b:3a:91:ea:f2:d2:ce:5c:36:b5:0f:ce:31:0e:cb:
5d:b2:60:0f:df:fe:16:b2:2a:02:63:b7:6d:3b:24:01:2f:1e:
07:4c:7c:89:a6:fe:e7:c1:b8:4d:ba:47:fe:12:35:26:12:69:
d3:8e:d8:2e:38:30:ab:ed:79:46:72:c7:8a:9f:74:63:00:67:
22:e3:b9:8e:f3:99:83:37:8b:87:36:67:51:7f:12:3b:9f:a8:
d4:31:2c:41:1c:09:51:71:02:b3:f4:bc:84:0f:13:2d:9a:0e:
87:2b:96:f1:69:b3:9a:6c:63:30:66:a9:0a:47:32:9b:32:0d:
0d:22:e0:3f:9a:d8:38:89:f3:6a:4f:a1:eb:f3:46:9b:99:31:
e9:56:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:47 2025 by rpki-client