Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier: yYAy1OGtaFzi+rPIcb1ZT3HV97q9UK168FXc3wDuuKw=
Subject key identifier: 1D:FF:6C:C4:0F:D8:8B:5D:14:76:92:D1:09:A6:4B:0E:20:FF:FA:C1
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 01974C691051E963A17DB36E9F11184F4AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number: 0863
Signing time: Sat 07 Jun 2025 22:00:43 +0000
Manifest this update: Sat 07 Jun 2025 22:00:43 +0000
Manifest next update: Sun 08 Jun 2025 22:00:43 +0000
Files and hashes: 1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: wujZRWizZmRsRlCyk0ZSpOSGXSZuD/2dWSE7eKXmNV0=)
2: jkQkzhHIzOVrF_0fWTHIXX9_5I0.roa (hash: pncVkUUAmmkI3mdScp/gmzGpZATl1M0Wr97+Y7euT/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:10:51:e9:63:a1:7d:b3:6e:9f:11:18:4f:4a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Jun 7 22:00:43 2025 GMT
Not After : Jun 8 22:00:43 2025 GMT
Subject: CN=1dff6cc40fd88b5d147692d109a64b0e20fffac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:08:5c:fd:ac:8d:54:6c:cb:e7:ba:50:a9:
d3:b2:d8:30:9c:10:24:76:7f:dd:83:25:b8:d2:d7:
83:81:5f:63:6f:c9:27:c5:dd:02:04:1a:64:76:81:
30:32:12:23:73:80:8d:c5:50:6f:85:3c:27:4c:8d:
0d:c2:ce:a7:8a:cc:52:84:f5:17:9e:c7:f6:7c:46:
80:e4:7c:11:a1:df:9f:41:95:fe:ea:a9:b5:1c:9d:
35:82:72:9f:c1:62:7a:6c:c8:8a:c8:f9:90:60:52:
9a:ee:f9:ab:ca:46:f5:a5:90:d8:97:c9:b6:25:81:
ba:97:48:cc:7f:79:d7:d6:96:9c:ea:24:59:f1:21:
36:0e:2a:25:97:bb:53:e0:87:f0:67:c6:bd:41:4a:
53:20:24:53:42:e7:a0:d7:f3:ff:ec:fd:ea:76:8e:
8e:51:70:80:79:a7:7d:63:03:c7:52:a5:e1:ea:73:
b5:6e:94:b8:c7:06:74:34:20:87:1b:65:a7:ed:0d:
dc:78:c9:7b:55:f4:fd:5c:94:e6:f4:e4:bb:36:ed:
73:5e:7d:f5:53:73:2c:c8:a5:6e:9f:58:51:52:e0:
f6:83:2a:a0:c4:71:1d:1c:db:3f:e9:34:39:c7:f5:
3a:a4:64:f8:8e:93:d4:f3:a7:2d:0d:7e:fe:e0:80:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FF:6C:C4:0F:D8:8B:5D:14:76:92:D1:09:A6:4B:0E:20:FF:FA:C1
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:85:44:36:7e:4f:0f:c4:b5:0a:46:1d:81:4f:b1:87:ee:0a:
2e:68:62:1b:80:c7:d2:c9:c7:b3:b2:96:6d:aa:75:d6:41:cc:
4d:83:9a:bd:88:6e:52:3a:f6:8e:bc:17:d2:5b:7b:96:62:62:
1b:5a:10:48:3c:e2:96:b4:05:03:b5:1f:8d:ce:66:32:77:d5:
55:a9:75:28:20:20:cf:c2:30:63:24:7f:43:8f:0f:79:a9:f6:
c4:eb:f4:39:d1:61:c5:ca:06:a0:f4:eb:29:63:7c:50:e2:57:
e5:a6:e9:f3:7a:d0:47:8d:6d:8e:74:3e:2f:25:d9:17:3c:f0:
38:32:ae:07:c7:83:38:e5:9e:20:df:9f:8c:dc:4c:a2:20:20:
75:9a:b3:f3:13:de:eb:6d:d7:1d:b3:f0:52:b7:4a:cb:0c:b2:
8f:01:90:4d:26:9e:b7:e8:13:dc:17:f2:17:dc:29:7c:dc:cb:
5b:9e:ad:19:42:5b:b3:0d:c8:e3:10:03:ca:ad:35:08:67:6c:
5d:47:3f:b5:39:97:6c:7a:65:fd:8e:e1:c5:84:73:ea:37:bb:
86:61:4f:80:4c:37:95:8f:9c:08:27:80:e7:00:ac:65:af:e3:
7d:a9:89:5f:15:30:1e:25:ff:af:f0:9b:93:0e:37:34:12:3b:
dc:29:93:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:03:41 2025 by rpki-client