Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: GQYV390r5d9yWt4FcbFtq7WGIuGhCVJKTeBAB9QDAuQ=
Subject key identifier: 1D:A9:01:3E:04:61:D5:3E:B5:1D:A3:9B:0F:BC:28:04:B4:B3:AA:37
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019746672DF418B63A9026AE4034286843A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 18:00:56 +0000
Manifest this update: Fri 06 Jun 2025 18:00:56 +0000
Manifest next update: Sat 07 Jun 2025 18:00:56 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: E6iRQeiwGG/J7UW6NGMxdd+A4Cvojx7WrzGAJZmCqUw=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:2d:f4:18:b6:3a:90:26:ae:40:34:28:68:43:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Jun 6 18:00:56 2025 GMT
Not After : Jun 7 18:00:56 2025 GMT
Subject: CN=1da9013e0461d53eb51da39b0fbc2804b4b3aa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:40:e9:59:0b:4e:e7:c2:b5:5c:4c:19:3d:
57:c6:b9:1a:65:5a:ea:98:96:db:d6:d3:79:9f:57:
00:ec:93:fd:a8:e3:67:20:74:28:6a:b9:ed:45:01:
cb:be:48:ae:68:2e:70:e0:95:10:94:81:29:ae:fe:
28:bd:29:ad:d9:3f:2c:66:1e:2a:d0:14:80:53:0a:
a4:62:ce:ad:4d:f5:87:ca:70:70:8c:b5:9e:33:48:
b2:ae:f3:ad:29:a7:8b:80:0b:04:a2:9f:f2:eb:0e:
21:00:28:ea:0f:3a:a2:2e:27:16:87:72:c2:86:d3:
6a:69:e3:97:b5:46:69:82:cb:65:93:cc:0b:63:10:
3f:8f:3e:67:b1:68:49:8f:97:6a:eb:1f:89:a6:d5:
aa:c2:df:cb:46:26:40:4a:90:a3:1a:99:0a:14:56:
bb:2a:e1:a9:93:fe:6f:1c:9b:a4:2b:f3:19:41:8e:
36:fa:46:4e:89:de:d6:af:44:03:b8:28:56:e2:da:
53:19:25:1b:c1:8d:ee:0a:05:a9:ee:a5:3b:21:fb:
f5:e7:61:ad:34:e4:1f:96:ee:8a:6c:46:ae:91:0e:
e9:52:c8:5d:2f:c7:ed:fa:fc:25:7a:5e:7f:37:9f:
70:a0:58:6f:98:54:6c:6b:af:a5:50:34:50:da:a7:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A9:01:3E:04:61:D5:3E:B5:1D:A3:9B:0F:BC:28:04:B4:B3:AA:37
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:52:06:33:de:04:02:9d:73:67:88:2e:54:17:66:19:60:f7:
b2:2a:14:7a:85:23:a7:b2:24:6d:45:38:5a:5f:2d:38:0d:5d:
ab:c8:6a:69:e1:b4:41:59:6e:fd:80:ab:45:7b:77:b2:e1:40:
45:7e:63:0d:c3:eb:c5:8c:0d:55:ba:d7:31:37:52:1f:19:ed:
8b:d7:b6:77:86:52:59:9d:3b:58:b7:8b:e5:a5:04:92:27:bb:
7e:aa:9d:78:23:3a:00:3b:bb:60:88:a9:4b:11:cc:e3:c6:c8:
06:49:c6:8f:cb:1f:33:7f:d9:8e:cd:a7:5e:bb:29:2c:55:b6:
d4:ad:52:8b:80:4f:c8:27:f6:e0:47:62:70:59:38:41:3e:f5:
94:64:68:c6:fb:65:40:47:e4:ae:d2:53:53:6a:0f:4c:e7:64:
cc:4c:17:89:03:a5:24:5d:ad:59:be:e3:35:17:fb:c5:b9:05:
4e:dc:ae:d8:cd:89:81:0a:7b:25:41:97:d8:ad:36:27:36:16:
a6:24:f7:0e:14:ce:02:db:34:21:de:8a:05:32:1d:49:32:90:
24:76:58:3a:b1:5a:f4:f1:76:ce:30:57:95:51:a7:1a:50:66:
87:3c:9b:fd:69:59:f7:81:19:d9:17:46:99:e1:4c:de:d3:09:
ac:9c:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:58:28 2025 by rpki-client