Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: RMU14EMVRB63g4va5AkvjSdaPXNDhmYBaVbaOeld08Q=
Subject key identifier: FD:93:DA:E4:23:3A:B5:A5:CB:C3:6C:49:76:4A:DC:07:F1:FE:7C:0B
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 01983F1866F979D90253F29C360B1A2FDA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 01:00:20 +0000
Manifest this update: Fri 25 Jul 2025 01:00:20 +0000
Manifest next update: Sat 26 Jul 2025 01:00:20 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: BfvnxweecvcNEpqCbw67kPI3gjuR4HUFEy8utwj88Yc=)
2: HrH3DyFGiBEMYeiK4JQtPCMBdds.roa (hash: 7Qo4VPKeUbi86BxMP/IbODYzoRV/6QGbnBfiLkZFcUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:18:66:f9:79:d9:02:53:f2:9c:36:0b:1a:2f:da:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Jul 25 01:00:20 2025 GMT
Not After : Jul 26 01:00:20 2025 GMT
Subject: CN=fd93dae4233ab5a5cbc36c49764adc07f1fe7c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:c6:e0:bb:c1:1c:e0:2f:e9:e5:53:fe:3c:
c6:9f:7b:97:9b:a2:43:7c:25:a3:4e:79:2d:65:32:
32:6b:a0:e3:5e:87:e6:f6:cb:86:71:f2:53:0b:48:
eb:9b:6d:d1:83:6b:12:95:cc:28:af:16:3a:18:f4:
a7:3a:ba:fb:54:7d:1d:36:1c:33:ea:9c:72:5f:90:
a8:77:a2:ce:60:fb:06:59:57:23:99:16:a5:31:e4:
51:a4:31:50:77:96:94:af:94:03:a9:92:38:da:96:
20:4f:fd:8f:63:ce:50:2e:12:19:ec:13:3c:f4:51:
77:69:b3:82:1c:9f:0f:f9:8e:05:7e:2e:1c:67:b3:
47:c1:e9:57:a4:fd:a4:de:12:9e:42:ce:ea:f4:9f:
46:ed:b6:ff:9b:fd:8e:ce:3f:1f:f3:14:40:de:52:
94:8e:9f:ca:aa:dc:5d:4f:6e:74:65:7e:e4:f0:04:
6b:f2:72:ce:f1:78:3c:70:7c:69:d6:46:b5:51:c1:
3c:4f:a8:4b:18:28:60:cf:17:43:0a:9f:38:cc:02:
e3:f2:e8:d1:f1:71:ba:94:65:e0:73:4e:b3:9c:0d:
30:68:17:a8:86:5f:39:ff:0f:44:b6:2d:d6:48:61:
7c:94:5d:e8:7b:4e:4b:89:8a:c1:f7:cf:79:a1:ac:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:DA:E4:23:3A:B5:A5:CB:C3:6C:49:76:4A:DC:07:F1:FE:7C:0B
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:63:a2:44:6f:a8:db:46:fa:1a:9f:ef:e0:bf:fb:fd:ff:eb:
78:47:ff:ea:ca:a9:77:ee:5f:65:15:01:1d:9c:ad:4d:e1:23:
02:63:a0:00:db:5d:e3:84:04:aa:5e:28:60:0c:a1:d6:a3:bc:
2d:41:bc:71:46:33:0b:e8:6a:ba:1d:d8:c4:ec:d8:7c:f0:75:
c2:e8:9c:b1:e9:51:0e:6b:25:b0:b0:5a:23:2a:84:fe:f7:84:
b6:54:e3:7a:c2:52:3e:c1:7d:fe:14:99:58:c5:43:f9:08:39:
35:ab:e7:91:db:a6:9a:74:b6:80:03:b1:a3:82:5b:43:a4:f4:
3e:dd:b0:c4:42:2b:5e:3b:ef:57:77:af:2f:5c:aa:35:ae:82:
d3:a1:fa:b3:cb:6d:8d:72:e2:a4:5e:17:4f:a6:20:13:7c:ac:
ad:9b:b4:22:17:92:c9:a6:6b:1b:32:7e:f5:88:f9:a6:8d:49:
0b:34:12:ef:db:5b:87:f8:d8:e5:c4:6a:e6:1d:e5:5b:76:ad:
56:28:27:10:a2:d4:e8:e9:3e:03:49:d9:4f:b9:6e:9c:90:b4:
9e:7d:eb:e5:34:e4:b5:97:a3:40:65:97:4e:63:26:1d:ad:89:
91:86:e0:bd:7f:5f:3a:f5:1e:c3:67:a1:e4:d8:93:82:22:3e:
39:9c:33:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:02:24 2025 by rpki-client