Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: M39NjqfVCawcUJUn6O7ndPagnIANGgHZbYnVaa5WPcU=
Subject key identifier: F2:14:32:E6:7B:45:D2:8A:A0:2C:10:47:51:F5:D9:EB:D4:66:93:CD
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 01976D3D49B03CE7EE696CC832C0AE6D27FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 12B6
Signing time: Sat 14 Jun 2025 07:00:22 +0000
Manifest this update: Sat 14 Jun 2025 07:00:22 +0000
Manifest next update: Sun 15 Jun 2025 07:00:22 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: XFBvs13qelwsFMljj0k+OySYRt5XDBbPaJB6kAxNhAs=)
2: tZasuPD6JQA_ahjp5Ij5d_DOYcw.roa (hash: m55Anp1468NYkjmZHCfthwEnWOmLpA6A1Rbb77d5auw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:49:b0:3c:e7:ee:69:6c:c8:32:c0:ae:6d:27:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Jun 14 07:00:22 2025 GMT
Not After : Jun 15 07:00:22 2025 GMT
Subject: CN=f21432e67b45d28aa02c104751f5d9ebd46693cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:b1:b2:2e:26:32:89:3a:44:4b:a6:f6:7f:
bf:80:9b:a8:60:8e:69:93:7e:d0:bd:b9:79:7c:46:
19:0b:e0:f6:67:d8:fa:07:1a:0d:39:e4:2b:e5:1a:
41:c5:49:80:7b:0b:aa:81:ef:7a:a1:5d:e5:3f:7d:
6d:d1:b9:4d:0b:4a:a3:1d:c2:d9:05:08:c9:43:8b:
25:d9:61:69:87:e8:5a:84:0d:21:bb:0d:c7:25:08:
23:e8:f3:ec:c5:1a:ce:bf:b7:fe:1e:98:97:43:39:
3a:fd:5d:3d:50:7d:30:2d:5e:c2:84:5b:69:bf:d3:
01:48:9d:57:a3:80:b3:86:6c:96:a6:39:a0:de:4e:
e9:95:19:56:e2:a0:c8:76:24:bf:3c:87:2e:10:6b:
b2:95:6f:30:61:b5:3b:85:40:21:e1:fe:51:09:78:
af:88:01:c3:67:67:c1:7e:7b:f5:b2:de:d6:ee:5a:
f9:1b:76:52:28:d0:fd:77:25:23:b0:91:93:b1:ee:
13:7e:f5:31:73:77:c1:b4:aa:c1:40:f8:47:83:12:
fc:1e:a9:e1:65:55:9b:0d:9a:8c:d9:62:23:91:56:
5e:1f:2f:35:47:44:17:4a:d4:65:09:65:2c:c0:16:
75:e1:54:69:66:a6:c0:c2:87:05:45:5f:af:c5:85:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:32:E6:7B:45:D2:8A:A0:2C:10:47:51:F5:D9:EB:D4:66:93:CD
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:d1:4a:d2:f0:dd:a0:80:85:89:e2:ee:4b:50:3a:4e:67:df:
35:5c:09:1f:e2:70:de:d2:2b:f2:47:93:5b:cf:23:f3:72:1e:
c2:c8:08:73:09:30:81:34:be:ab:05:68:43:8e:90:22:d0:81:
87:d0:18:d3:c4:85:21:6d:2e:41:87:a4:41:f5:eb:ca:c4:56:
6c:05:a7:21:d1:4e:cd:15:58:7c:c6:08:91:f1:49:be:8c:1d:
0a:34:c3:c8:2e:aa:09:13:3c:f0:3b:43:8b:bf:32:fc:88:bb:
40:52:a5:0e:b0:8d:97:6f:9c:40:5c:63:b4:6b:e7:72:11:bb:
93:fa:69:bb:86:02:a3:f4:87:ce:ba:b8:50:76:27:f5:b1:e1:
db:d1:b5:ba:8e:41:56:5c:c4:7b:fc:f0:13:42:3a:ce:9c:ab:
0d:87:8c:fa:88:91:9d:81:45:0b:2a:a9:df:2f:d4:bb:ef:8c:
6d:06:34:77:05:09:46:69:7d:2d:81:c5:47:8a:d4:75:7b:14:
2c:d0:bc:67:27:5e:76:84:59:af:86:2f:93:91:df:77:b9:32:
8c:6d:1b:bf:eb:2c:3d:37:a7:9b:df:48:fd:82:95:26:90:87:
4c:ae:00:e4:de:ea:b2:2d:51:b9:7b:3c:d8:be:7f:98:84:29:
1c:51:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:08:28 2025 by rpki-client