Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: sTcJvCjqgK7sUtklZDYMyS/ugQA9+jMppgq15vua8UE=
Subject key identifier: 1F:96:A1:17:4F:0B:9F:42:94:B6:86:34:B2:01:90:FD:1C:C3:93:11
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019761A80D521A7E01FA6709DE31AA707088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 1228
Signing time: Thu 12 Jun 2025 01:01:32 +0000
Manifest this update: Thu 12 Jun 2025 01:01:32 +0000
Manifest next update: Fri 13 Jun 2025 01:01:32 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: Xsw5edaAetF6uTM6xm7ka3wKTzbFejIYNPwpYZl+N8w=)
2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a8:0d:52:1a:7e:01:fa:67:09:de:31:aa:70:70:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Jun 12 01:01:32 2025 GMT
Not After : Jun 13 01:01:32 2025 GMT
Subject: CN=1f96a1174f0b9f4294b68634b20190fd1cc39311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:62:6b:70:46:e9:15:75:8b:85:84:c2:73:
98:d8:45:b0:7a:65:90:0a:df:0f:2e:05:ff:89:a7:
53:26:2e:0e:9c:3e:02:2c:cd:ba:13:d1:37:a3:a8:
7a:75:fb:22:1a:af:87:ba:10:55:58:c9:94:e7:6a:
85:f7:60:c9:b3:d9:5f:64:c3:e5:99:63:1a:24:50:
a3:2d:36:69:f3:66:76:f6:34:dc:2d:ac:c2:c6:dd:
a1:8a:da:db:4b:60:cd:ff:cb:81:e7:9a:8f:57:fb:
8a:84:4b:ee:99:eb:79:ff:ac:cb:ac:c0:22:19:2f:
2a:57:a8:7f:c3:f9:98:99:7e:fe:41:19:90:44:38:
60:14:82:28:17:bb:be:98:40:ea:96:c0:7f:47:70:
35:7f:1c:5b:7e:fc:d1:3d:b4:16:e2:36:5e:a0:13:
24:b2:1f:45:6e:08:05:69:9a:a4:34:28:d9:d6:d3:
38:f1:07:ca:dd:8b:cd:9a:89:27:22:cc:0d:db:9a:
5a:7f:aa:25:36:05:da:41:a5:0e:a1:fb:d7:7b:d2:
00:58:70:91:63:9b:6b:ee:48:d3:0f:07:a5:b9:3f:
91:8f:55:25:b9:16:ed:56:94:e4:be:db:8f:53:46:
65:74:98:75:c0:f8:ea:3f:67:64:b8:88:d6:a6:b2:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:A1:17:4F:0B:9F:42:94:B6:86:34:B2:01:90:FD:1C:C3:93:11
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d0:18:c6:ec:14:9f:f3:e1:30:5b:08:92:f1:3c:0c:2f:2d:
c3:0d:0d:71:d3:79:cd:ac:21:d2:f0:d1:c6:b9:c0:6a:dc:5a:
94:ed:44:3f:16:0a:b2:bf:3f:53:2e:0b:ca:c4:64:85:ca:20:
aa:43:03:d1:04:82:a2:a2:cb:77:60:85:f3:37:92:58:93:c6:
52:15:77:84:59:c4:cc:fa:d2:ce:52:c9:33:37:86:15:51:ab:
c1:39:d5:2f:d2:4e:34:d1:e2:96:f1:17:09:57:aa:e8:0a:3c:
75:d2:5e:51:66:e1:1d:c8:cd:96:f9:d2:42:93:03:ba:48:41:
4d:67:25:1c:c9:b4:04:bb:63:1a:d4:bb:d0:c2:e2:09:22:a5:
82:fb:0f:fb:62:3e:5e:31:d6:51:26:1e:ed:b4:ee:c1:9c:ee:
5d:97:53:97:58:3b:b5:80:3a:5d:9a:4b:3e:28:05:a4:e0:27:
0b:36:99:6b:ed:eb:b8:20:5b:a8:f3:fc:9e:14:d0:f9:f5:a1:
f1:70:89:51:d5:a8:3b:9a:ad:37:b0:21:89:b9:6a:fa:a9:56:
33:f2:35:17:34:50:75:3d:5f:e0:a4:b4:c9:53:9e:75:50:15:
bf:51:70:de:72:bc:4b:81:f5:52:fb:97:e0:04:db:95:fc:89:
5d:59:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:19:35 2025 by rpki-client