Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: q1hJtI1pLWFpCvRQejuN9kPjbYBhl18dbtUkW0swQFg=
Subject key identifier: 8D:6F:F1:8A:AB:63:3E:F7:90:DF:F5:16:C9:7C:7F:9B:38:C6:F1:1F
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 01977187F0B70C2DD889BC30CBB2AEF14042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 04C1
Signing time: Sun 15 Jun 2025 03:00:23 +0000
Manifest this update: Sun 15 Jun 2025 03:00:23 +0000
Manifest next update: Mon 16 Jun 2025 03:00:23 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: Y3X2TWi5ZrRGflF/t1PUyXTKrkFiTwRGub5+zzutvy4=)
2: lkUV_pQvaLsSaoJOegWniJF6RQo.roa (hash: i9n/5GhzO6//QgpiyuPewqwCFXVYirWQt6MCRZhl13U=)
3: x_9Ds4w921G-S6uMB3BqKl4lwk4.roa (hash: 4uIRZVtStLzfbHbkUvgOoPNPKk9YaTAL+flcnzSJknE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:f0:b7:0c:2d:d8:89:bc:30:cb:b2:ae:f1:40:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Jun 15 03:00:23 2025 GMT
Not After : Jun 16 03:00:23 2025 GMT
Subject: CN=8d6ff18aab633ef790dff516c97c7f9b38c6f11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:76:c1:ee:25:8c:f9:0b:d9:4b:3a:4d:25:
08:d8:40:4b:cb:7a:7a:44:de:89:29:96:f3:19:cf:
65:44:88:f4:33:28:0a:fd:dd:be:91:58:64:bf:24:
71:b5:f8:f0:3a:d7:0d:03:d8:84:20:e5:08:46:a6:
0e:66:90:d9:40:3f:4e:19:bd:0b:cf:d9:59:ae:bd:
bf:ff:22:0d:84:f8:9d:5d:72:2b:01:3e:ea:a7:3b:
e4:17:18:83:16:59:e5:02:34:47:28:89:e8:34:54:
01:ca:df:5b:56:80:be:24:72:22:fe:8c:17:17:e9:
98:ea:84:99:e6:99:4d:1c:a8:e0:e3:ef:e9:7a:0e:
c5:f0:e9:e7:9c:ff:d7:dd:ac:b7:77:8c:81:af:05:
76:41:a1:12:86:c7:b3:c1:5b:ff:60:3e:dc:bd:c4:
ed:c9:51:ed:42:0d:56:30:2a:ba:7f:05:be:d3:2e:
84:54:c8:3b:2e:d7:4d:74:6a:30:e4:5c:5e:2d:a4:
4f:62:21:ef:f7:e0:ca:19:ef:49:1f:92:ee:56:5e:
fa:53:2b:9b:80:c3:dd:a4:9d:fd:55:f8:b7:5c:a0:
97:f2:9e:f3:f6:17:3b:4a:45:ed:cb:17:0d:d8:4d:
4a:72:74:e8:f1:29:1f:c4:6d:7d:a4:f9:29:22:7a:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:F1:8A:AB:63:3E:F7:90:DF:F5:16:C9:7C:7F:9B:38:C6:F1:1F
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0b:78:ea:0c:23:0c:21:0c:07:56:f8:76:01:df:df:92:dc:
a5:5f:f3:5c:32:62:0a:39:33:dd:86:a3:1c:73:d9:4d:dd:bb:
47:71:12:8d:55:71:f1:29:88:a6:1c:66:b9:f9:ab:a7:3a:5d:
71:bb:4e:3b:8f:3b:9e:7b:c2:fb:28:d2:84:48:e6:42:fa:b1:
cf:0e:1a:8b:db:5a:6d:c0:5d:66:08:40:01:4c:45:c3:38:f9:
0b:c8:11:7f:18:d2:5f:fb:d8:53:43:85:fe:3e:db:ea:4c:09:
32:2d:af:4e:09:6a:c9:e8:fc:90:63:8c:cf:3e:65:0b:3b:12:
14:ef:7c:c7:5d:5e:65:5f:ac:42:e0:48:f6:20:2c:eb:2b:a4:
db:d0:7f:04:4b:7f:36:6f:6b:71:28:f9:1c:c4:a2:8d:dc:41:
0d:aa:cc:6f:bd:db:5b:79:68:e3:ca:0d:91:61:51:ca:b3:88:
96:20:6f:5d:19:25:ba:95:99:37:42:43:fc:d5:9c:b7:9d:df:
58:83:b1:b2:e8:bc:86:5b:0b:12:8c:c1:5e:7a:a5:1f:fa:99:
db:81:f7:a6:89:39:90:ff:7b:26:24:0e:c7:94:ad:1c:fd:89:
cd:96:2d:92:85:07:91:de:e3:18:25:f4:14:aa:a2:30:09:96:
34:80:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:56:30 2025 by rpki-client