Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: OcSjIutvNYe8M4EJgpBtK9ysd+mwuvmflQX7ugsqb6w=
Subject key identifier: BB:4E:7C:39:F0:DB:54:20:9F:E9:4C:B7:6B:8E:E1:81:AF:72:7D:07
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 01984A779837971556F746B3F64157A7F79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0839
Signing time: Sun 27 Jul 2025 06:00:08 +0000
Manifest this update: Sun 27 Jul 2025 06:00:08 +0000
Manifest next update: Mon 28 Jul 2025 06:00:08 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: 410I1+AABxArGDBDQVHoM5ARW4LUbm4MzeqAjM53Q0Y=)
2: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (hash: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:98:37:97:15:56:f7:46:b3:f6:41:57:a7:f7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Jul 27 06:00:08 2025 GMT
Not After : Jul 28 06:00:08 2025 GMT
Subject: CN=bb4e7c39f0db54209fe94cb76b8ee181af727d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:85:03:f7:34:85:5d:c6:4a:f2:29:c1:47:
e2:34:68:e1:d5:9c:56:f9:a8:fc:b1:f0:7b:46:a0:
31:18:0c:ba:f9:af:17:3b:52:3d:50:68:69:bf:06:
03:d7:83:d0:8d:d3:25:82:be:f4:86:c3:d3:72:21:
ff:08:60:9b:0a:8d:df:01:67:cf:4a:24:7b:33:da:
98:69:ba:3b:83:a3:46:4d:14:f5:46:5c:34:16:40:
76:5f:39:99:39:0e:d8:9a:b4:a2:52:98:2d:c2:80:
91:ef:f4:d1:86:a0:ba:71:0d:27:1e:47:77:1f:d3:
1a:24:7f:e4:a3:b9:d0:0a:0b:70:96:b5:b9:f9:53:
c7:bd:64:a0:10:e8:d3:65:a8:45:11:37:bd:09:4f:
a7:95:b8:be:d4:71:45:18:78:11:77:97:c1:48:f2:
c1:b7:e1:ab:0e:1a:d9:64:3c:5d:25:eb:56:4f:43:
9e:55:70:99:85:3d:07:8f:18:21:eb:04:bc:4f:0c:
74:f7:83:21:7b:7a:8a:78:17:57:42:07:41:e2:55:
5d:e0:95:db:0e:52:f6:09:b8:34:26:ba:7d:b2:35:
26:78:e1:21:0d:b8:e9:89:b1:b9:da:60:3d:c9:0c:
8a:01:72:c6:80:d7:a7:65:da:30:92:33:8f:1c:10:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:7C:39:F0:DB:54:20:9F:E9:4C:B7:6B:8E:E1:81:AF:72:7D:07
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:66:d6:8c:5d:9d:e7:06:f9:bb:c6:3b:4d:b5:60:e7:b2:46:
98:e9:73:c9:7f:ba:b4:78:d4:14:ee:a9:b1:66:13:4f:f1:db:
64:17:d8:ef:d8:b2:13:b4:a3:b9:bc:30:1b:c6:5c:9a:6a:a5:
73:df:b7:3e:20:8c:37:c1:d4:51:cc:6a:65:51:a1:4e:f3:cc:
70:df:c2:6e:15:14:dd:43:98:3f:e9:36:58:5e:08:ff:aa:53:
05:02:6a:2a:e2:13:77:90:5a:77:e8:2f:a9:a4:68:3a:d4:f1:
20:aa:86:de:71:bd:ec:32:b6:45:bc:0d:51:76:ed:b3:45:3a:
60:da:31:8c:fd:ff:c0:63:a5:c5:f8:49:c9:95:ee:ce:2f:fb:
a0:7e:e5:4a:d7:06:5d:32:22:03:84:34:ca:59:ec:c2:49:ba:
2b:92:fa:d0:a5:6b:f3:02:b8:82:71:fa:98:68:a0:d9:1e:8b:
ce:02:b4:f5:a6:c8:58:2d:11:de:9b:3d:04:c6:1b:b3:e8:7e:
08:d1:46:86:6a:91:08:43:ed:ef:69:dc:3b:d3:4e:27:9b:d6:
2b:c2:b3:04:03:41:bf:55:21:05:d1:0f:cf:3c:10:a5:fe:dd:
18:e7:0b:d2:ec:fc:6f:c7:d5:d1:d0:ba:ba:5a:a8:d5:01:93:
b3:71:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:02:15 2025 by rpki-client