
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: FLn4gNANaAbXnmGMiq1DypWjv+07V9Ah/ZRODdJwcuI=
Subject key identifier: 00:66:D4:B2:E6:1B:EF:60:F7:28:04:A1:BE:2B:A2:3D:38:7C:D8:79
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019749D603BF33D202556B79A905F44E35E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 154D
Signing time: Sat 07 Jun 2025 10:00:51 +0000
Manifest this update: Sat 07 Jun 2025 10:00:51 +0000
Manifest next update: Sun 08 Jun 2025 10:00:51 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: SpK7gHJ4DtYQgLTOQGiGlEFaDR/4BWR7F8hFsM2HCGE=)
2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:03:bf:33:d2:02:55:6b:79:a9:05:f4:4e:35:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Jun 7 10:00:51 2025 GMT
Not After : Jun 8 10:00:51 2025 GMT
Subject: CN=0066d4b2e61bef60f72804a1be2ba23d387cd879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:ba:34:92:48:b3:ab:c5:64:15:cf:4a:9d:
77:b7:9c:fb:a4:a9:2d:57:32:2b:18:bd:86:a6:08:
43:30:21:8e:f4:df:31:f2:f8:bc:f7:fd:ac:42:58:
d1:2f:8e:e5:f5:8e:4f:49:61:bc:e9:94:77:71:40:
d2:d3:c3:12:e6:fd:52:fd:e5:a3:9d:15:4e:52:08:
1f:eb:cb:6a:15:79:7c:9e:40:65:5d:fd:2e:b3:54:
ec:07:70:63:c8:0a:c3:06:52:77:be:d3:6d:6a:c9:
d8:6d:5a:97:9f:85:5b:7e:cb:38:84:f2:d7:5a:d1:
34:fd:4a:5b:65:f9:bb:da:1e:58:b8:83:95:31:33:
5d:6a:73:b3:4b:7c:6d:61:af:20:a5:14:ba:f2:bb:
f0:3d:61:10:c6:92:49:15:27:63:af:fe:03:3e:25:
7a:20:43:10:b3:6e:aa:89:a3:c7:35:59:ce:0a:6c:
c9:8d:10:00:cf:3a:13:ee:34:b9:ba:1e:f3:06:e8:
7c:da:a6:ae:6a:1d:f2:44:39:65:ba:2e:23:36:59:
c8:0e:14:51:81:19:80:5d:9f:48:8f:17:01:f9:95:
63:f1:36:ae:4e:2e:35:c4:11:ea:8e:1f:72:f2:21:
07:1d:1b:21:29:62:e5:d8:c5:02:c0:53:01:5f:04:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:D4:B2:E6:1B:EF:60:F7:28:04:A1:BE:2B:A2:3D:38:7C:D8:79
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ce:1e:0b:5d:e3:15:1c:be:c1:ce:58:e6:0c:f5:57:06:b1:
9f:62:39:5a:b5:42:d8:7c:4d:28:8d:ca:8a:03:9b:87:f3:74:
01:9d:59:ce:3c:55:19:d5:7c:1e:7e:22:fc:18:d2:93:a8:72:
ce:5f:fe:52:cd:47:38:27:7c:19:c5:6e:58:d2:19:92:54:2a:
ad:01:a5:08:02:8c:27:36:c8:e7:f3:a9:1f:f2:92:61:81:5f:
cd:db:82:73:ae:02:23:e7:75:f0:54:68:8a:68:9c:0a:d0:26:
d1:3e:95:12:fe:ee:f7:b2:bf:40:d8:a6:2b:a9:cf:26:85:1b:
71:45:bf:3f:5d:44:98:90:c6:de:e4:64:7e:eb:fe:22:6d:cf:
40:60:90:d0:8e:7a:8c:df:60:3c:75:9f:35:c1:a2:f6:41:5f:
7d:60:aa:3d:39:28:cb:97:a8:2d:06:fd:95:ef:23:c6:98:0f:
23:bd:d2:67:42:98:32:93:9f:c5:8f:4d:87:dc:f0:db:de:a6:
99:90:f2:c3:ae:db:f6:2c:b8:86:b2:2b:a7:e6:dc:f7:95:d6:
5e:ce:52:5e:c3:29:46:09:53:3c:70:6a:c3:6d:8d:10:ef:0b:
61:09:90:a9:49:fe:48:eb:43:2b:2d:66:b5:45:67:ce:ff:88:
89:3f:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:26:58 2025 by rpki-client